Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B5362/B104353AA03911F0B898B5A8DAE4EC9C/C9A68EA4A28611F086BAC69BDAE4EC9C.roa
File: C9A68EA4A28611F086BAC69BDAE4EC9C.roa (raw, json)
Hash identifier: 7VlIZ2iujVms/bcZzJtHMjuTIN2+7NdE9XhtEe0/jW8=
Subject key identifier: E5:32:BF:B3:7B:AF:45:8C:F7:6C:94:35:C6:23:B5:BD:04:6E:85:11
Certificate issuer: /CN=F36B5362AF/serialNumber=9825EAA3143A2908FA8897D522A54099918632DB
Certificate serial: 05
Authority key identifier: 98:25:EA:A3:14:3A:29:08:FA:88:97:D5:22:A5:40:99:91:86:32:DB
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/mCXqoxQ6KQj6iJfVIqVAmZGGMts.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B5362/B104353AA03911F0B898B5A8DAE4EC9C/C9A68EA4A28611F086BAC69BDAE4EC9C.roa
Signing time: Mon 06 Oct 2025 07:33:45 +0000
ROA not before: Mon 06 Oct 2025 07:33:40 +0000
ROA not after: Sat 06 Oct 2035 07:33:40 +0000
asID: 329626
IP address blocks: 102.204.180.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B5362/B104353AA03911F0B898B5A8DAE4EC9C/mCXqoxQ6KQj6iJfVIqVAmZGGMts.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B5362/B104353AA03911F0B898B5A8DAE4EC9C/mCXqoxQ6KQj6iJfVIqVAmZGGMts.mft
rsync://rpki.afrinic.net/repository/afrinic/mCXqoxQ6KQj6iJfVIqVAmZGGMts.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B5362AF, serialNumber=9825EAA3143A2908FA8897D522A54099918632DB
Validity
Not Before: Oct 6 07:33:40 2025 GMT
Not After : Oct 6 07:33:40 2035 GMT
Subject: CN=68e370d8-9980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:26:cc:9a:0b:61:fc:e2:39:a4:e9:7a:49:ea:
96:79:93:6f:77:2a:a0:cb:84:d8:3c:95:03:19:2a:
5b:c3:64:60:35:9d:23:20:b3:13:99:ee:87:6f:88:
d4:5c:13:f2:05:e3:58:f3:db:58:09:0c:75:24:6a:
f9:ad:9e:cb:3f:61:87:bc:d2:86:2c:a6:73:af:83:
56:2a:c4:e2:10:34:1a:c1:6e:bc:d7:1f:1d:45:63:
de:9d:e1:3f:38:37:bc:5b:42:0f:97:c7:8d:41:88:
5d:41:86:e0:91:0a:bd:c3:5f:a7:a0:bd:50:66:9c:
a4:6b:5b:d5:cc:52:0f:7a:b5:ea:24:7a:40:0d:09:
a9:4b:78:e3:00:7d:47:73:c3:23:89:19:d0:fb:78:
44:e2:7a:4e:41:a8:ba:d1:5c:72:5e:ba:02:45:15:
de:70:c0:02:b3:3e:bc:37:f8:c3:f3:94:89:53:45:
03:aa:e5:e4:c8:bc:9e:c3:b2:6b:4b:3e:28:12:b0:
a6:f1:36:5f:7c:8a:af:62:ac:2f:47:11:5f:6b:83:
df:43:87:7b:6a:9c:88:01:eb:24:6a:37:f0:44:95:
1d:b7:df:dd:cf:0d:64:c4:0f:07:98:8a:30:2a:70:
02:58:c6:5f:1b:3e:7f:fc:7d:86:c5:58:1e:02:7c:
e4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:32:BF:B3:7B:AF:45:8C:F7:6C:94:35:C6:23:B5:BD:04:6E:85:11
X509v3 Authority Key Identifier:
keyid:98:25:EA:A3:14:3A:29:08:FA:88:97:D5:22:A5:40:99:91:86:32:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5362/B104353AA03911F0B898B5A8DAE4EC9C/mCXqoxQ6KQj6iJfVIqVAmZGGMts.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/mCXqoxQ6KQj6iJfVIqVAmZGGMts.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5362/B104353AA03911F0B898B5A8DAE4EC9C/C9A68EA4A28611F086BAC69BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.204.180.0/22
Signature Algorithm: sha256WithRSAEncryption
83:aa:ab:26:65:88:f6:27:7c:6d:1c:6c:dd:77:21:8e:dd:00:
f0:20:0c:d6:c7:69:16:60:0a:16:31:91:d4:8c:76:21:bf:ed:
b0:a0:c0:17:8d:da:42:b4:f2:08:20:0d:bf:1b:22:29:a3:32:
4a:17:0f:03:97:2f:c1:71:34:ed:d0:1b:26:1a:25:8d:a2:8c:
28:39:65:ef:fc:15:f4:92:99:64:1d:3e:99:7c:94:5b:21:e1:
25:53:cc:53:4e:e2:bf:28:c0:e4:2b:bd:55:8e:ff:65:2a:4d:
84:b2:3e:06:9f:18:dc:79:5a:2d:25:e1:dc:bb:ba:fd:4b:6f:
e0:d1:81:e1:a3:47:ca:d7:1e:ad:a5:e4:b6:c9:e2:a3:1f:c4:
1e:15:e6:1a:0d:22:72:3b:b6:85:26:75:88:09:bb:bf:64:f7:
52:26:11:a3:5d:1b:c1:c0:62:f3:34:3b:b9:1e:6f:b8:11:a4:
ec:7f:70:d3:3a:bf:81:a7:ca:fb:c4:33:78:0a:cc:1d:3d:08:
34:16:54:2b:ab:d2:a9:20:ce:d5:2f:52:e6:8d:ea:b6:34:0f:
fe:30:9c:a9:23:6e:cc:36:16:48:a3:18:96:57:19:b9:9a:8a:
ca:e1:45:39:77:fa:4d:38:e2:93:a2:1d:da:eb:0d:13:c5:c0:
69:ee:a3:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:20:38 2025 by rpki-client