Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CAD03/90CF9CCA1F4211EEB18184614AD9E6FC/2A2938409AA211F0AC8E98EDDAE4EC9C.roa
File: 2A2938409AA211F0AC8E98EDDAE4EC9C.roa (raw, json)
Hash identifier: qOE+EV84QYKmUD93zBU7aMqugV0LjUqZj/XSzGnEmpw=
Subject key identifier: 6B:17:36:3A:FC:A7:D5:F0:A9:B2:42:7E:1A:C8:8C:0C:9C:C2:8A:EA
Certificate issuer: /CN=F36CAD03AF/serialNumber=7F3738A2B28B6FAC0EE168DACDA1020991F65EFF
Certificate serial: 034A
Authority key identifier: 7F:37:38:A2:B2:8B:6F:AC:0E:E1:68:DA:CD:A1:02:09:91:F6:5E:FF
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/fzc4orKLb6wO4WjazaECCZH2Xv8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CAD03/90CF9CCA1F4211EEB18184614AD9E6FC/2A2938409AA211F0AC8E98EDDAE4EC9C.roa
Signing time: Fri 26 Sep 2025 06:29:33 +0000
ROA not before: Fri 26 Sep 2025 06:29:29 +0000
ROA not after: Tue 26 Sep 2028 06:29:29 +0000
asID: 328987
IP address blocks: 102.206.114.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36CAD03/90CF9CCA1F4211EEB18184614AD9E6FC/fzc4orKLb6wO4WjazaECCZH2Xv8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36CAD03/90CF9CCA1F4211EEB18184614AD9E6FC/fzc4orKLb6wO4WjazaECCZH2Xv8.mft
rsync://rpki.afrinic.net/repository/afrinic/fzc4orKLb6wO4WjazaECCZH2Xv8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 842 (0x34a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CAD03AF, serialNumber=7F3738A2B28B6FAC0EE168DACDA1020991F65EFF
Validity
Not Before: Sep 26 06:29:29 2025 GMT
Not After : Sep 26 06:29:29 2028 GMT
Subject: CN=68d632cd-b507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:13:37:86:93:dc:34:e4:b0:29:09:00:f6:d6:
26:97:1b:e2:2e:ea:9f:4c:f8:6e:04:76:5b:b8:76:
74:8a:cf:f1:ce:99:82:01:3a:d1:45:ec:87:77:5f:
8c:88:84:1b:88:fd:69:e9:92:ca:39:52:8b:ab:da:
5d:6e:0c:34:66:5b:49:8a:1f:43:4e:bf:df:b5:fd:
63:e3:4f:17:fc:a6:23:ea:cb:5d:ec:35:f8:c7:cc:
25:8b:17:77:ad:27:c6:25:92:57:dc:ea:cd:98:20:
5d:77:30:0d:f7:c2:28:90:00:72:f4:0b:f5:a4:eb:
93:c1:e0:01:b6:1e:00:6d:c2:00:c1:06:4b:b3:82:
49:e9:60:1f:34:bc:ca:7a:ec:01:b4:e0:9d:e2:6c:
45:d4:eb:a3:9b:8c:e7:9d:a9:29:37:0d:62:b7:14:
11:cf:cf:b6:1e:da:1f:67:8a:49:fb:cf:30:7d:5f:
6d:40:e2:35:3f:dd:3a:17:2b:97:70:03:68:32:dd:
8f:e9:cd:6e:de:0b:c9:2c:a0:25:cd:f2:47:6d:bc:
88:60:6d:c1:da:e0:e3:5f:00:da:73:ea:06:9f:8b:
1a:50:cf:d4:b5:3f:1d:1d:0c:1e:99:58:91:d4:99:
57:f7:2b:e2:79:b5:ff:c1:0d:63:4e:b7:6a:f6:7b:
bc:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:17:36:3A:FC:A7:D5:F0:A9:B2:42:7E:1A:C8:8C:0C:9C:C2:8A:EA
X509v3 Authority Key Identifier:
keyid:7F:37:38:A2:B2:8B:6F:AC:0E:E1:68:DA:CD:A1:02:09:91:F6:5E:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CAD03/90CF9CCA1F4211EEB18184614AD9E6FC/fzc4orKLb6wO4WjazaECCZH2Xv8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/fzc4orKLb6wO4WjazaECCZH2Xv8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CAD03/90CF9CCA1F4211EEB18184614AD9E6FC/2A2938409AA211F0AC8E98EDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.206.114.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:44:b6:2a:8c:05:ef:63:08:17:b8:fd:5e:99:83:59:8c:08:
c5:fc:e7:53:6f:1d:de:21:d9:25:79:82:cb:bf:d2:33:2c:fa:
1d:43:23:b9:97:a9:88:3b:30:bd:dc:8e:a3:a1:34:6b:ad:3a:
67:ee:eb:a8:f4:fb:82:71:5f:46:ea:b5:fa:8e:bc:7e:ab:05:
f2:f4:4a:4d:09:e7:ef:c3:13:47:07:b4:2a:54:8f:0f:19:77:
58:f8:32:cd:23:cf:bc:74:7a:2c:c5:2b:55:ee:bf:0a:39:72:
a5:dc:3f:0e:3e:02:68:10:92:1c:91:14:0a:80:ac:28:27:96:
6c:8e:e4:b2:5f:36:47:82:6c:35:2f:ed:d7:b1:85:0b:92:ab:
ea:49:d9:79:be:07:6c:a2:c9:53:3f:60:4e:11:8d:8e:03:1c:
31:b0:ea:ec:f2:7f:40:c6:41:5d:48:86:46:b2:d4:3e:60:45:
db:7a:67:12:ef:2e:86:7a:ef:42:23:46:18:29:a9:60:e8:02:
51:13:aa:74:f8:03:ab:47:cc:3f:3d:9e:64:c7:b0:f6:51:58:
b9:4a:ec:ad:8d:e4:4e:22:d8:54:9d:f1:b9:5c:aa:12:23:e5:
e9:d9:25:45:b4:c9:78:ce:9d:1a:17:13:6d:44:d3:f1:2b:66:
35:71:fe:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:11:30 2025 by rpki-client