Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/D454FC5AA9CA11F09D379F95DAE4EC9C.roa
File: D454FC5AA9CA11F09D379F95DAE4EC9C.roa (raw, json)
Hash identifier: Oj5hNIuKjAO1NOT3/JBJfEAkmvR3Osfgo7rY1KuuZCc=
Subject key identifier: 34:12:57:D8:40:21:09:0A:E8:4F:53:FD:91:EB:52:5F:3E:3E:A0:1E
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1639
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/D454FC5AA9CA11F09D379F95DAE4EC9C.roa
Signing time: Wed 15 Oct 2025 13:28:26 +0000
ROA not before: Wed 15 Oct 2025 13:28:18 +0000
ROA not after: Thu 15 Oct 2026 13:28:18 +0000
asID: 16509
IP address blocks: 102.165.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5689 (0x1639)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Oct 15 13:28:18 2025 GMT
Not After : Oct 15 13:28:18 2026 GMT
Subject: CN=68efa17a-c512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1d:30:e4:61:62:00:6d:c1:5d:91:ce:2e:69:
ff:3d:e3:0d:8d:22:24:0c:07:aa:ca:b8:ef:52:b8:
34:26:06:c8:e8:9a:26:9a:17:3e:28:c8:1d:ce:6a:
97:cb:80:fd:33:c0:6a:d7:88:a1:41:b9:7f:b8:a5:
d8:09:58:f1:39:4f:81:6a:e0:f6:6d:8f:d6:e4:cd:
70:68:1f:ef:6f:40:5a:85:c3:ef:78:8a:ef:33:74:
7f:81:91:64:0b:cf:49:f7:77:6e:21:30:85:a8:e6:
c0:e6:1f:ad:f7:ff:75:e6:6b:54:8e:2e:94:4d:0b:
3f:58:71:af:ef:34:c4:10:59:67:04:58:b8:e5:fb:
c2:11:f7:d3:4d:c1:6d:4d:4f:b6:03:b7:85:10:39:
67:d5:8a:7f:ab:81:bb:2e:dc:98:7b:f0:b7:aa:12:
bd:d3:be:e0:be:87:a0:c7:96:17:61:a2:3f:16:06:
1b:4e:22:66:94:fb:6c:b8:15:e3:41:b8:c9:6d:c0:
01:3b:1b:5a:b2:7e:eb:6f:3f:3d:5b:9e:90:d1:83:
38:a5:9c:50:ee:9b:6a:31:18:a2:02:ce:d5:27:8b:
e7:a9:cf:83:7a:b0:1e:64:fb:1b:2c:1e:ea:e0:c7:
5b:ca:ac:ca:f6:f5:38:44:a8:0a:5e:f5:08:a3:00:
c5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:12:57:D8:40:21:09:0A:E8:4F:53:FD:91:EB:52:5F:3E:3E:A0:1E
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/D454FC5AA9CA11F09D379F95DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.9.0/24
Signature Algorithm: sha256WithRSAEncryption
92:37:4f:0c:e4:c6:0d:8f:af:dc:1b:49:2b:f1:2a:7b:d2:56:
c6:dd:2d:e1:6e:8e:92:e5:3e:20:ec:3f:55:94:8e:d9:f3:69:
24:66:09:06:a8:ea:0a:d1:e4:d8:62:87:8d:67:d3:17:e5:a4:
57:24:ac:02:77:9f:83:9f:3e:fd:bd:14:ff:d2:5b:26:ed:1c:
10:1e:11:02:5f:50:ae:fb:9a:0c:03:b8:3f:b7:36:91:9b:f5:
cb:28:09:4e:0b:7b:37:ad:bb:ff:b4:1b:61:1a:5d:2e:a6:20:
83:ca:35:f4:ba:c8:db:1e:68:9c:d9:f5:b3:06:cb:c9:bb:6f:
c2:82:77:35:57:7a:4b:93:ba:f3:20:d4:90:58:40:e4:c0:f4:
88:ea:72:52:78:36:27:49:83:ed:cc:83:44:9a:79:42:7f:a7:
67:ba:cd:6e:bd:c3:05:4d:66:b0:05:a8:f6:06:56:eb:67:25:
5d:56:e5:ce:00:51:63:b8:e5:c4:d1:ca:30:dc:63:50:ff:d0:
b5:47:f6:2c:48:2f:28:e7:ab:32:98:d8:15:ce:23:4f:f7:5c:
bb:65:9d:77:e0:1f:37:11:73:07:bb:21:49:0c:36:c2:3e:d4:
73:00:50:84:be:59:13:c0:9f:de:e2:66:61:3a:9e:b9:02:b8:
e6:40:6d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:04:17 2025 by rpki-client