Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36877BB/3887CD041CF711EFAEF87C1E7DDC24C2/D36F9FC09E1211F0966632AEDAE4EC9C.roa
File: D36F9FC09E1211F0966632AEDAE4EC9C.roa (raw, json)
Hash identifier: bJSVRApPrsDM0DOSvCfvAqU85OY/qAv2av1QekfCggw=
Subject key identifier: 82:BD:B5:99:45:0B:72:8B:20:0E:67:BD:C7:6A:03:3E:34:DA:8F:80
Certificate issuer: /CN=F36877BBAF/serialNumber=0DC6A4C82109FF2CB39C1D1A58C38E3033C5A0FE
Certificate serial: 024C
Authority key identifier: 0D:C6:A4:C8:21:09:FF:2C:B3:9C:1D:1A:58:C3:8E:30:33:C5:A0:FE
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/DcakyCEJ_yyznB0aWMOOMDPFoP4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36877BB/3887CD041CF711EFAEF87C1E7DDC24C2/D36F9FC09E1211F0966632AEDAE4EC9C.roa
Signing time: Tue 30 Sep 2025 15:33:35 +0000
ROA not before: Tue 30 Sep 2025 15:33:30 +0000
ROA not after: Sun 30 Sep 2035 15:33:30 +0000
asID: 328721
IP address blocks: 102.222.58.0/24 maxlen: 24
102.222.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36877BB/3887CD041CF711EFAEF87C1E7DDC24C2/DcakyCEJ_yyznB0aWMOOMDPFoP4.crl
rsync://rpki.afrinic.net/repository/member_repository/F36877BB/3887CD041CF711EFAEF87C1E7DDC24C2/DcakyCEJ_yyznB0aWMOOMDPFoP4.mft
rsync://rpki.afrinic.net/repository/afrinic/DcakyCEJ_yyznB0aWMOOMDPFoP4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 04:17:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 588 (0x24c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36877BBAF, serialNumber=0DC6A4C82109FF2CB39C1D1A58C38E3033C5A0FE
Validity
Not Before: Sep 30 15:33:30 2025 GMT
Not After : Sep 30 15:33:30 2035 GMT
Subject: CN=68dbf84e-69ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:70:92:83:71:2b:6e:b8:89:b1:88:bf:99:0c:
25:43:47:4a:7f:d5:94:ec:0b:1e:57:43:e1:08:7a:
c4:93:1c:36:83:19:15:91:b4:c3:1c:a0:cd:63:00:
07:bf:ce:89:94:02:e0:1c:24:c8:28:ec:e5:5e:e0:
ed:2a:4c:31:60:6f:f7:63:2c:15:d1:21:16:7b:87:
6c:9e:e1:28:85:62:5c:dd:a0:e6:01:7c:f5:6d:39:
ef:87:db:9b:83:db:a1:1e:11:ef:7d:15:9b:86:ea:
6e:b4:54:0f:fa:90:07:a1:15:56:ef:16:18:dc:0f:
25:a7:75:df:0b:7c:0f:3c:59:39:e4:c0:c8:b6:4b:
18:02:e3:41:a8:8e:71:52:f7:59:95:48:14:41:1a:
ff:f6:dd:9b:88:b1:1b:8e:e8:82:89:21:4d:20:a9:
7b:d3:09:37:fe:c0:f2:85:31:7f:f2:e8:26:b3:15:
a5:7d:19:d1:15:95:13:bd:0d:b0:81:e9:c2:a9:87:
f9:72:f4:85:b3:98:eb:ad:8f:5f:cb:ba:08:93:50:
69:9f:a4:62:a1:5d:c6:30:f5:c4:48:b5:01:94:26:
91:e9:fc:68:94:cc:37:17:8f:d6:54:ac:76:bf:b1:
91:6e:29:9a:a6:63:31:09:b2:ec:16:84:09:1d:44:
93:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:BD:B5:99:45:0B:72:8B:20:0E:67:BD:C7:6A:03:3E:34:DA:8F:80
X509v3 Authority Key Identifier:
keyid:0D:C6:A4:C8:21:09:FF:2C:B3:9C:1D:1A:58:C3:8E:30:33:C5:A0:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36877BB/3887CD041CF711EFAEF87C1E7DDC24C2/DcakyCEJ_yyznB0aWMOOMDPFoP4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DcakyCEJ_yyznB0aWMOOMDPFoP4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36877BB/3887CD041CF711EFAEF87C1E7DDC24C2/D36F9FC09E1211F0966632AEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.222.58.0/23
Signature Algorithm: sha256WithRSAEncryption
85:66:02:db:0f:8b:15:01:55:2b:ec:09:b6:de:f1:94:a0:56:
c4:e9:43:f2:d9:b0:fe:f5:fe:21:b3:f1:b5:78:f4:44:d2:41:
63:ef:95:cf:04:0c:ce:38:0b:96:79:77:5f:9a:86:0c:f8:c3:
6d:f5:0d:ea:ee:f9:b4:eb:6b:0e:f3:1a:80:f1:15:dc:d0:f2:
9e:51:cf:d4:49:7e:0b:52:03:07:dc:32:5d:96:7b:c2:ee:aa:
61:e5:b3:e7:eb:0b:73:cf:eb:25:c4:bf:b0:83:80:ea:4e:00:
e8:85:e0:a9:ae:9e:c1:0c:38:80:f0:45:51:3b:eb:76:77:f5:
80:7f:c7:dd:0c:90:0b:54:84:3a:85:00:76:be:fe:15:11:44:
62:c4:68:c0:f0:a3:62:4d:75:1a:e0:d3:22:0a:a9:8c:90:68:
60:bf:1a:75:ce:16:f8:99:16:14:36:f5:bd:32:7f:42:bf:cb:
56:a2:a2:bc:41:72:83:c9:d4:c4:7f:72:49:8a:08:35:ac:e9:
9c:a5:d6:bc:cb:5f:33:aa:09:42:56:3e:3a:0e:bd:e9:62:4e:
e4:00:66:af:ef:08:d5:8b:76:af:92:e6:af:05:a1:13:cb:dd:
dd:33:11:34:66:a3:80:29:1c:2f:20:6a:6d:10:41:55:f4:32:
d3:d7:cd:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:15:58 2025 by rpki-client