Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/519CAF32833311F0AA5D5AA1DAE4EC9C.roa
File: 519CAF32833311F0AA5D5AA1DAE4EC9C.roa (raw, json)
Hash identifier: jUvnczleZt2woWoiOBC6fXPvEvcJ9SV+8tp6oGwynWc=
Subject key identifier: E3:6D:D0:30:83:8D:49:B1:69:9F:73:12:27:21:25:DA:D8:A1:58:11
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 15A1
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/519CAF32833311F0AA5D5AA1DAE4EC9C.roa
Signing time: Wed 27 Aug 2025 10:48:09 +0000
ROA not before: Wed 27 Aug 2025 10:48:04 +0000
ROA not after: Fri 27 Aug 2027 10:48:04 +0000
asID: 212238
IP address blocks: 102.129.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 07 Sep 2025 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5537 (0x15a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Aug 27 10:48:04 2025 GMT
Not After : Aug 27 10:48:04 2027 GMT
Subject: CN=68aee269-0f33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:39:97:37:3c:29:80:c2:6a:34:44:ef:48:ec:
e3:7e:ff:66:35:8a:c4:73:ee:bd:bc:ab:f2:d4:c3:
72:c7:9e:73:d6:b2:e3:11:bb:5a:76:02:e5:41:fe:
35:76:3d:9b:e7:dd:38:fc:49:55:07:f5:3a:37:df:
da:0d:59:63:d8:d7:42:b9:f0:ae:a7:da:ad:d6:29:
52:2f:d3:06:d0:64:40:34:16:42:d0:2a:4c:b8:38:
ee:e5:9d:58:9b:d9:cc:65:b3:82:f9:7f:dd:ed:e3:
56:38:e6:4f:6e:fb:45:1c:ca:25:f6:50:17:e4:c2:
6a:d6:67:cb:01:dc:69:d9:e4:26:c4:9d:77:db:0d:
b2:8e:e5:e9:2c:98:63:05:45:f0:f9:5d:fa:fe:11:
02:74:ee:9b:d5:74:42:62:a5:58:2b:2e:84:29:4b:
4a:1c:9f:f8:e4:d4:84:df:8a:6e:da:1f:f4:85:a7:
f0:54:9d:28:e5:55:c0:b2:76:f9:c5:3f:70:ee:72:
4d:82:49:dc:43:00:aa:3b:0f:44:d0:e9:0c:bf:ba:
ee:e1:2a:3b:b7:04:4a:ff:1c:24:19:8e:63:29:1d:
54:9d:68:16:6e:9b:35:0d:93:db:14:5d:4a:fd:8e:
f3:b9:d8:27:82:f8:b7:4b:4b:2b:58:27:ed:ff:c7:
d3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:6D:D0:30:83:8D:49:B1:69:9F:73:12:27:21:25:DA:D8:A1:58:11
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/519CAF32833311F0AA5D5AA1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.163.0/24
Signature Algorithm: sha256WithRSAEncryption
68:1e:ea:ad:69:c0:52:24:63:d3:80:69:e2:ea:6a:9e:16:c3:
0b:ea:90:74:34:a6:f2:59:c6:12:36:04:38:82:73:fd:6d:a2:
91:4d:46:7f:57:e0:3d:64:24:a1:39:0c:7b:68:13:dd:f5:69:
8f:e7:74:da:03:24:de:58:3b:7d:d4:bc:9f:b7:da:18:a5:70:
cb:4f:f6:41:e5:07:8c:b6:cc:c9:21:d2:bf:24:61:3a:e8:f9:
93:9d:33:0f:39:d2:96:c4:be:84:9d:55:bb:2d:21:6b:85:0d:
16:30:9a:12:19:8a:8d:ee:14:3f:05:12:aa:41:1c:ef:78:b7:
19:d5:84:7f:ef:fa:d6:86:c6:8c:e0:5d:fc:69:02:de:2b:8a:
5a:39:7a:e7:d6:5f:cb:8f:78:9b:23:c3:ad:20:e9:8d:5a:53:
6a:e9:c6:31:25:d2:21:08:68:92:9b:44:47:c1:38:a2:5c:69:
c6:6a:57:5c:c6:a7:79:9a:c6:52:8b:7c:ba:27:42:e8:74:ce:
62:19:d9:ad:44:ce:1f:f0:e9:4a:d8:53:15:e5:20:37:c9:0b:
8d:ae:78:5b:25:b6:d0:67:4c:4a:25:d4:eb:73:cc:e2:dc:3a:
e9:68:94:c7:ce:2b:d7:ff:d0:49:91:24:48:eb:44:c0:70:cf:
c1:42:6b:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 07:56:36 2025 by rpki-client