Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/EC8A42C2A36111F098B832A6DAE4EC9C.roa
File: EC8A42C2A36111F098B832A6DAE4EC9C.roa (raw, json)
Hash identifier: wQsGBZqSnd1YyNd48E3c2ThOthVIjNWNWwCeVc5dZTE=
Subject key identifier: A3:30:86:16:F3:A9:CD:AF:06:FE:05:22:A1:85:90:E3:E1:65:C7:10
Certificate issuer: /CN=F36A1CEFAF/serialNumber=82F1C6611A3A1467DB3D78A4A5FED50A08A57B13
Certificate serial: 0698
Authority key identifier: 82:F1:C6:61:1A:3A:14:67:DB:3D:78:A4:A5:FE:D5:0A:08:A5:7B:13
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/EC8A42C2A36111F098B832A6DAE4EC9C.roa
Signing time: Tue 07 Oct 2025 09:42:23 +0000
ROA not before: Tue 07 Oct 2025 09:42:17 +0000
ROA not after: Fri 05 Oct 2035 09:42:17 +0000
asID: 37645
IP address blocks: 102.206.196.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.mft
rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1688 (0x698)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A1CEFAF, serialNumber=82F1C6611A3A1467DB3D78A4A5FED50A08A57B13
Validity
Not Before: Oct 7 09:42:17 2025 GMT
Not After : Oct 5 09:42:17 2035 GMT
Subject: CN=68e4e07f-77fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:86:27:bc:aa:50:fa:97:f2:20:fb:7d:5a:86:
2c:0d:ef:6d:1a:e2:ae:97:00:c5:37:d4:5b:82:19:
af:95:11:e2:0a:86:79:38:0c:54:8e:2a:40:36:55:
8e:b5:71:8e:a9:5e:38:91:c6:cc:7b:8d:e5:69:e6:
24:d5:d2:22:27:b8:89:00:68:c5:72:67:ef:8e:09:
b9:c0:ca:ef:06:7a:01:80:10:67:13:f7:2a:07:f0:
fe:ae:f2:18:ee:27:ae:ed:96:30:c0:f3:9a:bc:c6:
e4:92:39:b0:61:ec:3d:89:e9:2a:1b:87:f5:4c:43:
ff:a0:09:1f:c0:b0:a0:82:ad:bc:67:67:c3:c1:c2:
72:73:a3:b5:26:e4:fa:65:f6:b9:46:2d:81:48:7b:
90:f0:48:36:77:ca:09:7b:1c:68:88:75:35:49:01:
4a:fd:e0:44:a4:c5:b7:6a:9b:89:61:b9:f2:84:66:
0b:d7:86:37:8e:bd:7a:ac:bf:56:4a:fb:1d:27:28:
91:e9:92:24:2f:9f:e2:5d:6e:26:70:63:6e:4f:fe:
31:c9:75:38:f5:95:5a:37:95:82:83:a4:d1:9b:c2:
09:3b:1f:c2:a6:35:58:a7:68:44:9d:c9:12:53:99:
d8:8b:cf:70:c0:af:02:c2:b2:bc:6c:7d:a7:02:c0:
a0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:30:86:16:F3:A9:CD:AF:06:FE:05:22:A1:85:90:E3:E1:65:C7:10
X509v3 Authority Key Identifier:
keyid:82:F1:C6:61:1A:3A:14:67:DB:3D:78:A4:A5:FE:D5:0A:08:A5:7B:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/EC8A42C2A36111F098B832A6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.206.196.0/22
Signature Algorithm: sha256WithRSAEncryption
74:17:d7:a9:e1:3d:8b:b7:45:14:b2:8f:39:16:4b:95:b4:54:
23:a3:b0:34:17:7d:1f:02:20:46:b8:6e:ed:46:2b:ab:90:99:
0a:8a:18:1c:5e:91:3d:78:3f:06:3a:4b:4a:20:68:1f:80:53:
de:d6:09:02:cb:4f:75:39:39:75:39:77:26:b8:d0:b9:99:63:
f7:e7:40:24:a5:c8:3b:4f:2e:56:1c:ee:ad:3c:5f:6a:b2:6a:
96:4d:e7:bc:aa:55:1e:b2:cb:da:0d:b8:6f:2f:f8:0f:01:76:
8c:a4:46:e9:77:a7:57:da:80:61:4b:77:4e:10:0a:f9:70:7c:
d7:b4:d7:53:45:40:1a:6f:ef:d1:c4:02:1f:ab:06:b1:a4:b7:
bf:3c:52:4f:7b:dd:3e:4a:dc:64:d5:ac:de:4f:ff:b2:f5:b3:
12:c5:59:02:53:33:1b:b6:11:23:a4:16:f8:d4:44:16:a7:6e:
e3:de:97:75:7a:df:e8:18:76:c7:0a:29:12:e7:3f:38:e7:22:
3c:e0:db:22:d2:74:d9:d1:00:2b:6b:87:a8:be:7a:96:55:ac:
3f:c9:41:7e:e3:73:2d:94:db:61:f9:e1:be:cb:f3:05:18:90:
08:7a:eb:45:0d:05:d2:f0:09:39:b4:69:ff:b4:f3:f8:4d:7f:
dc:1c:6a:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:47:41 2025 by rpki-client