Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C11E4/13DDD38883AD11EEA0A81B324AD9E6FC/C59D974E977D11F0B8898995DAE4EC9C.roa
File: C59D974E977D11F0B8898995DAE4EC9C.roa (raw, json)
Hash identifier: 9sQYBw+BJR4l43uVbgekzScfJJnTJXulZoG2Q7RECiE=
Subject key identifier: 7B:A0:60:27:26:9A:CA:D5:BB:4B:61:8D:93:A4:A5:22:42:6A:E5:C0
Certificate issuer: /CN=F36C11E4AF/serialNumber=F023B97708196FF9F20BC9287D56C42CAAE5140F
Certificate serial: 02C2
Authority key identifier: F0:23:B9:77:08:19:6F:F9:F2:0B:C9:28:7D:56:C4:2C:AA:E5:14:0F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/8CO5dwgZb_nyC8kofVbELKrlFA8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C11E4/13DDD38883AD11EEA0A81B324AD9E6FC/C59D974E977D11F0B8898995DAE4EC9C.roa
Signing time: Mon 22 Sep 2025 06:31:29 +0000
ROA not before: Mon 22 Sep 2025 06:31:23 +0000
ROA not after: Tue 22 Sep 2026 06:31:23 +0000
asID: 328169
IP address blocks: 102.214.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C11E4/13DDD38883AD11EEA0A81B324AD9E6FC/8CO5dwgZb_nyC8kofVbELKrlFA8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C11E4/13DDD38883AD11EEA0A81B324AD9E6FC/8CO5dwgZb_nyC8kofVbELKrlFA8.mft
rsync://rpki.afrinic.net/repository/afrinic/8CO5dwgZb_nyC8kofVbELKrlFA8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 706 (0x2c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C11E4AF, serialNumber=F023B97708196FF9F20BC9287D56C42CAAE5140F
Validity
Not Before: Sep 22 06:31:23 2025 GMT
Not After : Sep 22 06:31:23 2026 GMT
Subject: CN=68d0ed41-ea03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c1:fa:47:14:df:e9:2c:44:d1:98:ec:29:08:
69:89:21:26:b7:60:16:ce:b4:06:49:e3:d0:92:c2:
25:d2:0c:b7:8a:d7:d9:db:ca:92:b7:69:2f:7f:1b:
a3:95:a4:91:82:e5:5a:64:d8:27:08:6d:b0:d9:02:
ab:a2:92:cc:ec:68:a8:15:0d:6f:dd:78:79:e2:7c:
30:d3:e3:90:88:13:52:ef:ba:4f:3c:a2:ef:50:ee:
d6:8b:c1:9f:e9:88:6b:da:6d:19:70:f5:19:31:52:
b7:ce:c3:c0:5e:f3:da:82:ad:05:c8:f9:ec:8e:7d:
0a:5d:23:71:5d:7e:fc:91:94:bd:bd:1d:d3:1d:ac:
b7:a2:04:16:00:2d:8a:56:a5:92:10:ed:c2:b5:b9:
de:37:d0:9e:08:8c:72:e1:e8:25:a7:06:d7:7c:f0:
8b:23:02:14:de:2a:62:97:28:45:b2:52:0c:2e:33:
8c:50:f2:b7:48:b5:9f:41:15:71:9f:6d:54:a7:1d:
dc:35:3e:d2:04:93:fc:c3:06:91:60:36:ef:6b:cd:
7b:c2:8a:ba:8e:22:b2:6a:8e:a2:e2:4b:e9:5e:5d:
be:be:3c:86:86:fb:09:01:84:52:8e:9f:db:a8:fd:
bc:59:4a:fd:f6:91:2d:e1:d7:3a:40:4c:02:8a:f5:
a9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:A0:60:27:26:9A:CA:D5:BB:4B:61:8D:93:A4:A5:22:42:6A:E5:C0
X509v3 Authority Key Identifier:
keyid:F0:23:B9:77:08:19:6F:F9:F2:0B:C9:28:7D:56:C4:2C:AA:E5:14:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C11E4/13DDD38883AD11EEA0A81B324AD9E6FC/8CO5dwgZb_nyC8kofVbELKrlFA8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/8CO5dwgZb_nyC8kofVbELKrlFA8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C11E4/13DDD38883AD11EEA0A81B324AD9E6FC/C59D974E977D11F0B8898995DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.214.162.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:73:93:76:87:19:b2:83:f8:17:9c:ae:fc:2c:c8:91:7d:d2:
f6:19:10:89:bc:29:2d:12:9a:1c:6d:e8:c1:5c:5a:47:81:be:
fa:47:9b:71:f9:fa:2e:0a:0a:92:fa:cc:dd:62:dc:5e:cf:12:
25:5b:f4:e8:af:ac:bc:56:0f:e0:75:e8:ea:2f:6b:1f:2d:cb:
65:55:4d:94:95:ed:c2:31:04:77:64:68:29:d6:ec:b0:97:99:
05:ce:7c:fc:46:db:c2:2c:98:58:d3:1f:f1:c5:65:b6:91:d9:
5c:73:fc:ac:08:3e:77:77:fb:b5:32:bd:8f:29:fd:ea:a8:08:
75:1a:73:de:ff:36:de:34:b4:91:34:de:26:c2:c8:91:91:d3:
c6:6a:c8:7d:73:2f:14:b3:4b:d4:2e:3c:13:e7:9f:42:21:0a:
98:46:4a:ff:e1:4d:d7:68:4c:6a:77:8a:8d:df:10:94:e7:ce:
00:3d:54:f7:38:93:b8:e7:09:59:22:c9:5c:6d:c7:f8:12:07:
78:8d:1d:48:2c:92:38:6f:89:3a:d9:ee:8e:47:49:1f:5c:a9:
05:2d:12:cf:93:a0:44:c8:d6:d6:59:ce:dd:13:73:76:d1:1c:
82:fc:a5:43:3c:73:bc:03:19:a6:40:5f:88:ef:f0:8e:fe:6d:
83:cc:ef:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:09:05 2025 by rpki-client