Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EF186/095B7A2A548011EE8C8F332D4AD9E6FC/8E4ED3589E3411F0A337C782DAE4EC9C.roa
File: 8E4ED3589E3411F0A337C782DAE4EC9C.roa (raw, json)
Hash identifier: zF9WsLUYdcsH261103fye/uPQJ8HMPPma5MQpPigfEE=
Subject key identifier: 4C:22:3E:67:C7:F1:DF:AD:2D:49:AA:51:8D:0E:5D:F1:2A:72:39:E0
Certificate issuer: /CN=F36EF186AF/serialNumber=F377D4D428F9465B15449C6AFD4532C422446964
Certificate serial: 031B
Authority key identifier: F3:77:D4:D4:28:F9:46:5B:15:44:9C:6A:FD:45:32:C4:22:44:69:64
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/83fU1Cj5RlsVRJxq_UUyxCJEaWQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36EF186/095B7A2A548011EE8C8F332D4AD9E6FC/8E4ED3589E3411F0A337C782DAE4EC9C.roa
Signing time: Tue 30 Sep 2025 19:35:01 +0000
ROA not before: Tue 30 Sep 2025 19:34:56 +0000
ROA not after: Sun 30 Sep 2040 19:34:56 +0000
asID: 328611
IP address blocks: 102.204.184.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36EF186/095B7A2A548011EE8C8F332D4AD9E6FC/83fU1Cj5RlsVRJxq_UUyxCJEaWQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F36EF186/095B7A2A548011EE8C8F332D4AD9E6FC/83fU1Cj5RlsVRJxq_UUyxCJEaWQ.mft
rsync://rpki.afrinic.net/repository/afrinic/83fU1Cj5RlsVRJxq_UUyxCJEaWQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 795 (0x31b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36EF186AF, serialNumber=F377D4D428F9465B15449C6AFD4532C422446964
Validity
Not Before: Sep 30 19:34:56 2025 GMT
Not After : Sep 30 19:34:56 2040 GMT
Subject: CN=68dc30e5-3b68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6d:9c:5e:b0:ea:31:84:ac:a4:5b:00:fa:10:
f7:dd:9b:4c:6b:e0:61:46:5f:5e:bc:99:e8:89:69:
d6:d3:40:ac:8c:8d:9e:13:c3:3c:7e:15:8e:dc:3a:
dc:a3:d8:ae:0c:a3:a2:f5:1f:f0:c1:21:03:a9:7e:
73:8e:0e:81:d8:39:05:76:cd:99:dc:80:d1:84:12:
b3:35:ef:60:b4:6c:0c:0f:26:64:e5:1a:b2:db:26:
08:67:84:ce:24:1b:3d:b6:13:14:01:d2:f2:9e:5c:
5e:62:7a:0a:49:56:24:76:77:89:df:a8:0e:3f:c6:
5b:5b:83:2c:6a:67:8f:b8:64:96:d7:d9:27:9a:7b:
78:88:a5:f6:58:2b:7b:2a:f5:a8:9c:42:b2:e3:e0:
de:a7:07:b2:e5:3a:1d:18:da:0c:74:4c:20:b2:09:
07:04:6c:84:bb:f6:6e:da:8f:71:5a:1c:40:65:a3:
1d:d9:9b:da:45:8d:79:96:27:c3:4a:9b:14:51:7d:
b0:90:d5:4a:fc:ef:f1:5f:69:e3:e2:1e:47:d4:2f:
d7:d0:db:8e:a9:9c:79:c8:5e:e5:e3:9a:4d:d3:d1:
26:b4:12:36:99:b6:84:45:e2:79:46:a6:a8:80:9e:
c9:39:61:f3:64:43:e3:f6:e7:3f:4d:a5:d7:8a:4d:
90:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:22:3E:67:C7:F1:DF:AD:2D:49:AA:51:8D:0E:5D:F1:2A:72:39:E0
X509v3 Authority Key Identifier:
keyid:F3:77:D4:D4:28:F9:46:5B:15:44:9C:6A:FD:45:32:C4:22:44:69:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF186/095B7A2A548011EE8C8F332D4AD9E6FC/83fU1Cj5RlsVRJxq_UUyxCJEaWQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/83fU1Cj5RlsVRJxq_UUyxCJEaWQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF186/095B7A2A548011EE8C8F332D4AD9E6FC/8E4ED3589E3411F0A337C782DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.204.184.0/22
Signature Algorithm: sha256WithRSAEncryption
53:af:a2:11:ce:7c:a5:80:2d:67:76:6b:5c:62:bf:0c:ba:a2:
d7:0e:bf:a6:9b:68:77:03:b9:c6:a0:7c:0a:90:27:99:bf:6d:
4c:cc:0f:94:17:89:dc:76:79:6c:d3:49:f8:8a:e2:6b:52:89:
9b:2b:d0:4d:80:f7:35:ea:a6:10:2a:82:b8:0a:86:12:4c:37:
24:47:ac:07:eb:3e:e3:81:a2:a5:24:08:26:a0:e8:b6:69:81:
91:83:04:69:4b:48:1e:84:cb:0d:73:7a:bd:87:64:51:8b:d2:
89:37:63:77:af:1a:91:b8:2f:82:0e:69:e8:3e:18:0b:71:38:
ef:ea:44:35:7f:fc:20:a4:b4:b7:4a:83:25:68:0a:19:dc:1e:
8d:a6:8f:b4:4e:4e:70:3e:89:21:9b:d1:f1:a4:c1:89:52:88:
3c:35:53:58:04:d0:66:32:9d:2c:8e:3c:80:72:d6:4a:bd:ac:
2f:74:0b:3d:fd:85:7d:93:df:95:15:dc:dd:82:4d:30:83:2a:
7b:a2:30:7d:92:98:ab:91:4f:09:07:7f:97:bd:59:9e:c5:ab:
2b:53:f3:cb:e5:ef:ea:8b:a4:a5:f3:a1:b8:da:5d:4a:a3:9a:
ea:31:32:08:eb:de:82:ee:95:7e:e8:de:fd:c0:1b:2d:b7:4a:
6e:e3:f8:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:26:55 2025 by rpki-client