Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/ED0E3956A50511F09A4A2EC6DAE4EC9C.roa
File: ED0E3956A50511F09A4A2EC6DAE4EC9C.roa (raw, json)
Hash identifier: X0BPn2OforEFyIMXLF8aVj+2FaweumxtIlv+YeCSw2c=
Subject key identifier: 5A:7E:74:18:33:17:A3:99:C8:E3:A6:ED:CD:E1:76:19:74:1A:D6:39
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1622
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/ED0E3956A50511F09A4A2EC6DAE4EC9C.roa
Signing time: Thu 09 Oct 2025 11:48:52 +0000
ROA not before: Thu 09 Oct 2025 11:48:48 +0000
ROA not after: Sat 09 Oct 2027 11:48:48 +0000
asID: 9304
IP address blocks: 102.165.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5666 (0x1622)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Oct 9 11:48:48 2025 GMT
Not After : Oct 9 11:48:48 2027 GMT
Subject: CN=68e7a124-fada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f4:42:9a:d3:b1:19:58:8f:f7:d5:c3:0b:c8:
11:be:9f:bb:e3:a7:e5:dd:29:b7:5f:d2:79:aa:87:
ec:bb:92:c5:b8:67:89:17:79:c4:17:b0:54:25:7f:
9e:16:61:ce:31:bf:36:d6:95:b6:8c:e9:91:12:73:
33:4d:48:87:8c:23:5b:30:30:98:8e:55:0c:87:60:
e2:d9:c2:72:12:f5:f1:67:6f:14:a4:02:76:cf:7b:
99:f1:e6:83:76:f2:cc:e2:a5:22:6b:7d:c3:6c:5b:
6e:5f:7b:01:e1:17:b8:4b:d2:75:89:02:bf:ca:92:
4e:6b:d3:38:0d:81:fc:66:47:8d:69:91:79:f6:b1:
8d:e7:68:da:90:ad:06:0b:e4:4a:b9:e0:74:64:c1:
41:b7:6c:39:58:a4:65:c6:be:47:00:df:9e:33:5c:
43:9f:96:d5:63:6c:c2:ce:d0:d2:48:48:43:58:88:
af:8c:57:da:28:ae:e1:b7:89:f6:a7:c1:75:d2:04:
95:5f:4f:c3:57:0a:a7:71:75:ab:33:6c:51:c1:b4:
60:7a:d9:bc:11:7d:ad:fb:1f:63:db:fb:51:9e:04:
5e:a0:08:c1:e6:75:c3:55:9b:63:f6:87:fd:bf:f5:
43:51:a5:e4:5e:6b:1a:42:3e:f9:23:fa:dc:d9:40:
e0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:7E:74:18:33:17:A3:99:C8:E3:A6:ED:CD:E1:76:19:74:1A:D6:39
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/ED0E3956A50511F09A4A2EC6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.24.0/24
Signature Algorithm: sha256WithRSAEncryption
13:ce:ee:bc:d2:24:d2:e9:8a:18:98:ce:1f:c0:75:ee:ab:9b:
18:23:60:a8:7f:60:d0:b0:96:59:d1:ef:db:92:da:8e:54:21:
04:38:19:78:79:af:8c:8f:fa:3e:0e:14:9f:5b:3f:3a:ce:42:
30:87:1f:75:01:e8:73:7e:36:82:ac:c5:b8:ca:45:8e:a5:a2:
27:b1:92:81:64:2c:17:f3:9f:d4:31:97:0a:40:49:29:eb:39:
47:b8:7f:a8:8c:b6:22:48:75:38:a3:ca:fa:1d:13:fb:5c:96:
d9:f8:ac:fa:80:64:91:34:d5:61:25:68:b4:3f:02:6f:32:9f:
93:e7:c7:fc:15:53:cb:97:09:2f:4e:9c:72:e7:50:58:ef:4a:
a6:bf:b7:84:ce:ca:92:a7:50:9e:e4:42:41:58:ff:49:5e:c0:
57:eb:39:62:ec:e1:a1:28:48:d7:32:76:a5:2b:e2:de:33:1d:
1c:e5:ea:ba:30:8f:8c:e2:ff:7d:4d:2f:83:3e:c7:94:bb:ae:
6a:d4:5b:63:17:49:a8:55:f3:9b:db:f8:04:ae:d6:0b:1b:2e:
46:d9:c8:87:01:4c:cd:59:37:e5:ec:3c:b8:98:08:7a:76:53:
9a:3e:ff:a4:d8:21:26:25:aa:ba:34:94:ec:e5:81:a3:d0:d4:
98:01:0d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:04:27 2025 by rpki-client