Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/FEF1C39C833411F0866D84ACDAE4EC9C.roa
File: FEF1C39C833411F0866D84ACDAE4EC9C.roa (raw, json)
Hash identifier: GL52I8j0+Kf8tMhnYtIWucQiWA2Ffg6PHhW/vgB8m28=
Subject key identifier: 97:8F:EB:BE:70:CD:E7:E4:3E:F3:DB:23:46:DF:25:73:F1:96:4B:A0
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 15AA
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/FEF1C39C833411F0866D84ACDAE4EC9C.roa
Signing time: Wed 27 Aug 2025 11:00:09 +0000
ROA not before: Wed 27 Aug 2025 11:00:04 +0000
ROA not after: Fri 27 Aug 2027 11:00:04 +0000
asID: 212238
IP address blocks: 102.129.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 07 Sep 2025 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5546 (0x15aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Aug 27 11:00:04 2025 GMT
Not After : Aug 27 11:00:04 2027 GMT
Subject: CN=68aee539-48b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d5:7a:28:05:73:aa:80:90:89:74:b9:4e:16:
9b:1d:95:cc:bd:a9:95:38:8b:9c:d7:64:9a:2d:9b:
2b:76:db:6d:97:b2:d2:d7:aa:76:82:0f:a8:11:02:
ac:05:ba:ce:75:98:55:1f:8e:db:a8:f1:aa:da:35:
32:46:40:f0:4d:de:e2:91:b8:34:dd:4d:5d:54:4b:
b1:89:99:9c:ab:d4:c2:c2:c0:be:9b:6c:d9:e3:19:
f7:7f:10:06:65:6a:3a:25:35:4d:af:43:f5:ac:a8:
36:58:b1:b9:3f:db:bc:9d:20:00:f7:26:c3:a0:b3:
41:08:2d:74:c6:d0:ec:55:dd:16:16:4a:fd:b5:d7:
e8:bb:7c:85:fc:9f:82:eb:2a:d1:93:10:ed:81:61:
f3:fd:bf:2c:72:55:22:32:c1:68:a7:3d:d0:e2:78:
3c:0a:ac:18:c5:ae:86:f2:d1:5b:b9:19:91:57:74:
1f:2f:ff:c8:1f:fe:5b:ea:b9:fd:fa:e6:0f:0e:bb:
e5:08:87:22:88:49:0b:d6:b3:51:e9:da:4e:7b:7b:
79:e7:82:32:38:8c:f6:ea:19:ac:3b:ac:03:9e:2a:
da:9b:d2:22:4a:f3:61:57:4b:c8:77:19:69:4b:df:
80:fb:a7:95:95:41:d1:62:1f:65:99:0b:21:7b:ee:
ba:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:8F:EB:BE:70:CD:E7:E4:3E:F3:DB:23:46:DF:25:73:F1:96:4B:A0
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/FEF1C39C833411F0866D84ACDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.204.0/24
Signature Algorithm: sha256WithRSAEncryption
97:f3:3f:a1:81:ee:be:6a:d8:0d:8e:9c:78:ac:b0:3a:01:9f:
23:1f:58:c2:3d:fc:3a:8b:1b:0a:a9:5e:9a:f2:df:0b:d3:05:
61:dd:52:26:17:aa:f9:cf:fe:b6:3e:a5:76:eb:6a:8d:e1:71:
27:36:f5:87:8f:dc:de:d0:89:36:d0:a5:4d:56:09:24:ee:4d:
7e:30:27:8f:f6:9e:34:68:32:41:5d:34:42:57:17:d8:15:3e:
21:86:c2:39:62:e3:d6:de:6f:3e:2b:e4:6c:95:21:1e:a9:51:
3d:3b:08:6f:2a:79:45:a8:2a:8d:44:18:d1:b4:f1:fd:54:de:
3f:7e:a0:a2:db:5c:90:70:17:f6:9f:36:af:b5:51:2d:b1:e9:
a3:28:e6:da:cb:f7:b9:45:65:08:60:d8:03:c5:0b:07:fe:34:
c3:bd:01:84:da:9e:d9:14:43:d8:49:7f:7c:a8:46:8c:89:84:
f1:a1:0f:ac:cb:34:1d:8c:21:10:18:77:54:38:4b:cd:ee:1a:
53:ce:76:88:41:23:7a:dc:ea:80:25:b2:38:9a:6c:f2:3c:27:
25:d9:bc:ab:c6:df:4c:86:31:d2:13:a0:f9:29:c0:10:4e:d6:
fd:7a:bf:f9:3d:62:a4:f0:8a:02:ad:6a:ea:95:5c:fa:2c:2a:
79:d1:93:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 07:54:16 2025 by rpki-client