Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/3EDAC97C961311F0A94765E5DAE4EC9C.roa
File: 3EDAC97C961311F0A94765E5DAE4EC9C.roa (raw, json)
Hash identifier: xzqYk1yCFOqO4Hii2oMXjmevMUMuRVUIqxpokQwsol4=
Subject key identifier: 05:7C:C0:FB:6D:43:65:7C:B8:70:A7:C7:00:43:F3:96:FF:4A:DF:5B
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 15F5
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/3EDAC97C961311F0A94765E5DAE4EC9C.roa
Signing time: Sat 20 Sep 2025 11:16:25 +0000
ROA not before: Sat 20 Sep 2025 11:16:18 +0000
ROA not after: Mon 20 Sep 2027 11:16:18 +0000
asID: 9304
IP address blocks: 102.129.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5621 (0x15f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Sep 20 11:16:18 2025 GMT
Not After : Sep 20 11:16:18 2027 GMT
Subject: CN=68ce8d09-84cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:07:94:1c:81:8e:a8:44:c4:56:ad:db:d1:0b:
1c:4b:10:d7:49:98:20:b7:07:51:0a:0a:c0:d4:6c:
ee:e6:c8:0a:cb:78:23:e4:5b:f2:25:e7:ad:29:e9:
13:c9:bc:dc:9c:2f:73:50:94:27:6f:58:93:c6:c9:
aa:6d:ea:c9:5f:5d:f4:17:31:fb:5b:6f:8a:24:de:
e5:da:29:11:b0:37:52:e9:ae:68:5c:71:68:ae:48:
39:be:17:fa:16:f9:20:82:95:b2:e8:1f:0c:f6:c3:
a8:5f:2b:29:67:43:0f:da:1a:87:fb:b2:22:61:96:
cb:8a:b8:fb:18:d8:2a:42:3b:aa:84:c5:48:d6:c9:
a9:89:a0:43:8f:d2:21:fc:1e:93:88:fb:cb:00:31:
7a:f9:fb:3e:54:d9:4d:54:5d:c5:8f:f3:6b:03:18:
24:5d:e2:42:db:51:e2:2c:08:c2:a4:6d:f8:c5:ea:
ec:ed:e1:27:64:2d:64:33:28:ea:4c:e3:9a:4b:1c:
12:43:92:d2:98:7c:8a:5a:a7:ab:3a:70:05:ab:63:
3a:10:51:92:65:46:c9:9a:22:7d:a1:0f:71:9b:10:
d2:ea:90:bf:fd:50:f5:7d:bc:48:af:2c:69:69:09:
0e:e6:39:32:db:e8:7f:f7:18:aa:6c:4c:ed:09:7d:
11:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:7C:C0:FB:6D:43:65:7C:B8:70:A7:C7:00:43:F3:96:FF:4A:DF:5B
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/3EDAC97C961311F0A94765E5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.142.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:90:80:f0:64:7d:ea:ee:af:be:a9:66:a4:67:f8:c8:44:64:
6d:b6:cc:42:aa:22:04:81:e2:cd:29:15:8b:c4:da:a2:c7:a8:
b8:2e:47:cd:aa:5d:ab:d2:09:1a:1b:de:7d:e7:2e:cf:92:fd:
db:d2:f2:a3:d7:c7:54:a0:c9:3d:8c:f0:ae:57:f7:67:6c:e6:
49:2c:38:23:e8:91:d7:f7:cc:66:32:75:71:85:90:04:77:5f:
07:c4:09:a5:db:cc:17:fe:ba:7a:3d:06:c0:cb:e2:b6:4e:1b:
4f:16:4e:14:8a:0e:fb:68:f2:40:49:b9:ca:77:53:f3:7d:f8:
dc:1b:c7:54:bd:63:10:e4:80:94:2b:eb:b1:28:b4:be:4c:e3:
a6:b6:97:ef:3a:31:b0:77:b2:ae:8a:09:f3:8e:ec:9f:17:e9:
6d:6e:4d:9b:5d:8d:f5:a7:1a:f7:f8:1a:80:25:9a:f8:e6:0e:
98:81:f4:d8:a3:da:ca:fa:6f:dd:98:83:78:c0:d0:fb:48:e9:
94:cf:ec:a6:15:d4:d4:b1:8a:49:14:34:ac:2e:21:3a:1a:15:
55:50:b1:4a:0b:2f:41:2b:77:66:9c:b0:7e:6e:4d:b7:7b:45:
fa:54:00:ed:31:00:97:62:4c:38:01:7f:81:36:57:a3:62:ee:
19:88:4b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:34:26 2025 by rpki-client