Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B274FDD6833411F08FC631AADAE4EC9C.roa
File: B274FDD6833411F08FC631AADAE4EC9C.roa (raw, json)
Hash identifier: OlbTqsqTg/5GS0VjLypgupHzuQRfcHlUaFfDtA1jAHE=
Subject key identifier: 9B:BB:4C:0C:C1:76:97:B4:74:C1:BF:A9:32:FC:24:F5:04:1D:A9:E3
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 15A7
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B274FDD6833411F08FC631AADAE4EC9C.roa
Signing time: Wed 27 Aug 2025 10:58:01 +0000
ROA not before: Wed 27 Aug 2025 10:57:55 +0000
ROA not after: Fri 27 Aug 2027 10:57:55 +0000
asID: 212238
IP address blocks: 102.129.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 07 Sep 2025 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5543 (0x15a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Aug 27 10:57:55 2025 GMT
Not After : Aug 27 10:57:55 2027 GMT
Subject: CN=68aee4b9-7661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:57:64:c0:66:a8:08:db:81:4b:d9:61:b0:19:
1a:f0:e6:bb:24:17:92:60:55:a3:18:c2:0c:bb:26:
f4:ec:5f:39:7f:d5:c1:ee:e6:ec:11:bc:03:16:a9:
3d:e2:2e:33:fd:c0:cb:c4:fa:ff:32:44:05:14:fd:
e8:ab:90:cd:78:4b:70:8e:c6:53:3e:ee:51:b8:7f:
fa:39:97:e2:55:f2:35:34:1b:63:7b:5a:6c:6b:28:
51:95:f2:76:68:cd:7f:5b:3f:0e:10:8c:90:54:c4:
2b:54:a1:d6:f6:92:97:57:a6:88:62:39:db:a8:8a:
41:76:f3:c3:3f:46:98:42:01:39:ce:69:4b:c9:4f:
cf:96:05:6c:2c:3d:cb:79:9f:ff:91:fe:9e:d9:1f:
86:af:66:b4:2d:98:fd:1c:2a:6a:79:a8:f8:64:65:
41:0e:ff:3a:da:b5:d7:f5:a5:38:2e:fb:6e:e1:44:
57:0e:19:da:f9:0f:63:04:c3:b1:ce:71:f1:51:ad:
37:bf:01:05:40:29:45:a1:4d:a6:ec:48:eb:d9:73:
ec:cc:d6:84:4d:0d:6d:1a:f0:ca:b9:6f:b7:b2:aa:
aa:bb:7f:28:36:9a:47:2f:0c:11:6b:aa:c9:6b:bd:
1f:ea:19:87:9b:02:17:d8:8c:9d:29:a5:8a:a9:53:
e7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:BB:4C:0C:C1:76:97:B4:74:C1:BF:A9:32:FC:24:F5:04:1D:A9:E3
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B274FDD6833411F08FC631AADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.171.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:b3:e1:81:d0:fa:96:ec:cf:07:7f:29:53:ca:8f:20:9a:4e:
ec:43:79:a1:10:04:31:96:73:81:0a:b2:7d:5c:d0:8c:5c:d0:
4b:4b:e9:ab:37:79:8c:06:c4:cd:0c:d5:40:e8:c9:69:6f:e7:
1f:87:81:65:25:89:e3:a2:a2:3f:5c:24:43:7d:a8:ad:37:b8:
36:25:35:35:42:d9:86:ca:02:da:85:bc:75:74:a9:8f:85:68:
b1:b2:86:cd:60:19:52:84:66:18:c8:fa:60:0c:24:e1:04:51:
a9:f7:2e:ac:d2:13:39:b1:6b:86:e4:86:5d:e8:c0:23:eb:f3:
19:26:6a:b7:47:fd:59:77:e4:5a:2c:a2:35:4e:10:47:fa:84:
2b:6c:d9:21:5d:92:4a:a4:1d:28:ab:aa:cd:b9:08:58:e7:58:
d9:94:4b:e3:23:62:e7:ab:3c:86:70:99:e2:1e:a2:d9:5f:e4:
43:cb:0d:6a:bf:2c:5f:36:11:83:cb:04:9b:c8:df:8c:8e:a7:
a5:1c:20:a6:25:ae:89:f6:b4:1d:a7:da:9f:22:fd:31:4c:31:
46:13:37:c8:17:85:3c:cc:92:bf:97:c8:74:f5:fd:09:03:fd:
ae:e8:f4:3e:8e:3d:78:8e:41:fd:b1:09:eb:47:8e:76:b0:0d:
7a:de:55:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 07:55:29 2025 by rpki-client