Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/69200B3E782C11F085F019A6DAE4EC9C.roa
File: 69200B3E782C11F085F019A6DAE4EC9C.roa (raw, json)
Hash identifier: jzPpwmyaC5abDmXnNGAE8yOS5bLLjJHggNSkz/7NIAI=
Subject key identifier: 40:16:9A:B3:1B:E1:5B:FC:3A:76:B0:04:73:12:BE:4B:1F:3A:4E:2D
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 158B
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/69200B3E782C11F085F019A6DAE4EC9C.roa
Signing time: Wed 13 Aug 2025 10:00:59 +0000
ROA not before: Wed 13 Aug 2025 10:00:54 +0000
ROA not after: Fri 13 Aug 2027 10:00:54 +0000
asID: 401838
IP address blocks: 102.129.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5515 (0x158b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Aug 13 10:00:54 2025 GMT
Not After : Aug 13 10:00:54 2027 GMT
Subject: CN=689c625b-d70a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f0:15:9e:24:60:d2:32:b1:fc:d0:61:c8:f8:
1b:a5:1c:85:43:19:1b:14:98:50:e1:f3:e9:ff:f7:
f9:97:4d:21:ef:42:5a:75:dd:06:eb:a2:7a:56:b3:
03:bb:aa:65:a9:26:53:92:76:99:95:49:26:66:a5:
29:4b:53:39:36:7e:fa:b2:ce:0a:d8:e2:2b:ab:2c:
f8:33:42:3c:28:25:db:03:c1:22:77:85:0d:df:1b:
72:38:ce:30:bc:87:fc:ac:25:3c:c1:51:28:fe:05:
3b:e1:e7:f5:52:de:94:b7:df:1e:1e:3b:8c:60:26:
60:d1:fa:74:c6:e2:ad:3e:f5:30:83:ba:bf:b4:c0:
f1:54:c9:c3:72:33:bd:2b:b3:37:2d:c8:9c:c8:a2:
bc:c0:df:7f:a3:0f:bd:e3:3e:b8:2c:f8:bf:9e:02:
e5:e3:70:6f:78:85:ad:af:d7:54:45:e9:06:8a:3e:
17:0b:85:02:da:60:9c:09:1b:2f:dc:00:18:45:ee:
f7:28:f7:03:5d:7f:a1:55:81:e9:88:c8:d8:9d:7f:
f0:8c:b8:03:3a:e6:65:e2:38:ed:16:74:75:ed:0d:
e0:a0:2f:c4:dd:4c:f6:57:c9:c4:8c:7a:5d:89:f1:
e8:bb:2f:86:9e:f6:b1:e4:57:70:0d:c5:fb:46:dd:
c9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:16:9A:B3:1B:E1:5B:FC:3A:76:B0:04:73:12:BE:4B:1F:3A:4E:2D
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/69200B3E782C11F085F019A6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.157.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:a4:28:e2:d6:d6:96:99:d6:92:76:95:29:58:e1:6c:3d:d4:
a1:b9:67:42:df:9a:0c:34:08:71:bd:97:4f:c8:7f:e1:b2:0e:
7d:38:6f:31:f9:1d:7a:04:cd:b3:a0:9d:d7:a2:0d:fd:ac:0b:
ad:b4:85:ea:60:2b:c0:a6:ac:d2:7e:fa:68:54:00:59:9c:82:
43:f6:eb:e2:91:e1:57:92:a6:39:5b:4f:5f:e8:7b:e9:74:d3:
73:66:3c:b5:13:82:8a:60:f9:83:ce:d7:81:8a:49:cb:9c:bf:
58:cf:76:23:89:67:a8:12:77:a2:b6:1d:8f:19:c0:66:40:e4:
74:73:52:da:ed:58:c8:da:4a:94:49:2f:37:89:ba:97:be:73:
7f:28:8d:ff:1a:26:b2:7a:95:45:6b:6f:3b:30:a8:6d:b6:a1:
11:e6:25:18:77:53:79:61:9c:64:78:5a:93:bc:62:35:50:41:
68:a9:de:20:32:d8:fe:fa:d7:0b:fd:65:0c:3f:66:b0:bc:d3:
ec:6e:4a:98:c6:6f:24:3f:17:42:5c:a3:5d:8a:ef:5f:53:a9:
0a:6f:64:76:87:7f:b0:3a:46:49:e6:2f:99:d3:58:6a:3e:c1:
6c:95:54:04:f6:58:a9:a0:d2:ae:ca:47:0a:6c:ea:d8:20:e7:
c1:49:c7:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:46:38 2025 by rpki-client