Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CAD03/90CF9CCA1F4211EEB18184614AD9E6FC/5201D7B49AA211F0847D9CEFDAE4EC9C.roa
File: 5201D7B49AA211F0847D9CEFDAE4EC9C.roa (raw, json)
Hash identifier: vv3TG7X10dkDewJJBWp8gsrO41Ats4FLyzxkghQmX3s=
Subject key identifier: 2E:DC:B2:A6:4F:36:D9:90:A6:6B:7B:7D:13:3C:E9:6A:44:00:20:61
Certificate issuer: /CN=F36CAD03AF/serialNumber=7F3738A2B28B6FAC0EE168DACDA1020991F65EFF
Certificate serial: 034C
Authority key identifier: 7F:37:38:A2:B2:8B:6F:AC:0E:E1:68:DA:CD:A1:02:09:91:F6:5E:FF
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/fzc4orKLb6wO4WjazaECCZH2Xv8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CAD03/90CF9CCA1F4211EEB18184614AD9E6FC/5201D7B49AA211F0847D9CEFDAE4EC9C.roa
Signing time: Fri 26 Sep 2025 06:30:40 +0000
ROA not before: Fri 26 Sep 2025 06:30:36 +0000
ROA not after: Wed 26 Sep 2029 06:30:36 +0000
asID: 328987
IP address blocks: 102.206.112.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36CAD03/90CF9CCA1F4211EEB18184614AD9E6FC/fzc4orKLb6wO4WjazaECCZH2Xv8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36CAD03/90CF9CCA1F4211EEB18184614AD9E6FC/fzc4orKLb6wO4WjazaECCZH2Xv8.mft
rsync://rpki.afrinic.net/repository/afrinic/fzc4orKLb6wO4WjazaECCZH2Xv8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 03:40:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 844 (0x34c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CAD03AF, serialNumber=7F3738A2B28B6FAC0EE168DACDA1020991F65EFF
Validity
Not Before: Sep 26 06:30:36 2025 GMT
Not After : Sep 26 06:30:36 2029 GMT
Subject: CN=68d63310-db2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8d:cb:5f:1c:97:e0:ce:e1:15:6b:b7:a3:dc:
be:9c:78:93:ff:f3:1c:e3:26:b5:ff:08:e4:a9:7b:
1e:01:c0:35:83:4d:50:b9:a9:34:fd:d9:3a:d2:08:
9c:6d:92:0f:a9:73:67:53:1e:51:62:86:9e:34:19:
57:3b:e8:0a:25:43:0a:76:4a:09:0d:ec:0c:35:91:
4f:6a:eb:fa:2b:28:e2:d9:a1:14:f1:88:4f:27:23:
32:77:8e:b3:51:76:d9:f0:80:5c:f3:6b:4f:9b:fe:
13:7b:8c:68:d2:50:b2:0c:31:24:43:1b:74:bd:9f:
91:52:08:e0:97:bc:c8:e2:06:c5:33:fc:c2:07:59:
a9:ca:04:42:a6:0e:12:60:04:80:59:76:c7:65:1a:
d1:de:9e:6d:29:23:0f:32:c5:1e:0d:ea:0e:3b:5f:
f6:09:7e:0f:9d:eb:23:a0:5b:af:3d:6d:2e:55:6a:
cd:0d:4b:71:64:3f:3a:b8:b8:cb:53:eb:9c:3f:e0:
d0:db:f7:d6:4a:9e:03:79:9c:c3:08:f7:28:65:96:
34:4e:5b:2a:94:c9:ea:3e:18:22:69:85:20:59:89:
56:97:b8:50:74:43:df:2b:e7:5d:73:ca:7f:69:6e:
e2:d4:31:4b:e7:5e:98:c2:0a:85:d4:5f:bb:23:c8:
55:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:DC:B2:A6:4F:36:D9:90:A6:6B:7B:7D:13:3C:E9:6A:44:00:20:61
X509v3 Authority Key Identifier:
keyid:7F:37:38:A2:B2:8B:6F:AC:0E:E1:68:DA:CD:A1:02:09:91:F6:5E:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CAD03/90CF9CCA1F4211EEB18184614AD9E6FC/fzc4orKLb6wO4WjazaECCZH2Xv8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/fzc4orKLb6wO4WjazaECCZH2Xv8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CAD03/90CF9CCA1F4211EEB18184614AD9E6FC/5201D7B49AA211F0847D9CEFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.206.112.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:6a:39:8b:82:66:3d:29:7e:7e:2d:e4:a3:2f:0e:c7:67:0a:
e7:08:9d:e7:0d:e9:52:11:85:81:0e:01:33:4e:13:c7:47:f6:
b7:c6:f1:59:3c:d1:57:25:30:65:b4:60:9c:65:c9:24:27:7d:
d7:b1:6d:ce:9a:c2:fc:c2:e0:22:84:ed:f7:bf:2c:a4:c8:a3:
f2:bb:2a:92:4c:67:78:d4:dd:d1:78:bd:95:3d:b0:16:4d:0c:
d8:2c:8b:1c:12:5f:58:b9:df:0d:a8:77:98:51:29:f7:46:4c:
53:cb:24:2e:7f:9f:17:a3:e8:7b:31:38:55:5e:f9:ae:dd:7a:
80:2d:3a:81:40:da:7a:8c:2b:c6:87:3c:90:89:d3:ec:94:8e:
1e:58:83:78:42:be:5d:31:f9:7b:f0:03:54:bd:a7:89:70:6c:
e9:ea:01:32:ad:79:ea:e5:10:d0:0d:14:d0:86:30:0c:b9:a6:
28:0e:8a:fc:9b:19:57:86:82:92:4e:a2:49:68:18:bd:49:89:
02:a2:a2:66:fb:a9:44:d7:5e:e3:20:2e:08:32:2a:93:9a:60:
60:16:6a:da:31:a5:a9:14:d3:7e:ed:aa:4a:8c:46:9b:66:1b:
c7:3d:13:51:1e:2f:a9:0c:43:af:ee:a8:2a:0d:73:ec:6f:8a:
ea:ce:35:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:28:59 2025 by rpki-client