Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/41CCA22CA2D411F09FCA1288DAE4EC9C.roa
File: 41CCA22CA2D411F09FCA1288DAE4EC9C.roa (raw, json)
Hash identifier: j9250ZpVMwXUZJacr4bBd4sPNYNZt3YwSNgs4cVl/Lw=
Subject key identifier: 38:2D:D7:D1:EB:D2:FD:2A:86:6F:21:D4:4B:AE:47:26:9C:BF:5B:02
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 161C
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/41CCA22CA2D411F09FCA1288DAE4EC9C.roa
Signing time: Mon 06 Oct 2025 16:48:17 +0000
ROA not before: Mon 06 Oct 2025 16:48:11 +0000
ROA not after: Wed 06 Oct 2027 16:48:11 +0000
asID: 834
IP address blocks: 102.129.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5660 (0x161c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Oct 6 16:48:11 2025 GMT
Not After : Oct 6 16:48:11 2027 GMT
Subject: CN=68e3f2d1-6036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:3e:ad:c5:e7:4a:a9:33:fc:a7:0c:84:71:16:
de:e0:b8:30:d2:8d:89:27:8b:1e:1c:a6:59:7d:35:
d5:45:e1:dd:ed:76:4e:dd:b4:4c:b1:78:af:85:ed:
79:42:63:68:83:c6:1b:17:cc:8a:93:97:82:9d:30:
70:5f:c9:17:de:7d:ad:c6:a0:e1:34:dd:02:9c:63:
1f:12:23:f1:ef:71:84:2e:7c:52:62:b7:23:84:02:
5a:ce:ae:2c:05:b3:3d:86:bc:68:59:1d:3a:de:d4:
d4:55:c0:f6:c2:47:e1:52:10:aa:46:11:6f:da:e3:
d6:31:cb:08:9c:ce:4b:dc:69:5a:42:04:23:3e:10:
6d:46:99:6a:7e:1d:f1:76:ec:ff:5b:97:17:70:e4:
a9:87:79:24:8f:df:40:81:f5:c9:c9:98:a0:b4:61:
b8:3e:e2:41:3d:7a:7c:70:3b:fc:23:71:2a:d5:b9:
f8:7a:0a:2e:67:90:78:64:db:1d:29:47:1f:22:7f:
8d:ac:f3:7f:64:79:d9:f3:d4:f8:dc:8d:ec:f5:4e:
85:02:e4:bf:3a:ee:4e:9f:6d:8f:12:2b:ba:94:3c:
55:0d:e4:2b:ac:90:31:05:9e:68:72:1e:64:16:7c:
e1:d8:d1:ca:93:01:c8:61:9c:cb:bd:eb:5e:04:2f:
82:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:2D:D7:D1:EB:D2:FD:2A:86:6F:21:D4:4B:AE:47:26:9C:BF:5B:02
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/41CCA22CA2D411F09FCA1288DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.141.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:b0:9b:19:a8:d9:51:3d:30:41:47:56:28:1c:15:9c:a9:aa:
fb:49:ac:bf:6e:ff:21:77:29:58:6b:45:cc:12:e9:98:e9:5a:
54:db:cb:82:1b:6c:80:36:20:b4:73:2b:ff:e0:ea:95:4b:34:
8b:3f:d3:4a:38:d5:09:1b:f9:d6:fb:67:2c:2f:f5:ef:01:ec:
98:1f:3f:c3:e2:55:59:8e:b2:3e:7b:9f:c7:f2:01:01:40:73:
e0:6d:d7:b8:d3:70:7c:a9:93:60:68:64:ae:d2:4b:c4:ac:c1:
4e:a4:e2:5f:e5:d5:eb:6b:5b:1b:8c:e6:61:c2:da:01:dc:9d:
8f:3e:30:df:25:39:d3:61:a5:f7:a2:a8:1e:01:d1:77:bb:43:
08:e9:25:da:69:01:72:ee:92:60:a2:b8:4e:79:bd:e8:bf:ce:
82:a5:58:a7:82:95:82:94:27:b2:2d:43:0d:28:3a:7f:b3:d2:
c3:66:fe:dd:80:83:c8:4f:56:a6:57:e8:71:c5:65:c3:52:eb:
8c:0a:62:eb:81:88:82:bd:f0:e2:21:ce:8f:6b:0a:48:e7:75:
fd:9a:97:15:03:a1:44:26:66:f7:5e:08:1c:ca:ff:0f:f5:65:
eb:fc:42:5e:a7:9a:3f:14:fb:0d:d7:13:bb:ca:47:6d:eb:29:
f0:fd:79:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 14:41:25 2025 by rpki-client