Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CAD03/90CF9CCA1F4211EEB18184614AD9E6FC/85AD2BD69AA211F0A03B72F1DAE4EC9C.roa
File: 85AD2BD69AA211F0A03B72F1DAE4EC9C.roa (raw, json)
Hash identifier: kobMuaQNgwzOY1HkqprMAm4bLPBawaJ7hSf0Z9cXUEE=
Subject key identifier: EE:F2:C9:F4:F3:2E:08:4C:38:84:2D:C2:41:24:DA:9F:9E:26:CF:C4
Certificate issuer: /CN=F36CAD03AF/serialNumber=7F3738A2B28B6FAC0EE168DACDA1020991F65EFF
Certificate serial: 034E
Authority key identifier: 7F:37:38:A2:B2:8B:6F:AC:0E:E1:68:DA:CD:A1:02:09:91:F6:5E:FF
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/fzc4orKLb6wO4WjazaECCZH2Xv8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CAD03/90CF9CCA1F4211EEB18184614AD9E6FC/85AD2BD69AA211F0A03B72F1DAE4EC9C.roa
Signing time: Fri 26 Sep 2025 06:32:07 +0000
ROA not before: Fri 26 Sep 2025 06:32:02 +0000
ROA not after: Wed 27 Sep 2028 06:32:02 +0000
asID: 328987
IP address blocks: 102.206.112.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36CAD03/90CF9CCA1F4211EEB18184614AD9E6FC/fzc4orKLb6wO4WjazaECCZH2Xv8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36CAD03/90CF9CCA1F4211EEB18184614AD9E6FC/fzc4orKLb6wO4WjazaECCZH2Xv8.mft
rsync://rpki.afrinic.net/repository/afrinic/fzc4orKLb6wO4WjazaECCZH2Xv8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 846 (0x34e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CAD03AF, serialNumber=7F3738A2B28B6FAC0EE168DACDA1020991F65EFF
Validity
Not Before: Sep 26 06:32:02 2025 GMT
Not After : Sep 27 06:32:02 2028 GMT
Subject: CN=68d63367-fc65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1d:3d:d6:9b:90:dc:fc:f6:87:8e:0e:0f:49:
c6:37:25:28:a7:23:f5:ba:13:05:dc:d6:41:96:04:
c3:bb:bc:e0:c3:46:2e:65:9f:d7:49:20:03:64:41:
10:04:cb:8b:8b:be:ac:00:0a:61:8a:5c:0d:4d:d6:
8b:81:29:72:15:8b:c6:4b:75:71:2f:48:e1:9f:17:
98:72:c2:89:18:6d:2d:b2:16:81:7d:93:40:3b:99:
72:36:fa:15:9f:ec:d3:86:00:eb:fa:52:ff:b9:28:
86:82:61:7e:f1:18:6d:c9:5f:29:25:07:d9:cc:91:
9f:04:ca:84:2d:85:db:d3:30:f7:9e:10:a5:dc:4b:
6b:5e:cb:ca:5e:8b:43:2a:f3:42:10:49:f4:b6:81:
69:6e:b8:7e:4a:34:e3:7b:4f:83:c1:0b:78:4b:a6:
7d:27:72:6c:2f:48:34:09:4a:d4:b1:7c:6e:75:1f:
1f:ce:78:52:6f:b8:5a:06:9f:db:cb:66:6a:fa:a9:
8d:87:c4:2b:9b:1e:f5:eb:c3:66:57:52:32:64:26:
a8:13:03:62:e4:35:4f:3a:a9:03:ef:c8:e4:37:b9:
4a:d3:5c:1e:3d:0f:14:01:1c:3c:72:c7:44:45:d6:
24:39:68:cd:3e:0d:a7:d8:6a:0d:d0:fc:32:dc:a2:
9b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:F2:C9:F4:F3:2E:08:4C:38:84:2D:C2:41:24:DA:9F:9E:26:CF:C4
X509v3 Authority Key Identifier:
keyid:7F:37:38:A2:B2:8B:6F:AC:0E:E1:68:DA:CD:A1:02:09:91:F6:5E:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CAD03/90CF9CCA1F4211EEB18184614AD9E6FC/fzc4orKLb6wO4WjazaECCZH2Xv8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/fzc4orKLb6wO4WjazaECCZH2Xv8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CAD03/90CF9CCA1F4211EEB18184614AD9E6FC/85AD2BD69AA211F0A03B72F1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.206.112.0/22
Signature Algorithm: sha256WithRSAEncryption
72:85:71:ed:88:08:e1:2b:2b:43:4d:8a:b7:11:15:c4:1e:48:
63:60:d8:3d:b8:73:df:dc:0f:eb:a0:2a:e3:83:f3:6c:e7:11:
33:5b:9e:cf:bb:83:74:0e:49:68:a1:96:03:5f:4c:19:a2:dc:
0c:6e:89:c6:d4:d4:b8:54:31:5d:62:41:fe:41:a4:ed:3e:d1:
13:8e:32:e0:68:e9:61:cd:64:76:dd:8d:45:51:1c:aa:5e:68:
1e:52:c0:8b:99:f9:d8:af:55:d3:53:7e:4b:a5:02:c1:ce:2d:
ee:32:c6:39:b0:92:f4:69:53:36:70:6b:b7:f8:a2:44:98:22:
aa:a5:2c:44:09:43:2f:8a:43:84:d8:c8:88:5a:60:1c:f7:fe:
7f:bb:c6:1e:ac:df:1e:da:53:d4:c2:9c:55:93:e7:ed:97:b2:
8f:b8:38:05:a8:98:c2:08:23:03:82:26:93:66:a5:b6:18:fa:
4b:70:4a:5c:02:70:c6:d6:6b:66:c3:6f:49:4f:62:c3:c2:c9:
45:2e:5a:68:c2:b4:54:c9:8d:92:1b:47:e4:71:78:d8:96:d4:
90:18:2e:ab:05:a8:bb:32:1b:fe:7a:53:6b:49:12:53:67:a4:
cc:79:53:5f:f1:70:93:cf:41:3c:72:0b:a6:b9:81:7e:53:37:
7b:1a:9c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:10:59 2025 by rpki-client