Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B8EAFC9A907E11F0A69DCFCADAE4EC9C.roa
File: B8EAFC9A907E11F0A69DCFCADAE4EC9C.roa (raw, json)
Hash identifier: 3+BbD6xLF8uC6aLmgRSI15s4bv+K5xmciG2EkXiggn0=
Subject key identifier: B9:2B:9D:80:DD:B8:38:44:1F:F4:09:1B:BD:74:33:C9:6F:9D:83:C0
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 15DD
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B8EAFC9A907E11F0A69DCFCADAE4EC9C.roa
Signing time: Sat 13 Sep 2025 08:50:39 +0000
ROA not before: Sat 13 Sep 2025 08:50:33 +0000
ROA not after: Mon 13 Sep 2027 08:50:33 +0000
asID: 22773
IP address blocks: 102.129.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 18 Sep 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5597 (0x15dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Sep 13 08:50:33 2025 GMT
Not After : Sep 13 08:50:33 2027 GMT
Subject: CN=68c5305f-92a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3e:26:1a:f5:90:97:ec:97:5e:38:38:f4:95:
66:79:51:20:e4:de:27:71:36:d4:6f:5e:26:55:00:
33:53:b0:8a:a1:87:6b:10:47:bf:21:2c:e8:8c:e3:
d4:86:13:96:27:d9:df:a1:a6:b4:12:80:80:aa:50:
d8:3a:c6:d1:22:eb:a6:2b:c7:96:d6:2e:d9:35:c5:
b9:51:7f:30:7a:02:c9:34:9c:63:8c:6a:a4:da:38:
34:98:1a:c9:cf:cf:a8:cf:92:50:19:d7:c7:d3:a2:
e7:7e:50:86:6a:ee:79:f8:70:11:8a:b7:74:08:e3:
c9:8e:78:a9:72:c0:57:a7:d7:b4:04:35:64:99:29:
a4:ee:0b:a2:1b:bd:69:12:e2:1e:ae:44:9c:bf:e2:
2c:f1:6c:1c:e0:8f:b9:98:f7:b1:f6:98:18:af:d5:
3a:0f:8c:92:28:81:74:26:62:ad:d7:22:6f:67:75:
40:fc:07:8e:3e:71:d8:72:c4:d1:b0:c4:e4:e3:46:
74:32:7c:46:6f:f4:0e:82:67:a4:99:b4:75:e9:e8:
5d:15:27:5f:98:a9:64:f5:24:ac:88:68:78:15:27:
4c:ac:ab:09:bc:39:a4:15:ac:4c:de:5b:89:c0:69:
45:1b:d1:97:3d:1a:de:cf:5f:ea:b7:21:c2:10:45:
80:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:2B:9D:80:DD:B8:38:44:1F:F4:09:1B:BD:74:33:C9:6F:9D:83:C0
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B8EAFC9A907E11F0A69DCFCADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.176.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:17:bd:70:42:3a:1b:b2:bb:39:02:c4:9d:86:7b:97:d9:cc:
66:14:96:79:5c:05:00:ce:a9:8e:a5:2d:b1:a4:42:d6:99:b6:
02:82:49:67:3b:a3:27:2b:0e:98:a6:2a:52:0e:89:18:ad:c1:
4d:13:3a:a9:ff:ca:fa:ba:73:5f:0e:25:3d:0a:a4:0c:f6:a8:
20:73:65:a8:ef:0a:e8:7f:04:f2:08:5d:9e:a1:4f:2c:e6:a2:
3a:36:bc:70:41:64:41:80:5b:cd:7f:58:66:56:81:46:ec:71:
0a:18:c5:55:99:8f:a0:86:a4:22:c1:67:ad:ac:0e:a9:b2:1c:
e1:b6:22:0c:aa:41:ef:0f:13:44:13:41:f4:f3:32:3c:61:db:
ff:fb:f7:03:86:4d:6b:c9:e5:e9:53:52:a9:7b:74:c6:62:87:
1f:99:fd:dc:43:3c:15:f4:cc:d1:58:9a:20:2c:75:cb:c4:53:
2a:12:29:b3:69:d9:9b:29:a9:6f:5f:a0:f5:7c:88:ec:34:4d:
e0:6a:8b:86:cc:c9:b1:6d:f9:b8:8a:95:ad:2c:33:48:d0:73:
8c:b8:b7:dc:19:d4:de:30:73:a3:62:8d:a0:14:5c:ec:ed:77:
b3:19:95:72:a1:67:73:fe:da:0f:fa:61:34:4c:2d:f0:43:6b:
51:0b:6c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 10:45:32 2025 by rpki-client