Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/693C2B9C9F7411F0BFDBB4A6DAE4EC9C.roa
File: 693C2B9C9F7411F0BFDBB4A6DAE4EC9C.roa (raw, json)
Hash identifier: 0ogrjg7UU9ILcBeer55agd2pn8zo5b8SdKfODYzR204=
Subject key identifier: C8:9D:90:91:94:F6:DB:E2:E9:41:E8:6E:18:30:C0:C0:73:12:88:9C
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1610
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/693C2B9C9F7411F0BFDBB4A6DAE4EC9C.roa
Signing time: Thu 02 Oct 2025 09:44:38 +0000
ROA not before: Thu 02 Oct 2025 09:44:33 +0000
ROA not after: Sat 02 Oct 2027 09:44:33 +0000
asID: 396982
IP address blocks: 102.129.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5648 (0x1610)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Oct 2 09:44:33 2025 GMT
Not After : Oct 2 09:44:33 2027 GMT
Subject: CN=68de4986-965c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ca:cd:5e:b0:c7:8d:5b:7c:bc:39:80:a4:7e:
ac:03:06:66:e0:6c:19:8f:89:05:03:22:a1:da:16:
c6:10:b5:22:fc:51:80:6f:36:bb:bf:f2:15:68:02:
6b:00:d2:13:a0:ec:79:08:fe:e6:cb:2f:b6:b9:e3:
80:91:08:a4:02:3c:1a:c8:ee:6c:9b:69:c0:ec:b8:
1f:cb:e7:c3:1f:d1:7a:4c:af:e2:57:ea:3b:d3:75:
bb:99:fa:17:67:e0:78:2b:b5:2e:8a:61:8e:14:31:
32:c6:2d:63:11:85:a4:26:0d:02:13:a4:35:df:6c:
e0:97:f5:0c:93:f8:b2:c4:8e:b3:52:a2:05:fb:3c:
43:26:9b:1e:59:9a:ca:4a:2c:6d:d8:e6:0f:ce:93:
1e:b7:d7:c8:96:1c:25:50:f2:08:24:18:08:90:7a:
e6:37:48:9a:5f:a9:24:ab:5b:fb:6d:71:47:f3:97:
62:8c:b0:82:46:2c:42:e5:c3:79:f2:6f:fa:1f:77:
c5:c6:9c:10:0c:ef:08:b6:9e:79:9a:ce:c2:4b:0f:
93:74:4e:f2:ee:aa:0b:7a:f2:79:ac:df:7d:5c:92:
28:9b:04:4c:76:5e:ab:8e:48:61:27:4f:d9:9c:09:
61:d6:9e:b2:f5:69:f7:33:75:7d:c9:98:1e:8f:29:
1e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:9D:90:91:94:F6:DB:E2:E9:41:E8:6E:18:30:C0:C0:73:12:88:9C
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/693C2B9C9F7411F0BFDBB4A6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.213.0/24
Signature Algorithm: sha256WithRSAEncryption
01:ec:5e:fa:fd:cd:48:aa:ac:9c:29:78:b9:c9:c8:dc:02:f6:
b5:eb:12:7b:ed:f6:74:ee:85:df:19:e6:92:17:ad:52:82:90:
69:44:64:6b:75:18:d8:72:27:66:da:6f:c3:b3:80:6b:37:8f:
58:c5:e3:74:3d:90:d9:9e:b4:1c:f2:5a:e2:6d:da:de:62:7f:
4a:48:e4:aa:ff:df:23:1b:53:01:c8:4b:01:4d:5e:d2:c0:73:
bd:c9:21:06:37:24:0e:86:57:4b:f2:08:8a:dd:a2:a8:64:3e:
cb:84:85:79:90:a6:7e:74:37:91:b9:46:7f:53:6d:fe:bf:c6:
a1:42:57:46:59:ed:79:fe:9c:01:ae:d3:d3:51:8b:80:b5:1b:
0f:ba:40:23:16:2f:bd:15:82:8b:57:6a:83:3b:85:09:2d:14:
69:68:17:db:18:2e:82:47:b4:3e:f6:95:d0:08:70:f3:48:16:
e9:e6:7b:a6:1b:74:50:ed:bb:99:ff:a2:a7:06:42:ab:ef:af:
d9:72:d4:b7:6d:07:8c:a5:e0:7f:6a:8d:a6:50:e4:e4:18:28:
13:03:c7:74:95:4c:c7:08:9c:7c:71:4f:67:b2:da:72:ce:c6:
ed:7c:21:e8:e1:5b:ad:b0:4c:f9:3a:0e:d7:1c:46:82:9e:c7:
52:6b:2f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:18:05 2025 by rpki-client