Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D46F6/609C86867D8B11F0BB7F96AFDAE4EC9C/B341C57C7D8B11F098D9F7B2DAE4EC9C.roa
File: B341C57C7D8B11F098D9F7B2DAE4EC9C.roa (raw, json)
Hash identifier: gxdDf5YFTTIXUD0ePn6Oc2L/cMAyoWONeU7Dg/ah8UU=
Subject key identifier: 1F:10:0A:DF:35:85:2B:44:13:65:02:3F:C4:C2:61:F7:02:88:21:71
Certificate issuer: /CN=F36D46F6AF/serialNumber=80A0D689EB2B23565D87D29213A2E138582AB096
Certificate serial: 02
Authority key identifier: 80:A0:D6:89:EB:2B:23:56:5D:87:D2:92:13:A2:E1:38:58:2A:B0:96
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/gKDWiesrI1Zdh9KSE6LhOFgqsJY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D46F6/609C86867D8B11F0BB7F96AFDAE4EC9C/B341C57C7D8B11F098D9F7B2DAE4EC9C.roa
Signing time: Wed 20 Aug 2025 06:05:41 +0000
ROA not before: Wed 20 Aug 2025 06:05:37 +0000
ROA not after: Thu 10 Sep 2026 06:05:37 +0000
asID: 329290
IP address blocks: 102.212.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D46F6/609C86867D8B11F0BB7F96AFDAE4EC9C/gKDWiesrI1Zdh9KSE6LhOFgqsJY.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D46F6/609C86867D8B11F0BB7F96AFDAE4EC9C/gKDWiesrI1Zdh9KSE6LhOFgqsJY.mft
rsync://rpki.afrinic.net/repository/afrinic/gKDWiesrI1Zdh9KSE6LhOFgqsJY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D46F6AF, serialNumber=80A0D689EB2B23565D87D29213A2E138582AB096
Validity
Not Before: Aug 20 06:05:37 2025 GMT
Not After : Sep 10 06:05:37 2026 GMT
Subject: CN=68a565b5-fa58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3b:e6:2e:e6:44:1d:3b:f0:0c:8a:2b:d9:49:
d6:35:87:04:62:7f:be:49:0d:ca:bc:a3:06:ba:e0:
2d:47:44:d4:0f:fd:37:26:1c:17:30:43:10:f4:29:
bf:79:bb:34:6b:61:e9:0f:9b:b2:7d:58:34:14:81:
0e:6a:d5:6e:6a:88:b0:c6:bb:6e:74:08:3b:44:4d:
92:c8:40:c9:bd:84:9d:66:ca:ac:05:0d:2c:25:ce:
ef:6a:3a:36:d6:80:24:3d:86:14:41:ba:d1:1d:4b:
9e:13:79:68:5c:35:6f:81:2a:03:b5:b7:a3:ef:d5:
4a:40:7d:e4:6c:0e:19:27:6a:b8:8b:78:e6:05:bd:
3b:f6:7a:9c:ab:5c:ad:92:af:1f:fa:c1:02:96:a4:
f6:3a:9f:ed:2d:b7:ff:e9:9c:ba:01:34:23:a1:1d:
eb:df:43:4d:ab:62:89:af:4d:85:52:0f:51:04:18:
6a:08:dd:bb:64:49:bf:b0:02:04:4a:2d:4c:e3:06:
a1:a4:76:40:d7:35:43:6e:61:5b:d9:df:eb:f3:e7:
b1:1f:28:f2:d6:80:83:fe:4f:ff:27:05:6e:57:45:
63:1f:85:bd:10:f7:b7:92:cb:31:b5:a1:1c:ae:2d:
dc:60:79:4c:19:a3:3e:5b:1b:ee:d0:51:22:a8:79:
e0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:10:0A:DF:35:85:2B:44:13:65:02:3F:C4:C2:61:F7:02:88:21:71
X509v3 Authority Key Identifier:
keyid:80:A0:D6:89:EB:2B:23:56:5D:87:D2:92:13:A2:E1:38:58:2A:B0:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D46F6/609C86867D8B11F0BB7F96AFDAE4EC9C/gKDWiesrI1Zdh9KSE6LhOFgqsJY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gKDWiesrI1Zdh9KSE6LhOFgqsJY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D46F6/609C86867D8B11F0BB7F96AFDAE4EC9C/B341C57C7D8B11F098D9F7B2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.212.162.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:3a:39:87:8c:b7:7c:ec:0f:f6:86:99:b9:e0:d5:e0:e1:bd:
c8:6d:af:3c:75:c7:5e:3d:39:47:7d:27:fc:f4:a8:df:cf:15:
e2:61:4f:fa:65:3c:0d:a7:c7:18:bb:b6:7f:88:e5:76:5c:71:
71:92:5d:14:38:6e:6f:4b:4e:33:4b:b8:3c:66:90:19:84:e1:
ce:78:cb:fb:f2:1f:2c:33:7d:ee:9f:cb:52:b4:9c:de:a7:d6:
c1:c4:05:ee:ed:fd:55:79:57:51:b9:00:d8:2e:66:3b:99:ee:
53:69:30:4e:e0:3f:a8:ad:8e:e2:a8:b9:58:8e:5e:16:06:ea:
61:3c:21:49:26:2d:73:fb:2e:8e:fe:61:5e:a3:5c:98:2c:d8:
ac:89:69:4a:f6:2c:f2:c3:ef:2a:fe:6f:00:1d:7c:dd:17:22:
51:1f:96:a0:4e:12:da:79:b3:e5:a2:46:49:6b:5f:c4:74:f1:
55:f0:54:97:99:8c:c2:39:10:85:bc:cc:96:70:a9:2c:a9:aa:
c3:f1:70:96:2d:e7:58:58:eb:d8:17:c0:77:12:1d:54:61:d4:
e7:f5:4e:c0:c4:be:89:c6:4a:fb:99:45:a2:67:8c:46:bb:5d:
9e:75:b7:02:1b:df:8d:55:dd:11:ec:1b:b3:35:2a:c0:88:fd:
ca:86:8c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:25:20 2025 by rpki-client