Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FB15E/AF1E2EC2B9C911EEB2D5515A775412E6/E7E6ED96B5B911F0897D0386DAE4EC9C.roa
File: E7E6ED96B5B911F0897D0386DAE4EC9C.roa (raw, json)
Hash identifier: USTrTqgafFdAdWVQRnFi5xBXcAuIAY9hmlsS/Lw+jKU=
Subject key identifier: 59:CE:CF:1E:9A:6F:E9:3A:53:21:ED:15:30:8B:80:44:76:F4:F3:D2
Certificate issuer: /CN=F36FB15EAF/serialNumber=C9A59C63B70A8E12BD1C0B1577697171A3FEE0F1
Certificate serial: 029E
Authority key identifier: C9:A5:9C:63:B7:0A:8E:12:BD:1C:0B:15:77:69:71:71:A3:FE:E0:F1
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/yaWcY7cKjhK9HAsVd2lxcaP-4PE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FB15E/AF1E2EC2B9C911EEB2D5515A775412E6/E7E6ED96B5B911F0897D0386DAE4EC9C.roa
Signing time: Thu 30 Oct 2025 17:57:31 +0000
ROA not before: Thu 30 Oct 2025 17:57:24 +0000
ROA not after: Tue 01 Dec 2026 17:57:24 +0000
asID: 329386
IP address blocks: 102.210.53.0/24 maxlen: 24
2c0f:3c0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FB15E/AF1E2EC2B9C911EEB2D5515A775412E6/yaWcY7cKjhK9HAsVd2lxcaP-4PE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FB15E/AF1E2EC2B9C911EEB2D5515A775412E6/yaWcY7cKjhK9HAsVd2lxcaP-4PE.mft
rsync://rpki.afrinic.net/repository/afrinic/yaWcY7cKjhK9HAsVd2lxcaP-4PE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 03 Nov 2025 00:06:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 670 (0x29e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FB15EAF, serialNumber=C9A59C63B70A8E12BD1C0B1577697171A3FEE0F1
Validity
Not Before: Oct 30 17:57:24 2025 GMT
Not After : Dec 1 17:57:24 2026 GMT
Subject: CN=6903a70b-3e65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:45:bb:ed:80:e8:43:09:c1:a4:a7:31:b5:03:
4d:e3:a4:58:90:03:1e:23:a1:ed:8a:56:28:f5:b0:
ea:1f:fa:63:a8:db:cd:ae:66:4c:07:36:42:8c:0b:
e9:d3:25:2e:5b:ed:e6:fb:44:e5:72:6c:cb:15:ba:
98:ea:ca:8b:4f:d9:80:7a:8a:76:a8:ca:65:72:90:
81:ff:91:a9:92:47:cb:87:34:49:4a:ef:70:51:eb:
5e:db:23:d2:88:24:98:ee:ae:94:91:29:50:79:f6:
59:56:00:2f:e5:2b:64:35:8a:4f:bc:7f:e1:d5:84:
c2:3f:b8:9d:74:c0:b0:6b:57:26:38:b3:70:f1:cd:
d2:e4:68:94:e7:93:fd:79:2b:aa:09:62:77:a5:c6:
a0:34:54:13:96:0c:f8:1f:6d:53:00:c4:45:fe:21:
a8:25:13:84:cc:eb:36:e1:d8:69:c1:2c:94:f3:69:
13:ec:7e:9e:1f:4f:5f:2e:6a:20:85:1e:3c:c6:9f:
38:2a:ad:f9:13:4e:fa:50:4e:f3:26:bd:eb:79:1d:
de:d1:92:0f:31:69:8f:24:d2:7d:61:ef:a7:ec:f9:
f8:dc:58:79:4b:39:f9:19:f8:b7:97:93:2f:17:fa:
b7:31:81:f2:70:73:72:05:af:ef:51:60:c7:29:84:
5a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:CE:CF:1E:9A:6F:E9:3A:53:21:ED:15:30:8B:80:44:76:F4:F3:D2
X509v3 Authority Key Identifier:
keyid:C9:A5:9C:63:B7:0A:8E:12:BD:1C:0B:15:77:69:71:71:A3:FE:E0:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB15E/AF1E2EC2B9C911EEB2D5515A775412E6/yaWcY7cKjhK9HAsVd2lxcaP-4PE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yaWcY7cKjhK9HAsVd2lxcaP-4PE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB15E/AF1E2EC2B9C911EEB2D5515A775412E6/E7E6ED96B5B911F0897D0386DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.210.53.0/24
IPv6:
2c0f:3c0::/32
Signature Algorithm: sha256WithRSAEncryption
2e:2b:0c:3d:21:f7:c1:a4:d3:e2:ff:dc:95:5f:ce:c0:32:3b:
64:db:5c:1a:0c:0d:c4:1e:d0:58:08:d5:ee:52:24:c9:53:53:
18:e5:72:48:e7:08:a9:bf:75:4d:76:55:43:1e:ed:70:4c:61:
40:63:6d:db:83:a0:a7:3a:9c:45:c5:7e:10:af:74:b3:89:52:
6d:dc:b3:0e:f3:03:a0:63:56:62:32:5c:bc:f7:30:63:ca:62:
51:3f:a1:01:d3:8b:58:9f:55:26:6a:68:03:52:5c:e0:a0:e1:
87:a3:79:0d:fc:fc:40:33:b0:5e:72:07:2c:2e:4a:06:9e:81:
8a:78:b3:d9:39:a1:b9:f1:53:49:f7:da:04:5f:c7:8d:d2:f5:
72:5e:24:25:0a:6a:74:b6:e7:5b:52:2f:f9:b8:bd:13:f7:9a:
ac:13:e3:62:ac:9b:4e:6e:3e:ca:4e:db:c7:4b:ef:14:1a:24:
94:7c:c4:15:90:4d:f8:99:a4:b1:be:9f:cd:c7:64:f1:84:48:
25:84:1f:c0:1d:9c:18:36:13:30:49:a2:02:00:cf:a4:e5:9a:
ba:a9:da:d3:78:45:e1:f5:4b:6e:e8:5f:0d:d3:7a:f8:c2:1e:
4a:9f:80:72:b8:1c:7a:4b:25:d8:8a:a5:5b:0f:47:43:25:7f:
7b:59:03:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 16:34:50 2025 by rpki-client