Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/11E937CC8D8611F093E790D2DAE4EC9C.roa
File: 11E937CC8D8611F093E790D2DAE4EC9C.roa (raw, json)
Hash identifier: nCPohHq9AgkIFrL2Ay3yixrYFlrMjaSqkgwhdWyOHaI=
Subject key identifier: B1:91:F7:38:A8:B2:E9:28:B7:D9:74:C2:C9:90:9E:8E:04:B5:60:5A
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 15C9
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/11E937CC8D8611F093E790D2DAE4EC9C.roa
Signing time: Tue 09 Sep 2025 14:05:42 +0000
ROA not before: Tue 09 Sep 2025 14:05:37 +0000
ROA not after: Thu 09 Sep 2027 14:05:37 +0000
asID: 212384
IP address blocks: 102.129.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 18 Sep 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5577 (0x15c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Sep 9 14:05:37 2025 GMT
Not After : Sep 9 14:05:37 2027 GMT
Subject: CN=68c03436-e62c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e4:ae:d8:13:d1:7a:68:78:80:1a:3c:28:12:
c4:db:06:18:0d:54:83:12:37:cb:c0:9a:c7:69:47:
d9:db:7f:3c:79:f7:74:29:2b:01:78:81:f1:25:8d:
bc:db:d9:20:f2:a7:b6:52:a4:99:14:fc:46:96:40:
ab:bb:73:7a:78:4c:12:23:fb:8b:7c:a8:fc:74:29:
31:a7:f9:e1:7e:0d:b5:d1:ce:f4:81:f1:ad:2a:74:
cd:45:16:c0:fa:7d:bc:5f:9b:8e:1b:e2:da:a4:22:
cb:4c:db:38:d7:8b:f1:86:c3:d9:9a:8c:4d:b9:a1:
81:94:4e:bf:f0:8a:f3:41:e2:3d:83:4c:fc:49:6f:
dd:b5:1b:df:b5:e8:0a:9e:17:42:e5:ad:5f:2c:d8:
08:bb:ca:fe:e0:f5:0d:a5:3c:2a:2d:bf:d8:d2:e2:
db:27:2a:f7:a5:54:c1:d0:16:53:fe:6f:dc:35:43:
68:51:fa:1f:1c:eb:15:ad:6e:8e:2b:77:ab:75:75:
c7:ff:b8:17:16:62:3b:82:08:b5:57:72:7d:27:c7:
f6:8e:8f:11:0b:5c:bb:52:56:78:c1:6f:b3:30:64:
28:e8:cb:12:f4:93:16:46:02:27:8a:4e:73:ca:18:
2e:5a:66:83:25:3b:29:f3:63:50:34:74:cf:db:19:
8d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:91:F7:38:A8:B2:E9:28:B7:D9:74:C2:C9:90:9E:8E:04:B5:60:5A
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/11E937CC8D8611F093E790D2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.208.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:e2:18:94:b1:71:29:44:55:9f:da:f6:2e:bb:81:fc:78:c0:
fe:1f:9c:e8:74:6d:d0:66:03:e5:54:ee:65:73:c6:82:8a:57:
80:ab:ea:83:f4:1f:d0:d5:36:c0:7e:af:65:a7:02:b7:1d:9b:
23:60:b1:26:8a:4b:8d:0e:d0:2d:88:4c:eb:b4:9c:5e:a3:8d:
69:0a:13:64:46:f9:3c:cf:79:cf:c2:06:4f:3c:61:9b:82:2f:
ae:aa:38:ca:ec:cd:9c:c8:00:52:57:f8:37:75:47:20:da:28:
35:fa:4c:b7:87:8b:0c:e4:21:59:e4:e6:c0:69:d6:bd:27:ce:
3f:4c:7e:2c:dc:ce:3e:f7:9a:a1:1d:02:8c:58:79:9d:15:5f:
2c:a7:06:7f:6b:d1:98:5c:1a:f5:c1:90:24:f9:f5:5f:bb:a4:
d2:ee:98:5c:40:f3:1f:be:4e:c0:4f:56:5c:99:00:a5:38:91:
93:ec:a0:bc:e9:01:09:b8:4e:73:75:43:a2:43:04:eb:34:25:
1f:f1:c1:6c:6f:b4:de:00:5e:bf:23:0f:bf:6c:ad:b2:a6:c7:
3e:db:fd:e0:8c:5c:81:82:20:8e:01:9a:04:f6:03:e2:d4:15:
ab:48:e9:1a:a4:6e:6c:66:9d:e5:ba:a6:15:65:30:31:29:83:
c8:0a:84:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 10:45:14 2025 by rpki-client