Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/162ED91A8E3311F0A7AD74E9DAE4EC9C.roa
File: 162ED91A8E3311F0A7AD74E9DAE4EC9C.roa (raw, json)
Hash identifier: qDfCGDr0AxS50Efsdc97NN5PlakIS1MN3U7Ojjed0Hs=
Subject key identifier: 83:02:1C:A7:01:14:97:AD:7A:0D:62:99:C7:88:D1:7E:41:1D:23:8C
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 15D2
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/162ED91A8E3311F0A7AD74E9DAE4EC9C.roa
Signing time: Wed 10 Sep 2025 10:44:12 +0000
ROA not before: Wed 10 Sep 2025 10:44:07 +0000
ROA not after: Fri 10 Sep 2027 10:44:07 +0000
asID: 22773
IP address blocks: 102.129.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5586 (0x15d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Sep 10 10:44:07 2025 GMT
Not After : Sep 10 10:44:07 2027 GMT
Subject: CN=68c1567c-6063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c5:f1:d0:e6:a5:65:f4:69:b2:e5:49:58:1d:
05:0b:21:d2:eb:ef:21:c9:12:11:8d:2d:54:5f:5f:
f4:72:14:ab:5e:d9:a3:e0:fc:b6:35:c1:bf:86:a2:
38:59:db:08:1f:f4:1d:eb:79:52:79:2d:26:22:e3:
e7:ef:a5:6b:18:2a:6a:aa:9a:5f:bc:17:7a:b8:7a:
7a:7a:d9:71:16:d3:50:74:a6:7f:e9:e2:a3:ec:d9:
55:6a:fb:26:85:e1:60:59:f6:0b:2e:a4:d5:92:b2:
4f:e2:a2:e1:8f:67:48:01:85:2c:75:c4:2a:9e:85:
6e:13:0f:55:a4:56:c6:c1:f1:4d:26:88:65:e6:15:
fd:b1:fc:b2:c4:74:06:15:f0:a3:85:82:85:96:84:
be:8f:55:b0:99:b6:a6:ef:f0:18:86:23:a2:74:94:
38:52:4c:ff:f5:e0:1e:5a:77:93:fe:dd:d0:73:56:
7e:3c:ef:0f:17:6e:7f:e1:57:ef:cc:2c:1b:96:c0:
19:6c:40:0b:04:1c:13:47:d9:9e:ff:1d:da:b1:f3:
7c:ee:00:88:98:b0:d2:30:de:eb:1f:88:55:6b:95:
d5:a5:b3:f8:2d:29:3f:e6:e6:87:43:4f:3f:a9:10:
93:08:cc:98:2e:c9:93:ef:90:53:0c:cb:2f:41:ee:
2d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:02:1C:A7:01:14:97:AD:7A:0D:62:99:C7:88:D1:7E:41:1D:23:8C
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/162ED91A8E3311F0A7AD74E9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.194.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:4d:98:62:b9:78:de:ca:0c:36:96:ff:d0:d6:09:b8:c9:ca:
c5:f7:e5:91:4b:88:56:32:8f:da:e4:49:1a:b4:10:95:df:88:
05:b2:38:9a:b2:33:31:2c:6c:44:c1:bf:a2:36:18:ce:3b:4c:
fa:9f:a7:35:91:27:ee:20:eb:d9:1b:85:cb:e4:36:77:fa:91:
05:92:4b:9b:77:21:99:d9:e7:9b:84:eb:aa:fd:22:70:34:7e:
5e:b3:93:50:3c:4c:c8:1e:64:38:78:07:08:d6:f4:a1:54:da:
be:31:30:f6:8f:83:84:95:88:a9:9f:35:2e:bc:32:b6:9f:9f:
9b:70:90:21:78:a8:1e:db:09:7a:e5:51:21:42:1b:4d:18:25:
2a:a3:6f:70:1a:7f:b0:ad:dd:2f:30:95:f1:1c:02:6e:b4:fb:
e1:64:c7:7e:72:49:b0:74:b7:5a:78:ef:0b:57:1c:83:ef:2d:
92:fd:e7:df:66:59:79:67:37:33:e2:93:17:1f:59:e6:ae:f5:
fd:b7:67:ae:75:03:aa:72:7d:57:e7:4a:31:bb:45:8d:d8:48:
a4:dc:04:1c:1a:61:7d:60:48:32:08:a5:6d:80:e7:b6:8d:29:
ac:ff:4b:91:00:ca:7e:ba:dc:78:0a:b4:30:f2:a2:44:9f:76:
9e:19:e7:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:04:00 2025 by rpki-client