Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DD92B/F4F4F3EA0BBD11EF8655910D017001B1/9A80206C9E9F11F08B5173C7DAE4EC9C.roa
File: 9A80206C9E9F11F08B5173C7DAE4EC9C.roa (raw, json)
Hash identifier: zMpoEJiydkEB9R9gGzSBD+NZusOfsnt8eXXZDmo8PjE=
Subject key identifier: 7A:CC:1E:47:4F:A4:75:D4:CF:20:A0:07:03:96:6C:5B:9C:EE:7D:E5
Certificate issuer: /CN=F36DD92BAF/serialNumber=992CD319D7A515A56373294CE049153F8C3E004B
Certificate serial: 0211
Authority key identifier: 99:2C:D3:19:D7:A5:15:A5:63:73:29:4C:E0:49:15:3F:8C:3E:00:4B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/mSzTGdelFaVjcylM4EkVP4w-AEs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DD92B/F4F4F3EA0BBD11EF8655910D017001B1/9A80206C9E9F11F08B5173C7DAE4EC9C.roa
Signing time: Wed 01 Oct 2025 08:21:18 +0000
ROA not before: Wed 01 Oct 2025 08:21:13 +0000
ROA not after: Mon 01 Oct 2035 08:21:13 +0000
asID: 328723
IP address blocks: 102.206.116.0/22 maxlen: 24
102.209.84.0/22 maxlen: 24
102.222.20.0/22 maxlen: 24
2c0f:e990::/32 maxlen: 36
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DD92B/F4F4F3EA0BBD11EF8655910D017001B1/mSzTGdelFaVjcylM4EkVP4w-AEs.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DD92B/F4F4F3EA0BBD11EF8655910D017001B1/mSzTGdelFaVjcylM4EkVP4w-AEs.mft
rsync://rpki.afrinic.net/repository/afrinic/mSzTGdelFaVjcylM4EkVP4w-AEs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 04:16:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 529 (0x211)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DD92BAF, serialNumber=992CD319D7A515A56373294CE049153F8C3E004B
Validity
Not Before: Oct 1 08:21:13 2025 GMT
Not After : Oct 1 08:21:13 2035 GMT
Subject: CN=68dce47e-b386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e2:c4:62:40:08:f1:73:ce:ab:2b:5c:7d:00:
2d:a4:65:48:75:1c:42:da:32:fc:49:10:2b:da:7c:
c5:29:09:f1:dc:c0:cb:cd:b2:e3:12:f6:c3:ad:ac:
cb:c6:fa:45:e5:2a:fb:01:ba:75:d8:c2:62:33:84:
93:6b:d7:1e:e7:51:01:05:06:3c:0e:63:6f:9a:82:
c0:ef:93:a7:4c:a7:e2:67:a9:ef:27:1b:d9:d6:a0:
29:34:f4:ac:da:cd:22:6a:e8:51:91:93:3c:b4:6b:
9d:69:79:6a:48:a1:36:e6:1f:26:32:50:4c:22:14:
d1:a4:e4:e8:12:d6:0e:a1:de:b2:ae:63:3c:6c:6a:
d5:0c:be:1d:be:3e:2e:48:2f:38:45:8f:1a:e8:6f:
bb:18:b6:32:ea:57:28:98:8a:b0:3b:d6:2a:96:0a:
98:2d:00:de:e3:68:c0:81:2f:8c:ec:6e:c3:1d:8f:
62:6c:c0:d8:c3:cb:bc:d8:f5:a7:24:cb:79:f5:c6:
a6:42:89:2b:5f:56:22:12:39:cd:37:9d:42:5d:38:
66:7e:ca:d6:6b:51:95:8f:d5:66:92:bd:e4:43:7e:
84:a5:9d:8a:87:31:17:5a:cb:22:2a:be:aa:56:3c:
e5:b7:6f:ae:1d:1d:2c:85:db:47:d7:cc:71:72:ef:
dd:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:CC:1E:47:4F:A4:75:D4:CF:20:A0:07:03:96:6C:5B:9C:EE:7D:E5
X509v3 Authority Key Identifier:
keyid:99:2C:D3:19:D7:A5:15:A5:63:73:29:4C:E0:49:15:3F:8C:3E:00:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DD92B/F4F4F3EA0BBD11EF8655910D017001B1/mSzTGdelFaVjcylM4EkVP4w-AEs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/mSzTGdelFaVjcylM4EkVP4w-AEs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DD92B/F4F4F3EA0BBD11EF8655910D017001B1/9A80206C9E9F11F08B5173C7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.206.116.0/22
102.209.84.0/22
102.222.20.0/22
IPv6:
2c0f:e990::/32
Signature Algorithm: sha256WithRSAEncryption
56:40:44:2f:26:5c:ef:0d:bb:32:d9:16:e0:98:3a:99:37:96:
1d:5f:f9:38:f8:36:53:4e:43:98:86:60:8b:ec:0c:e2:92:af:
34:d4:d1:b3:8b:61:73:b0:db:74:07:1b:6b:a4:54:94:bb:34:
61:38:d3:d4:25:d2:88:08:b1:66:26:e5:b2:d3:e7:5a:52:fc:
85:b8:23:5e:16:92:5e:cd:14:de:ce:d7:58:0f:68:bd:76:2a:
8d:13:0b:29:48:3c:32:63:cc:a7:22:23:0f:69:15:b2:de:85:
8a:98:9a:2a:56:ac:ab:14:e3:97:4e:e8:ba:55:ae:0f:32:e5:
d7:3d:fc:db:90:f0:2c:78:67:a0:24:b6:11:30:51:ef:20:5b:
1f:d6:ae:b7:1f:c8:c4:af:5e:99:93:99:2f:f7:56:c5:05:5a:
72:16:c2:83:6f:b6:86:cc:16:ad:47:e2:e2:d5:91:af:bb:53:
b3:4c:ed:a5:e4:f6:bc:df:0f:fc:63:61:70:e8:f6:95:f8:50:
15:6b:1c:26:66:0d:57:45:5e:2e:74:1e:86:8c:a9:c4:b6:82:
ae:02:0f:e9:b1:4a:ac:5d:55:ab:59:09:7a:f0:27:71:7b:2a:
af:18:14:b3:8d:8f:03:22:46:98:67:93:08:f0:7e:23:00:6c:
18:07:2f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:50:07 2025 by rpki-client