Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/5F0E3B6EA5E211F0ADA42DD9DAE4EC9C.roa
File: 5F0E3B6EA5E211F0ADA42DD9DAE4EC9C.roa (raw, json)
Hash identifier: 6bYZg66pqBfgUtZceeK+FETI1f4A+8qlp1p7+onn8zk=
Subject key identifier: D1:EA:C6:A5:0F:6B:44:AA:D4:49:39:5D:EF:F8:D4:A0:66:EB:2B:6D
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1628
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/5F0E3B6EA5E211F0ADA42DD9DAE4EC9C.roa
Signing time: Fri 10 Oct 2025 14:06:53 +0000
ROA not before: Fri 10 Oct 2025 14:06:48 +0000
ROA not after: Sun 10 Oct 2027 14:06:48 +0000
asID: 54252
IP address blocks: 102.129.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5672 (0x1628)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Oct 10 14:06:48 2025 GMT
Not After : Oct 10 14:06:48 2027 GMT
Subject: CN=68e912fd-4ff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ad:7f:ee:eb:46:77:f0:d1:7b:22:fe:38:92:
9f:54:6d:54:db:86:d7:80:39:2d:08:cf:10:1e:07:
ae:8f:97:76:5d:d8:20:a6:81:8a:9b:78:2e:62:a6:
c7:dc:d9:f3:a4:34:d8:7b:54:fd:e3:e0:1f:77:76:
7e:d7:ff:8b:0a:79:d8:2c:1b:be:95:e6:23:ff:e8:
87:d5:a9:80:7b:69:ea:db:4e:2a:25:80:74:b4:0c:
d2:ce:c3:0e:31:71:5f:c9:b5:43:dc:0d:ea:1c:8a:
49:ad:77:24:59:94:a3:92:17:82:dd:d3:b8:12:f9:
6c:bf:36:71:a8:32:45:6e:b2:1b:d2:76:9b:b6:0f:
19:0b:c6:1c:83:15:cb:88:aa:dd:99:84:b3:08:74:
f3:02:a7:d7:9c:f4:fa:97:45:5b:76:98:45:34:3f:
36:33:29:56:7e:bc:d8:ba:3c:07:e1:58:7c:26:d4:
24:21:79:2c:68:6e:46:3e:ad:a3:ac:27:14:1e:b8:
ec:7a:a9:3d:16:ac:56:b1:16:25:44:19:c7:74:b7:
7b:45:a5:59:86:1c:f3:1d:b2:1e:6c:4b:96:6a:94:
76:1e:e8:ca:c6:ff:be:ac:30:49:c9:42:31:55:55:
3d:cf:05:22:80:e8:2e:07:ec:3a:dd:9e:e2:d1:73:
6c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:EA:C6:A5:0F:6B:44:AA:D4:49:39:5D:EF:F8:D4:A0:66:EB:2B:6D
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/5F0E3B6EA5E211F0ADA42DD9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.160.0/24
Signature Algorithm: sha256WithRSAEncryption
65:07:a9:d9:e3:52:f7:3c:d4:ee:03:50:7b:44:7a:f0:e9:45:
60:ad:b6:f4:f8:6d:34:1b:9a:d9:73:af:f4:44:0d:54:67:71:
bc:c2:f9:85:f3:c1:cd:78:72:c5:1a:5f:79:71:ae:9a:71:e3:
5a:ad:7b:9d:8d:5b:67:4e:9a:2e:97:4e:3d:d1:ba:72:59:be:
8f:cc:77:66:c2:f3:74:96:bf:2c:e3:09:5d:78:c9:e5:cf:10:
85:b8:23:9d:58:88:49:3b:a9:b0:15:2e:1e:ed:c0:e9:e2:fc:
31:0d:b7:1f:95:b0:a6:3d:df:17:12:a4:5f:1c:b1:95:4a:dc:
56:7a:3b:f4:6b:ce:73:8d:25:a6:87:38:c1:30:2a:95:c6:f5:
a6:e4:d4:66:ea:e8:15:b1:8c:3c:8b:d4:1a:0e:70:b3:1c:d3:
2c:68:69:d8:18:b8:bd:15:46:8e:fb:6a:8d:b9:c7:9e:d9:25:
20:3c:e9:53:38:0d:a2:e2:fa:9c:68:4e:d1:a1:5e:0e:06:f8:
80:20:ea:11:8b:e5:37:aa:26:36:46:6a:9b:1f:53:f5:2c:40:
1a:05:db:fc:af:8b:8e:14:6a:70:4c:ba:34:75:c0:55:25:0c:
8b:84:d4:9a:88:9c:b1:ee:2c:a3:1e:a6:2f:2c:d5:26:6e:8b:
d5:f1:1b:ca
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICFigwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yNTEwMTAxNDA2NDhaFw0yNzEwMTAxNDA2NDhaMBgxFjAU
BgNVBAMTDTY4ZTkxMmZkLTRmZjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDXrX/u60Z38NF7Iv44kp9UbVTbhteAOS0IzxAeB66Pl3Zd2CCmgYqbeC5i
psfc2fOkNNh7VP3j4B93dn7X/4sKedgsG76V5iP/6IfVqYB7aerbTiolgHS0DNLO
ww4xcV/JtUPcDeocikmtdyRZlKOSF4Ld07gS+Wy/NnGoMkVushvSdpu2DxkLxhyD
FcuIqt2ZhLMIdPMCp9ec9PqXRVt2mEU0PzYzKVZ+vNi6PAfhWHwm1CQheSxobkY+
raOsJxQeuOx6qT0WrFaxFiVEGcd0t3tFpVmGHPMdsh5sS5ZqlHYe6MrG/76sMEnJ
QjFVVT3PBSKA6C4H7DrdnuLRc2znAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU0erG
pQ9rRKrUSTld7/jUoGbrK20wHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4LzVGMEUzQjZFQTVFMjExRjBBREE0MkREOURBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgaAwDQYJKoZIhvcNAQEL
BQADggEBAGUHqdnjUvc81O4DUHtEevDpRWCttvT4bTQbmtlzr/REDVRncbzC+YXz
wc14csUaX3lxrppx41qte52NW2dOmi6XTj3RunJZvo/Md2bC83SWvyzjCV14yeXP
EIW4I51YiEk7qbAVLh7twOni/DENtx+VsKY93xcSpF8csZVK3FZ6O/RrznONJaaH
OMEwKpXG9abk1Gbq6BWxjDyL1BoOcLMc0yxoadgYuL0VRo77ao25x57ZJSA86VM4
DaLi+pxoTtGhXg4G+IAg6hGL5TeqJjZGapsfU/UsQBoF2/yvi44UanBMujR1wFUl
DIuE1JqInLHuLKMepi8s1SZui9XxG8o=
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:22:44 2025 by rpki-client