Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E570F/A29FCCC0AF2B11EF88A7C19A762E951A/9C08850E88C511F0B8E667F5DAE4EC9C.roa
File: 9C08850E88C511F0B8E667F5DAE4EC9C.roa (raw, json)
Hash identifier: YW/L9zUlH46TZ0U9hjnQ38+6eGthI2BdWmV0eNZvywg=
Subject key identifier: 04:D2:95:30:8C:E0:8E:23:70:73:60:90:2B:05:42:8C:61:35:62:2F
Certificate issuer: /CN=F36E570FAF/serialNumber=4F2E5D06850FA94B9222CF7FFE76F8B2F3012125
Certificate serial: 0123
Authority key identifier: 4F:2E:5D:06:85:0F:A9:4B:92:22:CF:7F:FE:76:F8:B2:F3:01:21:25
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Ty5dBoUPqUuSIs9__nb4svMBISU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E570F/A29FCCC0AF2B11EF88A7C19A762E951A/9C08850E88C511F0B8E667F5DAE4EC9C.roa
Signing time: Wed 03 Sep 2025 12:57:56 +0000
ROA not before: Wed 03 Sep 2025 12:57:50 +0000
ROA not after: Wed 16 Sep 2026 12:57:50 +0000
asID: 5511
IP address blocks: 102.212.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E570F/A29FCCC0AF2B11EF88A7C19A762E951A/Ty5dBoUPqUuSIs9__nb4svMBISU.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E570F/A29FCCC0AF2B11EF88A7C19A762E951A/Ty5dBoUPqUuSIs9__nb4svMBISU.mft
rsync://rpki.afrinic.net/repository/afrinic/Ty5dBoUPqUuSIs9__nb4svMBISU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 09 Sep 2025 00:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 291 (0x123)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E570FAF, serialNumber=4F2E5D06850FA94B9222CF7FFE76F8B2F3012125
Validity
Not Before: Sep 3 12:57:50 2025 GMT
Not After : Sep 16 12:57:50 2026 GMT
Subject: CN=68b83b54-602a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:12:bc:cc:ac:6a:12:37:a2:d2:7e:43:bb:4c:
d8:fc:0b:67:83:f8:8b:d9:31:9c:11:d2:17:64:52:
b4:35:55:06:aa:96:c0:24:e3:eb:cc:35:40:01:1a:
3c:e5:ca:50:55:ae:27:28:b4:fc:f9:81:03:9b:b2:
c5:68:69:4d:56:51:f7:39:69:df:c6:bc:36:57:cc:
f0:77:45:1c:1d:ca:b9:22:33:06:65:e3:49:0d:ed:
1c:f9:78:46:92:1b:49:57:b9:b4:96:5b:7c:54:39:
df:ab:f4:42:a1:a6:f5:37:31:87:a0:ee:0a:ff:b2:
d8:d6:da:da:62:43:b9:ae:4e:10:4f:65:da:fb:02:
96:ad:47:6b:f4:99:99:1e:5a:eb:c8:fb:26:7a:ee:
56:26:aa:77:eb:8e:35:47:b8:97:c3:70:24:3b:ee:
05:c9:67:cf:5a:39:98:0f:85:67:c4:2f:9d:5e:67:
8a:11:4c:3a:3a:68:f9:5a:9c:72:60:ac:e3:79:48:
05:e0:e0:45:65:96:85:0f:cb:b8:57:a2:43:da:f8:
7e:14:9c:22:9f:fb:48:08:38:83:51:d2:e9:98:cb:
26:11:9b:1f:c6:81:d7:d6:eb:7f:83:2c:10:c4:1a:
cb:60:a7:04:c7:42:ea:f9:8d:ad:52:1a:7e:76:0b:
5b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:D2:95:30:8C:E0:8E:23:70:73:60:90:2B:05:42:8C:61:35:62:2F
X509v3 Authority Key Identifier:
keyid:4F:2E:5D:06:85:0F:A9:4B:92:22:CF:7F:FE:76:F8:B2:F3:01:21:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E570F/A29FCCC0AF2B11EF88A7C19A762E951A/Ty5dBoUPqUuSIs9__nb4svMBISU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ty5dBoUPqUuSIs9__nb4svMBISU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E570F/A29FCCC0AF2B11EF88A7C19A762E951A/9C08850E88C511F0B8E667F5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.212.56.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:5a:4d:98:2c:37:9f:b3:52:2b:a3:9b:ff:07:cd:c8:59:d5:
33:7a:ea:7c:aa:91:89:63:1a:f7:c7:51:34:5a:a4:83:9e:9a:
d9:0e:77:3c:16:e5:37:be:83:8e:ff:9d:84:82:86:fb:27:5a:
f3:fc:94:48:5b:a0:33:4a:d7:f0:ae:7c:34:ce:7a:f7:81:4d:
5f:51:80:69:2f:71:2e:a5:c7:5b:1a:01:d9:04:1f:79:27:3f:
9a:53:39:c2:9a:34:3b:8a:8c:98:3b:72:10:bc:ff:aa:ca:27:
d0:bb:17:31:96:68:43:c7:be:22:d2:56:e1:99:06:75:19:e4:
31:c0:99:3a:98:b8:c2:3d:17:3c:37:cf:f1:d1:d3:2b:93:c6:
b9:8a:b0:16:d4:57:1e:b8:eb:9a:91:1a:67:76:aa:1d:4b:ad:
7f:53:34:54:6f:70:f1:da:17:58:df:5c:1d:7d:8f:2a:a6:1e:
f0:70:0d:a5:20:a3:4e:15:da:a5:c6:22:9c:3d:1e:cb:b4:95:
67:71:9f:3c:a3:3f:a3:47:22:27:9f:de:f8:47:87:a7:2b:6d:
09:fb:56:cc:ed:5c:e8:0b:38:73:6b:43:d9:ef:eb:b3:d8:80:
14:d9:95:d6:8a:3c:a5:db:9a:ee:f1:6d:ce:f9:86:e1:ed:9a:
ae:5b:13:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 06:27:03 2025 by rpki-client