Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BF59B/4AAAA214C75111EEA02EB392775412E6/60D040B08E8A11F0BE0C4997DAE4EC9C.roa
File: 60D040B08E8A11F0BE0C4997DAE4EC9C.roa (raw, json)
Hash identifier: SgYfyAuRm4ch7KKhp6slweJTGZA8WXEWz/gQ0Xrj4ck=
Subject key identifier: 18:65:EB:EC:6F:06:12:F8:A7:18:30:BB:54:2F:AD:0A:21:4A:76:6B
Certificate issuer: /CN=F36BF59BAF/serialNumber=E036AE08FE03416F58887A9D195DBFD86A25603C
Certificate serial: 0272
Authority key identifier: E0:36:AE:08:FE:03:41:6F:58:88:7A:9D:19:5D:BF:D8:6A:25:60:3C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/4DauCP4DQW9YiHqdGV2_2GolYDw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BF59B/4AAAA214C75111EEA02EB392775412E6/60D040B08E8A11F0BE0C4997DAE4EC9C.roa
Signing time: Wed 10 Sep 2025 21:09:03 +0000
ROA not before: Thu 11 Sep 2025 21:08:58 +0000
ROA not after: Tue 01 Sep 2026 21:08:58 +0000
asID: 329249
IP address blocks: 102.209.242.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36BF59B/4AAAA214C75111EEA02EB392775412E6/4DauCP4DQW9YiHqdGV2_2GolYDw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36BF59B/4AAAA214C75111EEA02EB392775412E6/4DauCP4DQW9YiHqdGV2_2GolYDw.mft
rsync://rpki.afrinic.net/repository/afrinic/4DauCP4DQW9YiHqdGV2_2GolYDw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 04:06:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 626 (0x272)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BF59BAF, serialNumber=E036AE08FE03416F58887A9D195DBFD86A25603C
Validity
Not Before: Sep 11 21:08:58 2025 GMT
Not After : Sep 1 21:08:58 2026 GMT
Subject: CN=68c1e8ef-57c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:83:1a:b6:36:92:f9:a5:e0:a3:bb:85:1a:d4:
74:36:4b:e5:60:cd:3a:09:90:98:39:42:c0:76:9c:
84:9e:67:2c:01:34:f0:2e:0c:c1:ad:88:41:15:d2:
e0:08:8c:52:11:8a:3e:0f:85:70:20:2e:da:c5:18:
6f:c5:67:e5:d2:fc:0d:44:f1:f8:10:04:71:23:e7:
54:6e:15:fd:b2:80:fe:39:94:91:0a:81:41:96:10:
35:45:69:ad:bf:13:1a:d8:35:6b:1c:4e:f1:9a:a7:
47:5f:a7:46:1f:c1:b2:b6:b6:28:6f:90:ae:fa:bd:
47:89:21:ef:e6:a6:38:45:f9:18:33:f7:c8:d4:c3:
38:c2:6d:37:5c:2e:05:5a:86:34:d9:e0:16:25:14:
28:a0:86:c3:68:2b:66:02:53:92:0c:80:ec:97:7e:
88:c5:01:19:32:1e:0b:25:9f:1d:3f:67:2c:55:12:
b6:9d:13:86:46:5d:59:12:74:2d:b9:9b:ea:1e:83:
47:d1:65:ea:74:ff:53:91:b5:8d:b3:3b:34:37:06:
1a:b0:1d:e0:de:89:4d:3a:46:20:8d:d2:fa:14:19:
db:95:5d:77:ad:88:98:0b:b4:f5:33:c1:5b:f0:1a:
29:07:bd:53:de:60:b5:6f:f1:c5:e0:8f:e9:7a:62:
b3:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:65:EB:EC:6F:06:12:F8:A7:18:30:BB:54:2F:AD:0A:21:4A:76:6B
X509v3 Authority Key Identifier:
keyid:E0:36:AE:08:FE:03:41:6F:58:88:7A:9D:19:5D:BF:D8:6A:25:60:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BF59B/4AAAA214C75111EEA02EB392775412E6/4DauCP4DQW9YiHqdGV2_2GolYDw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4DauCP4DQW9YiHqdGV2_2GolYDw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BF59B/4AAAA214C75111EEA02EB392775412E6/60D040B08E8A11F0BE0C4997DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.209.242.0/23
Signature Algorithm: sha256WithRSAEncryption
52:37:7d:7d:e1:f8:b7:8f:29:22:73:4b:bb:10:56:42:28:64:
de:b2:39:8c:14:8b:05:a1:c0:82:8d:0d:56:ea:40:08:bf:a1:
7d:03:31:19:0f:4a:cc:32:d6:e1:7e:d4:10:4d:b3:f6:af:3e:
97:08:31:3c:11:b4:25:e0:34:85:13:08:df:8f:d7:c2:75:de:
18:67:fb:69:29:36:99:32:c6:20:78:03:5e:07:f8:79:0d:34:
77:17:68:d8:7a:50:4e:93:71:93:23:7c:39:d4:41:2d:87:4e:
14:b8:ed:93:56:e3:55:59:31:f3:89:92:9d:3c:80:a2:30:db:
8a:c2:19:5c:68:82:ea:7c:0c:c6:35:6e:71:8b:b4:62:25:bd:
58:9b:6d:11:c8:02:9e:22:17:b1:2a:55:a0:f1:35:97:5e:da:
28:e8:8c:ef:b2:0f:4f:e3:6c:aa:22:34:db:58:17:e5:c3:8c:
41:f9:dd:b7:ef:41:d3:fc:1b:b2:2c:0a:e6:62:f7:6a:c2:d9:
8c:cc:3a:15:eb:26:70:f6:90:4e:21:b9:a7:b7:b4:ad:11:f8:
52:6b:d1:af:3e:62:37:9e:5a:4a:ef:f3:01:7e:0f:4c:70:fa:
ee:a6:c1:f7:ad:4c:13:c0:2c:95:8e:bd:1f:c4:de:37:17:90:
7e:28:3f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:13:48 2025 by rpki-client