Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9946B8F6563C11F09A594ABDDAE4EC9C.roa
File: 9946B8F6563C11F09A594ABDDAE4EC9C.roa (raw, json)
Hash identifier: DVcV6zmxSyuQWs4ua9y8cA0V9pycxqUZMpMeq3uhW/E=
Subject key identifier: 14:73:C5:1A:7F:AB:A3:0B:FF:61:4B:C0:49:84:69:04:DD:D5:62:1C
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 152F
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9946B8F6563C11F09A594ABDDAE4EC9C.roa
Signing time: Tue 01 Jul 2025 05:31:12 +0000
ROA not before: Tue 01 Jul 2025 05:31:07 +0000
ROA not after: Thu 01 Jul 2027 05:31:07 +0000
asID: 834
IP address blocks: 102.129.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 05:43:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5423 (0x152f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jul 1 05:31:07 2025 GMT
Not After : Jul 1 05:31:07 2027 GMT
Subject: CN=686372a0-0a26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6c:6e:2d:9f:2b:0b:00:40:ba:d9:20:9a:04:
81:7b:2c:66:53:30:c4:d4:de:8b:f2:83:74:70:19:
92:2d:b4:32:b7:dd:57:a1:57:6a:4d:78:19:a8:f7:
3d:32:ee:d6:4f:de:ba:82:31:a1:b4:05:95:1e:ad:
75:4e:88:7b:23:06:a1:f3:b2:2c:c2:7e:fc:4e:fb:
62:8b:56:69:ec:0c:cd:f3:b1:b2:dc:da:c1:f6:b6:
ba:6d:83:fc:3e:b6:9a:62:30:fa:d0:a6:d8:8f:7a:
ed:40:9a:f6:0c:92:67:f2:8f:85:28:9e:5f:93:94:
44:94:6f:b4:59:d3:24:41:91:22:37:82:10:3b:85:
e1:96:d8:86:6a:f9:7d:8c:7a:88:74:d0:60:92:5f:
38:a2:a2:41:d1:b1:17:0e:49:7c:3f:89:25:5a:6e:
fd:eb:91:bd:91:33:9e:d0:d0:5d:5a:ec:3c:eb:83:
6f:c3:a8:8e:ae:04:94:79:35:be:c1:f8:28:ec:71:
5b:e2:d9:35:05:81:45:8e:89:16:9d:3e:06:85:38:
ed:55:32:f0:2f:06:c0:5a:c8:db:75:96:3e:48:45:
3a:3a:fb:7e:47:d4:fe:3c:b2:99:ba:c7:15:e7:83:
fe:21:1c:48:9f:45:90:7c:4c:22:73:d4:c9:1f:24:
4a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:73:C5:1A:7F:AB:A3:0B:FF:61:4B:C0:49:84:69:04:DD:D5:62:1C
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9946B8F6563C11F09A594ABDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.129.0/24
Signature Algorithm: sha256WithRSAEncryption
d8:4c:53:64:5b:b3:a1:51:96:2e:72:86:c4:d7:d0:f2:49:28:
c1:c6:e5:2e:ea:31:66:15:2d:04:dd:79:53:29:7e:29:37:84:
72:17:d3:ed:ec:07:4e:fa:40:23:3c:51:05:30:48:ea:f9:da:
1f:bc:c5:26:57:f6:ba:94:9f:ee:d4:77:dc:59:30:93:eb:b7:
26:83:d3:b0:52:54:c9:38:37:bf:b9:ba:16:37:2d:53:08:4f:
db:3f:73:31:3d:43:0e:c8:2d:1c:6e:1e:af:e9:78:f5:2e:99:
34:0f:61:78:01:25:2a:84:fb:f1:1d:95:e1:da:7b:46:2b:31:
d0:e6:40:f9:5e:04:f5:16:bf:3f:7c:8b:cc:24:a7:aa:dc:27:
ab:85:b6:27:d9:a0:23:0a:3a:e4:5e:46:30:2b:3a:9f:ff:af:
51:82:a3:70:b8:20:53:3b:72:80:71:69:54:6f:65:52:e0:28:
ad:f2:99:37:ac:6e:08:ec:11:d9:34:5f:b4:a2:a6:83:37:19:
10:9f:35:61:5e:4a:8e:df:f0:7f:00:ea:f3:65:75:cb:c7:a6:
1d:b8:07:93:72:c8:d6:4b:98:b2:45:4f:04:1c:bd:06:55:b2:
e1:b0:8d:32:dc:81:64:11:7f:cf:79:a6:1f:95:57:6c:ef:13:
68:19:10:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 19:21:01 2025 by rpki-client