Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/A4AB2460A5E311F0B53AD0E1DAE4EC9C.roa
File: A4AB2460A5E311F0B53AD0E1DAE4EC9C.roa (raw, json)
Hash identifier: jQLAxIqeLTBDolvjujdVBwqo/4V+OBzaPKdDT0xESqY=
Subject key identifier: E5:4A:7A:8D:ED:93:EE:35:98:9D:02:BF:B2:60:70:A9:85:F9:88:B5
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 162D
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/A4AB2460A5E311F0B53AD0E1DAE4EC9C.roa
Signing time: Fri 10 Oct 2025 14:15:59 +0000
ROA not before: Fri 10 Oct 2025 14:15:53 +0000
ROA not after: Sun 10 Oct 2027 14:15:53 +0000
asID: 396356
IP address blocks: 102.129.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5677 (0x162d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Oct 10 14:15:53 2025 GMT
Not After : Oct 10 14:15:53 2027 GMT
Subject: CN=68e9151f-da40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:34:31:76:cf:dc:01:08:bf:c6:0e:d1:4e:82:
9e:09:8e:78:4f:19:14:f7:e4:05:32:9c:a2:77:f0:
e1:72:78:0c:61:0e:9c:3e:2e:2c:29:f0:75:dd:c7:
02:28:66:cc:41:8e:17:83:9b:33:aa:f7:77:46:a2:
43:cd:78:b4:30:68:a0:d5:e8:0e:b9:04:4f:c2:e1:
14:74:78:26:ea:0b:8a:ed:02:17:e1:15:a7:3b:9a:
ee:d7:0c:d4:5b:8e:0c:fe:56:e4:ac:f7:f3:4e:25:
2a:b1:f4:0e:0d:c2:f7:32:8a:6d:10:6d:e1:75:6c:
3e:6b:94:8c:7f:13:ed:a8:b6:f1:b7:fc:71:09:28:
c6:91:a5:88:f9:28:1d:02:4b:41:72:36:76:fd:50:
1b:d3:65:76:04:a2:e4:07:43:1b:da:fe:e6:fe:72:
a6:25:da:34:e4:cd:94:cc:3f:00:f7:3e:1c:8d:7d:
37:a7:4a:7c:22:b5:4e:00:b8:43:d8:31:2a:b0:c6:
f8:8d:2d:69:71:31:f3:f4:78:87:2b:0d:96:58:f8:
79:a7:6e:1f:f7:92:46:59:73:7c:67:f1:b8:cf:24:
b2:01:fc:36:68:ec:f6:a4:b8:fa:03:b2:10:04:c4:
89:97:3e:75:7d:24:4d:59:1c:89:f9:8a:73:f3:36:
11:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:4A:7A:8D:ED:93:EE:35:98:9D:02:BF:B2:60:70:A9:85:F9:88:B5
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/A4AB2460A5E311F0B53AD0E1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.255.0/24
Signature Algorithm: sha256WithRSAEncryption
49:b8:65:89:85:0f:8c:1f:67:31:1f:70:d2:03:e5:2b:51:2b:
b8:ef:06:7c:5c:8b:c2:01:c7:7a:01:1d:88:90:e2:14:8e:1d:
0d:d1:40:da:74:fc:d6:c8:8c:b9:43:9a:71:b1:b5:a5:f8:76:
36:bd:56:1b:61:48:ff:6f:70:38:67:b3:e6:dc:fc:bb:e8:f5:
d8:ff:8d:30:71:b4:fe:f0:33:f8:60:5f:73:82:26:8a:67:9b:
0e:5e:37:d8:fc:f3:d1:45:de:97:18:51:97:3d:b5:1c:e8:db:
74:f1:c4:f7:b5:4a:59:f9:e6:18:eb:e0:91:57:02:9f:62:bb:
62:e9:4e:45:8b:9e:14:eb:6f:30:05:af:f1:66:2a:d8:f3:1e:
16:18:9d:5e:c7:7d:74:30:fd:ef:10:9e:6b:6b:c8:ec:a3:fb:
8c:71:3b:47:98:6f:97:e2:05:8d:87:b4:96:d4:36:86:9e:67:
cc:8e:22:f3:5e:79:7b:18:0b:b0:5f:9d:7e:94:6c:ee:f6:e1:
74:b0:02:ef:c1:75:55:22:0e:ac:b8:ed:b4:90:91:89:9a:1f:
e7:db:e3:d5:a1:2f:37:71:be:7f:54:ca:61:47:22:5e:43:8e:
37:52:a2:23:d7:eb:ba:2c:73:0a:ea:52:ba:24:aa:59:8d:96:
ac:74:35:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:03:22 2025 by rpki-client