Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/F3558888612511F098D6E98EDAE4EC9C.roa
File: F3558888612511F098D6E98EDAE4EC9C.roa (raw, json)
Hash identifier: JDtyMwOOrKTy2qsgEw1FCl42QKzix0RW6dRZVcnlssk=
Subject key identifier: D8:46:D0:3E:DD:87:45:D6:CD:9E:93:FD:48:76:A2:C7:4D:C8:FF:14
Certificate issuer: /CN=F36E4B69AF/serialNumber=CA6642EA9AFCC73AA24AA4047544B17C2603CBD2
Certificate serial: 0291
Authority key identifier: CA:66:42:EA:9A:FC:C7:3A:A2:4A:A4:04:75:44:B1:7C:26:03:CB:D2
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ymZC6pr8xzqiSqQEdUSxfCYDy9I.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/F3558888612511F098D6E98EDAE4EC9C.roa
Signing time: Tue 15 Jul 2025 02:46:48 +0000
ROA not before: Tue 15 Jul 2025 02:46:42 +0000
ROA not after: Sun 31 Dec 2028 02:46:42 +0000
asID: 36912
IP address blocks: 102.244.45.0/24 maxlen: 24
102.244.98.0/24 maxlen: 24
102.244.99.0/24 maxlen: 24
102.244.197.0/24 maxlen: 24
102.244.210.0/24 maxlen: 24
102.244.221.0/24 maxlen: 24
102.244.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/ymZC6pr8xzqiSqQEdUSxfCYDy9I.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/ymZC6pr8xzqiSqQEdUSxfCYDy9I.mft
rsync://rpki.afrinic.net/repository/afrinic/ymZC6pr8xzqiSqQEdUSxfCYDy9I.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 03 Aug 2025 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 657 (0x291)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E4B69AF, serialNumber=CA6642EA9AFCC73AA24AA4047544B17C2603CBD2
Validity
Not Before: Jul 15 02:46:42 2025 GMT
Not After : Dec 31 02:46:42 2028 GMT
Subject: CN=6875c118-64cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9e:7b:15:ea:26:a8:06:7f:25:ba:76:7a:01:
4a:15:cd:a9:36:36:d4:dc:f1:5c:ab:bc:d1:98:44:
dd:20:dc:87:68:d7:d7:52:34:7f:c4:b0:0e:e3:ac:
ff:66:56:99:4b:9e:cf:a3:6a:5e:c9:d5:22:79:b8:
f3:8a:58:14:8e:33:98:50:d7:bf:1e:c9:90:5a:b4:
51:9a:e0:12:84:16:5a:3c:e7:93:c5:3f:3b:5c:7d:
7a:d3:64:ff:4b:22:e7:f3:69:14:1a:1b:fe:73:49:
45:a6:b7:c2:d3:f0:da:7b:3a:e1:a5:c7:83:11:b9:
55:82:ce:53:dd:fa:45:1e:96:44:59:75:77:f6:d9:
b4:75:d5:47:f0:77:cc:0d:43:d4:5f:61:66:5a:b6:
d9:ec:6a:e1:fd:9d:54:c5:2e:fa:f7:33:58:9a:b5:
18:9d:20:fe:08:21:09:c9:8f:0e:9b:15:88:90:18:
df:a9:1f:ac:76:2a:c2:8c:97:cc:d5:45:ea:1a:e2:
1a:73:a9:0d:15:59:8f:12:d2:ad:65:88:ac:81:4f:
4b:90:62:c9:ae:ba:99:7a:00:bc:3d:4a:34:bc:af:
37:00:6a:cd:30:13:33:39:30:78:3e:8d:1e:6c:2a:
55:e9:b8:15:5a:a8:f0:ac:af:aa:0e:95:ac:e4:01:
9e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:46:D0:3E:DD:87:45:D6:CD:9E:93:FD:48:76:A2:C7:4D:C8:FF:14
X509v3 Authority Key Identifier:
keyid:CA:66:42:EA:9A:FC:C7:3A:A2:4A:A4:04:75:44:B1:7C:26:03:CB:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/ymZC6pr8xzqiSqQEdUSxfCYDy9I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ymZC6pr8xzqiSqQEdUSxfCYDy9I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/F3558888612511F098D6E98EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.244.45.0/24
102.244.98.0/23
102.244.197.0/24
102.244.210.0/24
102.244.221.0/24
102.244.223.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:91:66:17:72:ce:78:43:9f:59:3b:89:d8:41:fa:8f:52:0d:
fd:1f:2e:b6:20:9e:81:5d:40:6b:14:71:2f:f8:7a:6b:0f:ea:
5d:35:06:89:2d:ea:e5:72:0e:19:7d:d4:a0:1d:60:cc:25:80:
fe:e9:87:ba:0e:f0:27:63:72:13:75:87:ae:24:d3:c6:dd:a7:
d5:8f:7b:b1:23:5e:47:fc:9f:07:f4:49:84:c0:75:2c:44:14:
13:b1:01:eb:4c:04:28:bd:bb:1f:a5:12:ef:26:43:2e:d3:5d:
ce:6c:39:0f:44:11:00:af:82:f8:ba:d7:18:b5:1c:7f:25:8d:
61:2d:3f:b4:46:a0:09:d8:6f:8b:c7:9b:ab:76:2e:e1:96:aa:
d1:4d:b9:7f:f0:5f:1d:89:ec:12:20:3c:47:0d:84:a1:5c:b8:
59:d0:52:9c:77:4d:cc:18:85:6f:aa:c5:9b:51:07:3f:b0:1e:
a1:ed:5c:da:6f:94:c6:f0:cd:d8:db:ea:e9:d2:57:f5:ac:5e:
92:06:56:d0:98:cb:ff:92:75:c1:bf:70:e7:1d:19:fd:ba:44:
8e:2e:17:1a:c4:9c:1d:63:af:75:07:2e:64:b3:08:4a:92:00:
48:14:e2:be:2f:73:0a:e6:ca:45:e1:b2:d7:0f:d6:50:22:e4:
78:0c:fc:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 1 18:17:31 2025 by rpki-client