Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/38231ED4A5E211F0814536D7DAE4EC9C.roa
File: 38231ED4A5E211F0814536D7DAE4EC9C.roa (raw, json)
Hash identifier: TJfhMgbe4d5VGvYScAXp9JhpsI6Mu2HIy6UQd9hsH/w=
Subject key identifier: 31:8F:55:D4:FD:D5:6B:26:39:8D:38:1C:A5:10:50:B6:A7:0E:78:18
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1626
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/38231ED4A5E211F0814536D7DAE4EC9C.roa
Signing time: Fri 10 Oct 2025 14:05:47 +0000
ROA not before: Fri 10 Oct 2025 14:05:41 +0000
ROA not after: Sun 10 Oct 2027 14:05:41 +0000
asID: 64267
IP address blocks: 102.129.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5670 (0x1626)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Oct 10 14:05:41 2025 GMT
Not After : Oct 10 14:05:41 2027 GMT
Subject: CN=68e912bb-ac7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:78:3e:66:8a:a1:7a:7b:32:23:9a:bf:21:d9:
00:d9:58:f0:b9:17:70:49:79:3d:ea:55:c6:ad:8f:
8f:85:72:c6:27:b9:86:f6:f2:0c:f6:4b:13:e8:12:
2d:dc:e1:4d:71:2b:84:83:15:79:0b:5f:b6:5f:01:
08:3f:9d:b6:8c:3c:03:4a:7b:ec:45:9d:c3:5b:9f:
fa:f4:71:3a:68:7a:b9:0c:af:23:d1:7b:75:ee:0c:
f5:21:5e:d0:34:0d:58:fd:97:a1:43:01:cb:ef:17:
15:a3:0a:6d:5d:90:e4:7a:34:0f:11:20:44:74:07:
90:c7:af:60:2f:1e:c0:33:47:18:7e:e7:94:23:38:
6d:75:ad:9c:14:de:ce:ad:b6:4e:6e:7f:31:33:de:
21:1f:47:6d:aa:14:f7:4e:57:32:9f:52:b8:5a:2e:
d0:f8:6b:45:ca:2e:b9:fa:dd:13:f5:5d:13:de:d2:
c7:56:4c:98:51:50:0a:47:28:54:22:21:90:82:ea:
d9:28:fb:35:a5:f1:c5:2b:06:bb:d6:a4:87:35:12:
0f:99:52:8d:62:d8:80:5d:15:65:1d:1a:03:0f:3a:
09:7e:96:21:11:7d:d5:20:33:73:c0:60:5a:48:47:
07:98:a9:31:f3:1c:0c:f2:b5:72:29:23:85:2c:2c:
c5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:8F:55:D4:FD:D5:6B:26:39:8D:38:1C:A5:10:50:B6:A7:0E:78:18
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/38231ED4A5E211F0814536D7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.160.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:d1:10:22:17:91:e8:21:8e:83:d6:93:cb:40:12:d3:a8:71:
5e:f7:2b:20:99:48:e6:5d:41:a6:d8:19:f9:fd:a2:2a:4d:4a:
25:2f:14:bd:8d:ea:2f:09:54:21:02:9d:10:c1:6b:54:fd:3e:
2f:ec:10:a8:95:41:cb:76:93:30:22:05:66:85:a7:65:9b:37:
19:8e:2d:f1:36:a0:a8:ec:82:de:37:ee:d3:3a:f4:24:eb:62:
7f:dd:05:43:74:ab:b5:c7:54:e1:53:7b:05:4c:b3:8f:ea:e9:
30:5c:5c:3f:75:8c:36:b6:90:aa:96:93:ee:1d:8a:7b:55:73:
92:6d:5b:75:ed:9b:3b:fa:df:07:28:b3:1c:1d:dd:f4:0c:c8:
54:8d:85:d0:a5:c5:5f:f7:54:de:c7:28:c1:6a:65:20:5d:fd:
8e:78:3b:c9:13:28:65:86:52:52:35:51:cc:8e:69:38:14:71:
0e:e7:83:0e:af:76:63:57:c7:18:3e:bb:78:06:d4:df:6f:be:
27:2e:30:94:aa:d1:d5:be:4e:62:5c:c0:bb:d3:e2:16:e6:83:
aa:86:11:a4:91:27:0a:ac:3b:c7:b7:2d:0a:93:8f:73:82:53:
76:d8:bc:6e:f4:5e:fd:35:77:c4:e7:3d:90:6c:2d:16:f7:44:
37:fa:78:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:22:35 2025 by rpki-client