Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B121BC3AA1E811F090F9B895DAE4EC9C.roa
File: B121BC3AA1E811F090F9B895DAE4EC9C.roa (raw, json)
Hash identifier: h5GAA3PQVWW+eZVQ/bjE6WU/G04nH664uZSkm9pEThU=
Subject key identifier: 5E:45:D0:0E:07:54:AD:D0:98:54:B3:F9:44:4F:DA:27:9B:84:16:64
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1618
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B121BC3AA1E811F090F9B895DAE4EC9C.roa
Signing time: Sun 05 Oct 2025 12:42:03 +0000
ROA not before: Sun 05 Oct 2025 12:41:58 +0000
ROA not after: Tue 05 Oct 2027 12:41:58 +0000
asID: 9009
IP address blocks: 102.129.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5656 (0x1618)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Oct 5 12:41:58 2025 GMT
Not After : Oct 5 12:41:58 2027 GMT
Subject: CN=68e2679b-6cb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:51:bb:df:85:93:60:ad:9e:30:90:b3:3a:ae:
f4:90:ca:c3:e5:5d:d4:02:69:42:44:50:e8:41:f5:
d8:16:ea:aa:3a:31:41:8c:3c:9e:4a:e6:a1:63:27:
e6:a9:21:31:45:ec:df:ca:cc:c5:67:90:20:e0:7d:
14:3c:b2:16:a7:eb:b1:21:4d:44:aa:49:4f:20:64:
96:c2:17:02:52:1b:04:b9:5e:80:98:f6:8d:20:ba:
37:13:4d:dc:69:70:d0:19:6d:6b:e3:61:c1:86:a5:
28:d5:6e:f2:49:f9:51:cf:8f:19:61:02:89:fc:07:
7a:d1:2a:c8:e4:80:1f:b0:f0:06:61:1d:de:bd:c4:
d0:fb:2f:80:cf:85:1f:f8:47:ff:bb:d8:ec:09:4f:
ca:63:b2:75:f0:76:e4:b3:27:2e:ed:4a:30:91:c0:
72:21:1c:c6:dd:fa:e4:d5:2c:92:bf:67:8f:41:d2:
3e:ba:14:26:f3:1a:63:43:e8:0a:22:d6:9f:cd:01:
73:01:3a:03:fe:76:1c:d9:00:e1:28:c4:42:9e:3e:
b7:33:e9:ce:8a:a2:94:b4:6d:b6:f0:cd:b6:6c:b2:
2d:7d:84:61:b5:f1:c4:d0:2f:de:91:38:77:08:f3:
aa:9f:f5:86:f1:9e:0e:13:1b:cf:82:f1:32:c8:04:
0a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:45:D0:0E:07:54:AD:D0:98:54:B3:F9:44:4F:DA:27:9B:84:16:64
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B121BC3AA1E811F090F9B895DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.180.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:48:36:11:71:97:cc:ce:86:08:7f:90:57:e8:36:1a:2b:c7:
5d:8c:f4:de:ac:d2:5f:09:90:8a:d6:a8:50:89:d4:60:eb:5d:
ab:43:42:a7:64:1a:19:e0:5a:9e:9b:11:42:ea:51:0c:a9:25:
f9:1e:48:7c:9f:8b:78:30:57:1d:66:66:41:4f:18:f8:fa:85:
f9:14:4f:08:31:4a:31:db:65:ab:32:d8:ff:d7:e0:49:30:f7:
a6:d8:59:ac:08:80:0e:c6:82:41:33:d6:d5:2c:7b:37:58:63:
27:f0:0c:92:9b:99:70:5e:8f:d9:74:6a:0c:6d:6c:db:43:f0:
f2:64:f3:46:8c:88:5e:4d:2b:3a:b8:42:06:6a:4f:b1:b9:6a:
62:0c:b7:0d:47:2f:cd:05:7b:37:7d:34:82:e0:70:95:2b:39:
a3:b1:79:8c:93:8b:65:ad:8e:50:5a:9d:58:18:46:4a:84:73:
10:98:82:d0:70:31:c9:c4:e6:04:91:24:34:1c:06:75:19:93:
eb:1a:6c:3f:26:05:9e:30:ea:89:11:7f:6c:5c:ad:a0:75:4b:
f7:26:2c:9f:c4:9a:38:fb:fc:a5:8b:44:88:1d:c8:8f:75:3f:
fc:21:59:88:8b:c5:c2:ed:c2:91:a2:76:d4:0b:bc:5b:77:92:
34:b4:a1:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:03:29 2025 by rpki-client