Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DA3E9/3CBCB97259C011EC9B4364725A40D577/3D9CC9BAA41F11F08FC68FF1DAE4EC9C.roa
File: 3D9CC9BAA41F11F08FC68FF1DAE4EC9C.roa (raw, json)
Hash identifier: Lvc6oF+N0W4NT7yNVgV113qEtHq9etKoivO/5PjgtCE=
Subject key identifier: F7:CD:41:93:9C:78:6E:8C:82:67:37:98:44:08:F0:A8:60:B2:84:4E
Certificate issuer: /CN=F36DA3E9AF/serialNumber=3D2C034F851F3715B2BA4C9C95E5285DAF2EE923
Certificate serial: 05D0
Authority key identifier: 3D:2C:03:4F:85:1F:37:15:B2:BA:4C:9C:95:E5:28:5D:AF:2E:E9:23
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/PSwDT4UfNxWyukycleUoXa8u6SM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DA3E9/3CBCB97259C011EC9B4364725A40D577/3D9CC9BAA41F11F08FC68FF1DAE4EC9C.roa
Signing time: Wed 08 Oct 2025 08:17:34 +0000
ROA not before: Wed 08 Oct 2025 08:17:29 +0000
ROA not after: Tue 09 Oct 2035 08:17:29 +0000
asID: 15399
IP address blocks: 102.206.16.0/22 maxlen: 22
102.206.20.0/22 maxlen: 22
102.207.28.0/22 maxlen: 22
102.208.152.0/22 maxlen: 22
102.209.36.0/22 maxlen: 22
102.209.92.0/22 maxlen: 22
102.209.132.0/22 maxlen: 22
102.210.84.0/22 maxlen: 22
102.210.180.0/22 maxlen: 22
102.211.32.0/22 maxlen: 22
102.211.88.0/22 maxlen: 22
102.211.248.0/22 maxlen: 22
102.212.112.0/22 maxlen: 22
102.212.116.0/22 maxlen: 22
102.213.36.0/22 maxlen: 22
102.214.48.0/22 maxlen: 22
102.215.28.0/22 maxlen: 22
102.215.148.0/22 maxlen: 22
102.215.160.0/22 maxlen: 22
102.216.60.0/22 maxlen: 22
102.216.244.0/22 maxlen: 22
102.217.80.0/22 maxlen: 22
102.218.28.0/22 maxlen: 22
102.219.120.0/22 maxlen: 22
102.219.216.0/22 maxlen: 22
102.221.20.0/22 maxlen: 22
102.222.84.0/22 maxlen: 22
2c0f:e958::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DA3E9/3CBCB97259C011EC9B4364725A40D577/PSwDT4UfNxWyukycleUoXa8u6SM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DA3E9/3CBCB97259C011EC9B4364725A40D577/PSwDT4UfNxWyukycleUoXa8u6SM.mft
rsync://rpki.afrinic.net/repository/afrinic/PSwDT4UfNxWyukycleUoXa8u6SM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1488 (0x5d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DA3E9AF, serialNumber=3D2C034F851F3715B2BA4C9C95E5285DAF2EE923
Validity
Not Before: Oct 8 08:17:29 2025 GMT
Not After : Oct 9 08:17:29 2035 GMT
Subject: CN=68e61e1d-908a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b9:4e:45:e2:7a:bc:d9:78:48:1a:c8:88:98:
50:52:ac:06:1c:b6:1a:0a:d8:03:57:04:01:7c:25:
1f:3d:d5:f1:5c:5f:fd:6a:59:b7:c1:f6:3c:80:c2:
75:af:b6:df:e0:c0:19:8e:ec:20:71:0e:97:86:64:
15:00:f1:28:43:37:e0:67:95:07:20:24:13:94:b8:
09:09:cd:96:f3:43:f4:ff:64:50:09:63:c0:d9:aa:
57:0b:76:1a:46:d2:55:52:18:02:d2:9b:34:03:f3:
a1:7e:89:31:69:9d:79:1d:1e:79:9d:30:81:59:3c:
77:bd:92:89:33:f0:f2:7a:9c:42:e6:11:61:a5:06:
b8:39:ae:3d:d1:07:0e:03:8b:f1:7e:ea:63:c0:0c:
54:38:63:c2:b7:3c:f2:77:f9:54:b3:6e:94:84:27:
b3:c0:84:c9:88:e6:5b:1e:05:5e:3b:85:29:ab:70:
ed:9f:aa:ea:09:11:fc:15:71:f4:10:7b:a9:18:29:
75:bf:95:56:d6:75:e3:6f:af:34:63:80:b8:e7:98:
f7:49:ae:b8:b3:0d:99:e4:1f:e0:8d:30:ab:46:c2:
c0:ac:50:19:24:7b:3f:b1:f8:f0:1a:94:5c:56:a7:
32:e2:06:67:eb:2f:94:e0:12:7c:29:32:75:01:53:
b8:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:CD:41:93:9C:78:6E:8C:82:67:37:98:44:08:F0:A8:60:B2:84:4E
X509v3 Authority Key Identifier:
keyid:3D:2C:03:4F:85:1F:37:15:B2:BA:4C:9C:95:E5:28:5D:AF:2E:E9:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA3E9/3CBCB97259C011EC9B4364725A40D577/PSwDT4UfNxWyukycleUoXa8u6SM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PSwDT4UfNxWyukycleUoXa8u6SM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA3E9/3CBCB97259C011EC9B4364725A40D577/3D9CC9BAA41F11F08FC68FF1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.206.16.0/21
102.207.28.0/22
102.208.152.0/22
102.209.36.0/22
102.209.92.0/22
102.209.132.0/22
102.210.84.0/22
102.210.180.0/22
102.211.32.0/22
102.211.88.0/22
102.211.248.0/22
102.212.112.0/21
102.213.36.0/22
102.214.48.0/22
102.215.28.0/22
102.215.148.0/22
102.215.160.0/22
102.216.60.0/22
102.216.244.0/22
102.217.80.0/22
102.218.28.0/22
102.219.120.0/22
102.219.216.0/22
102.221.20.0/22
102.222.84.0/22
IPv6:
2c0f:e958::/32
Signature Algorithm: sha256WithRSAEncryption
13:89:5f:25:96:37:1c:4b:9e:99:87:24:bc:9c:98:8b:b7:9c:
92:af:36:c4:16:b8:19:55:61:d1:e0:a8:60:3e:95:30:a0:9b:
56:94:22:7a:37:f7:c9:45:13:67:b9:0a:28:37:1a:fa:14:72:
a5:3f:95:27:1e:70:bb:91:67:b1:51:b1:43:f4:7b:67:8e:58:
8c:61:cf:af:ce:58:81:27:75:f2:75:3b:28:51:6e:be:52:82:
5f:d9:1c:9d:eb:a0:59:4e:e6:03:19:62:1e:00:e4:8d:e4:8d:
b4:0d:3c:33:4a:68:15:50:6e:c9:f2:92:18:f9:ac:7d:e8:a8:
e6:f6:b0:1a:44:5b:e8:c9:93:02:6a:fa:13:0b:05:d1:da:b3:
fe:4d:7c:e9:1f:da:18:22:b6:04:fd:7c:43:18:4c:ff:99:9f:
d1:1e:00:3a:30:2e:df:7d:5d:ee:14:4a:11:10:08:15:32:27:
11:ac:93:61:b1:78:15:28:d6:1f:d1:2f:83:62:8b:62:aa:72:
78:a0:8c:6f:01:07:4e:cc:06:30:68:e7:c2:7c:bb:6a:b3:9a:
04:48:7c:e5:07:60:84:ea:00:a3:a2:33:2c:71:53:d1:6c:e3:
0b:cf:ed:f4:e5:51:3b:88:d5:6d:a4:56:1b:d1:e7:db:e2:cd:
93:65:a8:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:04:55 2025 by rpki-client