Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B6ED4/7FEB5078746511F0B88F0E83DAE4EC9C/D5444EA2746611F08A8CC88BDAE4EC9C.roa
File: D5444EA2746611F08A8CC88BDAE4EC9C.roa (raw, json)
Hash identifier: lJFUngrc56wM/Kip8FysGoRhSuXW31fT25yScECZzg0=
Subject key identifier: 18:F1:0B:4E:6A:E9:95:26:F2:CD:86:DE:57:4A:EC:BB:CD:A8:8F:FA
Certificate issuer: /CN=F36B6ED4AF/serialNumber=B35E3E947A9475A167C7DFF0A7D0902C8645832D
Certificate serial: 02
Authority key identifier: B3:5E:3E:94:7A:94:75:A1:67:C7:DF:F0:A7:D0:90:2C:86:45:83:2D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/s14-lHqUdaFnx9_wp9CQLIZFgy0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B6ED4/7FEB5078746511F0B88F0E83DAE4EC9C/D5444EA2746611F08A8CC88BDAE4EC9C.roa
Signing time: Fri 08 Aug 2025 14:49:07 +0000
ROA not before: Mon 11 Aug 2025 14:49:01 +0000
ROA not after: Wed 31 Dec 2025 14:49:01 +0000
asID: 47524
IP address blocks: 102.140.0.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B6ED4/7FEB5078746511F0B88F0E83DAE4EC9C/s14-lHqUdaFnx9_wp9CQLIZFgy0.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B6ED4/7FEB5078746511F0B88F0E83DAE4EC9C/s14-lHqUdaFnx9_wp9CQLIZFgy0.mft
rsync://rpki.afrinic.net/repository/afrinic/s14-lHqUdaFnx9_wp9CQLIZFgy0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B6ED4AF, serialNumber=B35E3E947A9475A167C7DFF0A7D0902C8645832D
Validity
Not Before: Aug 11 14:49:01 2025 GMT
Not After : Dec 31 14:49:01 2025 GMT
Subject: CN=68960e62-c791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:0a:ca:08:ff:d0:0c:01:6c:86:cc:65:59:fd:
2d:b6:71:a5:c6:89:ae:dd:6f:05:6b:4a:05:2d:f5:
45:b3:e5:cc:15:76:d8:2a:b0:48:4f:d0:b0:9a:f0:
8f:8e:43:c3:1b:ab:6b:f7:a9:31:bd:08:d4:eb:00:
af:cc:15:ce:90:73:d7:9c:17:fa:c8:93:95:70:44:
2a:9d:6e:65:41:70:cb:a6:93:8f:52:db:7f:91:b5:
1b:91:10:c8:8f:32:ee:f9:b7:be:a1:a9:65:60:6d:
d2:5e:d9:82:39:95:ea:b1:e9:05:c0:f0:96:f0:15:
12:25:5b:55:e4:73:2f:93:63:9a:4a:59:08:e6:b6:
be:73:9f:69:27:23:82:63:fc:ea:3d:3e:5e:c9:3d:
fb:7d:5c:ab:de:ae:f1:63:10:9b:1f:d1:87:d7:67:
d0:9e:8a:3a:0e:9b:27:0f:80:83:97:2f:03:1f:d1:
c4:d5:87:1d:19:c7:18:97:ac:c8:9c:47:66:ea:27:
d9:ee:d0:ec:34:ce:3c:0b:f8:d2:be:bd:2d:12:0f:
e9:21:48:7f:ab:b4:69:44:44:c8:cb:32:bd:d4:13:
1b:1c:17:c5:64:9e:32:12:d9:05:49:fd:2c:16:69:
0c:aa:d0:72:f4:cb:2f:d7:3a:28:ad:5c:fb:ca:6f:
43:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:F1:0B:4E:6A:E9:95:26:F2:CD:86:DE:57:4A:EC:BB:CD:A8:8F:FA
X509v3 Authority Key Identifier:
keyid:B3:5E:3E:94:7A:94:75:A1:67:C7:DF:F0:A7:D0:90:2C:86:45:83:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B6ED4/7FEB5078746511F0B88F0E83DAE4EC9C/s14-lHqUdaFnx9_wp9CQLIZFgy0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/s14-lHqUdaFnx9_wp9CQLIZFgy0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B6ED4/7FEB5078746511F0B88F0E83DAE4EC9C/D5444EA2746611F08A8CC88BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.140.0.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:39:b9:bb:51:03:a0:ca:22:3e:7f:8b:fb:a8:ca:27:f6:7c:
cb:62:1d:b1:e1:bb:52:21:49:69:77:2b:80:8b:8d:a4:a3:c8:
ba:ae:39:92:07:19:2c:ec:b3:b2:9b:15:d4:8e:8e:04:11:5d:
a9:6c:e9:97:4f:9f:e6:55:76:c3:bf:86:68:b4:2c:20:5d:74:
af:66:74:a9:42:56:8e:7e:81:54:7d:b7:82:c5:3d:9f:34:ad:
19:5c:0d:db:f5:87:55:fd:40:30:70:b5:78:0d:76:31:a2:23:
6a:2b:4e:aa:a6:ff:bd:4d:33:39:31:88:55:2b:c4:89:c5:76:
ef:93:a1:d5:57:21:3d:96:89:ff:0e:20:66:92:da:a0:6c:af:
80:ae:d2:3f:8c:b6:68:36:8f:ab:7f:92:7e:46:ad:97:cf:10:
2a:db:cc:ab:9e:c0:f6:2c:03:f2:64:9c:87:f0:3c:8d:e5:ca:
2d:e1:eb:a4:dd:11:bf:ea:4e:3a:db:20:11:4f:bf:b2:c6:d3:
81:82:5a:5c:11:0a:4d:a6:78:93:0a:26:6b:d2:c6:eb:5a:68:
0f:56:df:5a:ed:0c:8d:0a:07:1f:ca:8b:a7:e4:55:fc:3f:4f:
2c:a5:36:af:eb:6f:de:08:58:80:f4:7b:d1:21:39:75:5f:42:
32:60:4f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:54:06 2025 by rpki-client