Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/13B70F5AA99411F0AA0A58C2DAE4EC9C.roa
File: 13B70F5AA99411F0AA0A58C2DAE4EC9C.roa (raw, json)
Hash identifier: BjAe83vGHkDO3x51rsJjxO8qS/KpTKzq951y76YnaTc=
Subject key identifier: D0:F6:57:2B:10:3F:D6:FA:50:F1:F2:31:D5:00:FF:3F:24:0D:CC:CA
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1637
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/13B70F5AA99411F0AA0A58C2DAE4EC9C.roa
Signing time: Wed 15 Oct 2025 06:56:30 +0000
ROA not before: Wed 15 Oct 2025 06:56:25 +0000
ROA not after: Thu 15 Oct 2026 06:56:25 +0000
asID: 20473
IP address blocks: 102.165.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5687 (0x1637)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Oct 15 06:56:25 2025 GMT
Not After : Oct 15 06:56:25 2026 GMT
Subject: CN=68ef459e-050a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:64:aa:f7:ee:fa:bf:bc:ad:b1:5e:a9:02:fe:
37:98:97:01:44:8d:6c:32:ee:51:ef:f5:20:ad:ff:
5d:31:af:29:cc:88:fb:cf:da:54:d2:51:cf:a4:76:
be:48:22:58:b6:05:03:8f:8f:9a:bc:3e:1f:13:ee:
19:9e:3f:da:2a:22:31:c3:a4:d7:01:f2:ec:c9:51:
16:7f:b1:53:60:1e:35:48:db:2c:57:c2:f0:3a:66:
08:d7:77:cc:b1:18:80:9b:d6:f6:d5:26:d1:93:ae:
c8:1d:61:bb:c6:5b:9a:b8:cc:14:77:a8:a8:a0:fd:
8b:59:63:fc:32:aa:fc:7f:58:e3:88:98:f4:ef:41:
09:1b:3f:5b:48:45:38:52:ae:0a:0f:1a:32:47:83:
60:3a:ad:97:00:17:42:65:6c:75:3e:5b:40:95:d0:
40:6d:a9:3d:40:b4:fc:91:99:7a:1d:2f:48:27:08:
23:df:8a:8e:ca:6a:92:6a:93:d7:90:e1:60:0b:6c:
03:9f:1a:dd:af:e8:be:4e:72:06:a7:75:41:d3:26:
ee:ee:78:d1:c1:34:fb:0c:b1:50:a1:a0:9c:a6:e9:
6c:f8:cf:c3:0d:e1:2a:67:65:4c:8d:d2:51:70:87:
46:38:bd:66:b4:4f:c1:e9:d9:ae:7f:3d:52:d7:fa:
b0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:F6:57:2B:10:3F:D6:FA:50:F1:F2:31:D5:00:FF:3F:24:0D:CC:CA
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/13B70F5AA99411F0AA0A58C2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.9.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:9d:b7:ae:29:7a:6f:96:50:eb:c0:5a:90:6a:f7:34:96:26:
2f:0f:94:8f:33:d2:55:48:b2:96:9a:d8:da:6c:eb:2c:db:cc:
15:55:5b:0a:a8:18:46:60:9c:95:82:0e:2e:bb:23:b4:b0:9b:
f2:cd:fb:9f:2a:19:46:a7:49:89:03:6d:46:e1:27:63:8a:6e:
0d:cc:b1:75:55:d9:23:e0:db:8c:57:42:7a:8a:71:b8:13:2a:
ce:19:9a:cb:b4:1c:ca:aa:1c:e2:fc:65:15:21:20:c2:3d:27:
22:5a:62:32:0d:48:a5:f5:07:4d:5f:03:dc:a0:2f:04:02:28:
ec:21:be:4a:d1:87:3c:b7:71:01:af:5a:47:3e:8c:ef:e6:96:
e0:09:95:98:f9:03:76:31:a6:f5:9d:35:05:35:98:65:dd:70:
65:37:97:d6:f6:ae:e9:90:2c:14:e7:dd:da:cd:39:84:3a:9c:
8e:73:f3:b3:a1:d4:4a:db:8c:88:55:ff:98:d8:37:c6:fa:8d:
ed:27:5b:7f:45:fe:d7:3e:2a:93:4a:22:d4:b6:e9:74:04:fd:
8f:64:58:16:6d:32:bb:4f:3b:7d:3f:ab:aa:8d:4c:35:f5:ac:
23:2b:12:7c:18:91:e6:77:2c:9d:f2:e7:55:1a:9e:5a:54:71:
9b:21:26:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:04:09 2025 by rpki-client