Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/63BB68DA8F9411F08B3E4BE0DAE4EC9C.roa
File: 63BB68DA8F9411F08B3E4BE0DAE4EC9C.roa (raw, json)
Hash identifier: LoN0NEaVQyaZS+SOsF7DA+B8CieeRexbx2R62RNs1hs=
Subject key identifier: 99:0B:84:92:98:25:DC:79:1D:46:CC:C3:20:C6:AD:7E:E0:F2:9F:DD
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 15DA
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/63BB68DA8F9411F08B3E4BE0DAE4EC9C.roa
Signing time: Fri 12 Sep 2025 04:53:14 +0000
ROA not before: Fri 12 Sep 2025 04:53:09 +0000
ROA not after: Sun 12 Sep 2027 04:53:09 +0000
asID: 834
IP address blocks: 102.129.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 18 Sep 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5594 (0x15da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Sep 12 04:53:09 2025 GMT
Not After : Sep 12 04:53:09 2027 GMT
Subject: CN=68c3a73a-93e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ad:2e:8f:8f:53:80:4d:ed:7c:a2:d1:41:43:
ee:5a:b5:df:64:38:c1:ca:2c:bd:4a:7f:97:b3:7c:
38:ed:b4:69:f7:c0:2d:0c:c6:16:6d:fd:cc:1c:99:
cd:d2:17:bb:9c:52:b5:4c:ac:7f:c4:be:69:da:10:
a3:a5:e1:d5:fe:3d:76:18:04:b5:bc:e4:1c:84:8c:
f0:7e:47:74:da:e4:ec:44:c6:e4:16:3e:1e:4c:92:
25:5c:5a:6a:58:e9:a8:b1:3c:01:fd:85:df:6e:56:
d2:a6:d8:af:52:a8:b0:2b:1c:f2:5e:50:40:d8:4c:
6c:b1:24:64:b6:ff:fb:b6:ba:9d:8c:55:10:9d:c1:
d5:2f:87:d9:96:d8:ed:44:fc:28:59:31:ff:8c:e9:
26:57:65:88:60:ae:e1:a2:b5:19:df:7e:d0:00:4d:
2f:81:42:c6:42:08:79:89:5d:7a:be:9c:e2:4b:1d:
16:95:46:1a:03:7e:74:a0:30:0e:4f:00:2e:42:b3:
cf:16:cf:b8:76:3c:77:95:29:d6:37:52:22:c4:9a:
84:96:85:50:f7:48:44:8c:87:36:51:aa:fb:3f:da:
dd:11:67:7e:3b:e6:32:e0:d6:b5:de:d1:8c:b6:ad:
6e:2d:a8:05:c5:73:68:5d:70:50:2a:ea:a8:a6:2a:
aa:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:0B:84:92:98:25:DC:79:1D:46:CC:C3:20:C6:AD:7E:E0:F2:9F:DD
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/63BB68DA8F9411F08B3E4BE0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.173.0/24
Signature Algorithm: sha256WithRSAEncryption
10:6d:8e:a4:6c:f8:a0:00:62:e9:39:14:6a:4f:61:28:55:b9:
8e:80:54:65:68:d2:8d:73:5c:39:27:0e:79:b4:06:46:1d:53:
a1:89:e9:f2:2f:97:d7:c2:5c:5c:e7:be:95:10:b1:ae:b3:48:
c5:54:71:72:1a:95:3a:8e:a7:b7:19:59:44:0c:7a:6f:3e:d5:
36:f4:72:0d:17:5a:87:2f:26:87:91:3b:a7:1c:5e:f1:17:29:
c4:ae:4e:17:44:f8:6b:79:bd:8d:a9:7b:1d:29:a9:66:f3:13:
27:cd:e2:54:b4:5b:43:bb:59:b8:fc:a4:88:a6:6a:e7:e7:e9:
38:2e:81:06:0d:6a:f3:5f:d3:16:7a:8f:45:e3:0c:20:07:1c:
5d:e2:c1:62:15:8d:f4:da:72:ee:d1:1a:94:2d:58:1c:c6:31:
de:3a:48:9a:3f:e1:97:d8:f6:62:77:64:b2:0c:2a:2b:ba:77:
28:23:06:5a:88:b0:89:c1:a6:a4:d3:e9:14:6e:f0:4b:4d:1d:
85:76:6a:81:e2:fb:47:2d:c8:ab:96:16:65:ad:f3:65:10:ec:
af:57:7c:28:ab:e4:8b:5a:19:cb:21:b4:2a:8b:74:b1:25:56:
8b:b8:5e:e8:90:ad:12:41:ef:34:5a:31:47:4d:37:b7:3f:6d:
63:fc:fb:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 10:43:24 2025 by rpki-client