Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/FA84C44A866711F08461218FDAE4EC9C.roa
File: FA84C44A866711F08461218FDAE4EC9C.roa (raw, json)
Hash identifier: aV0UPeh0/cSN4lwF3D4pTJ7DxJd1Lgesu1wBO2QhuZk=
Subject key identifier: 8E:3F:AF:A4:E8:FA:51:FE:E1:D2:64:12:8B:6D:74:EB:01:08:6C:09
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 15B1
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/FA84C44A866711F08461218FDAE4EC9C.roa
Signing time: Sun 31 Aug 2025 12:42:39 +0000
ROA not before: Sun 31 Aug 2025 12:42:34 +0000
ROA not after: Tue 31 Aug 2027 12:42:34 +0000
asID: 9304
IP address blocks: 102.165.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 07 Sep 2025 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5553 (0x15b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Aug 31 12:42:34 2025 GMT
Not After : Aug 31 12:42:34 2027 GMT
Subject: CN=68b4433f-9259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4f:27:12:66:af:a6:00:22:b0:6d:92:5a:19:
be:01:50:28:88:54:cd:c6:c3:e2:7d:c7:1a:ba:2a:
0e:9c:3f:09:e7:7b:98:e9:3f:a4:fc:61:fe:8a:42:
04:86:52:91:59:aa:32:cf:21:c0:00:4f:7c:e1:e5:
dc:6c:a3:e8:eb:e3:65:d7:85:79:27:62:4c:1e:3b:
7a:ea:0b:a3:79:63:12:2b:6c:30:11:3e:c5:02:2f:
fa:ab:90:57:8c:bd:68:d4:21:ca:45:fa:d8:f6:1a:
24:92:f7:22:58:23:7c:06:1c:8f:56:7a:98:6a:6b:
c8:88:26:04:f4:44:4b:e3:29:22:0e:16:98:4e:04:
46:c7:14:7f:89:54:a1:d1:05:3f:01:90:ad:08:2f:
1b:1b:45:e0:6a:05:33:4c:38:17:e5:89:8f:22:b2:
1c:49:77:17:57:0f:ee:fd:a6:bf:d0:98:38:03:94:
7f:39:0a:ed:81:57:fd:57:d7:f3:26:8e:bb:fb:26:
0b:50:b4:32:16:b3:f9:2c:8e:23:ab:44:d1:32:84:
ff:63:d1:aa:b2:b8:52:34:ca:2f:be:8c:8d:d2:0f:
ec:38:42:1f:54:b1:f3:12:b7:31:c2:a6:a2:02:20:
f4:f7:78:8a:16:ea:62:4f:9c:9e:2a:ce:54:cf:d4:
f6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:3F:AF:A4:E8:FA:51:FE:E1:D2:64:12:8B:6D:74:EB:01:08:6C:09
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/FA84C44A866711F08461218FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.43.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:65:29:1d:57:a0:56:9d:bb:01:1e:a4:b5:cd:2f:0f:27:88:
59:f5:1e:05:00:f1:61:f3:97:6d:d2:de:52:9d:86:84:85:74:
09:7d:37:36:59:26:f5:c0:a5:63:4d:e7:cb:f5:f1:9f:71:9b:
df:0b:bf:5f:31:45:2c:67:d8:86:44:05:b4:6e:05:69:15:12:
94:2a:27:1b:c0:c3:a9:6c:5f:96:66:88:35:98:f5:5f:f4:e9:
a3:bb:c9:33:f6:6b:a3:f6:21:73:56:18:52:93:84:08:e8:d6:
85:94:8d:f4:c2:76:b0:ba:67:ee:e6:01:5b:fd:b0:38:0b:5c:
3d:7c:d4:cc:79:e1:bd:7f:f0:67:64:0a:93:8c:33:28:3d:c8:
dd:4b:3c:47:43:68:94:66:9a:23:5d:d6:88:be:8c:27:89:73:
a9:a4:ec:24:e3:0a:14:77:61:57:34:ab:fc:17:23:a6:29:3c:
4c:50:1c:5e:b6:dd:32:f4:0c:a1:2a:a7:e1:65:c2:2b:f1:6c:
4f:d3:39:f1:97:60:85:1c:7c:ef:be:89:b6:7f:6a:b5:37:1c:
db:47:35:86:ca:b5:1b:fc:3b:38:9e:41:fd:b2:61:f1:10:8c:
fd:82:08:18:06:65:07:75:b3:38:41:dc:de:c4:be:92:80:33:
b6:f2:c4:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 09:57:03 2025 by rpki-client