
Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/409CF10850E111F0986264E2DAE4EC9C.roa
File: 409CF10850E111F0986264E2DAE4EC9C.roa (raw, json)
Hash identifier: Rv8B7d0mX6Fqq83MoQ7dcQHGa++1Fp9qoSXiOUYArXg=
Subject key identifier: E5:78:39:4D:5E:0C:9C:49:0C:9D:71:38:82:A2:35:16:37:29:CC:72
Certificate issuer: /CN=F36EF7D0AF/serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
Certificate serial: 0390
Authority key identifier: 3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/409CF10850E111F0986264E2DAE4EC9C.roa
Signing time: Tue 24 Jun 2025 09:54:43 +0000
ROA not before: Tue 24 Jun 2025 09:54:39 +0000
ROA not after: Mon 24 Jun 2030 09:54:39 +0000
asID: 21859
IP address blocks: 102.212.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl
rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.mft
rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 01 Jul 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 912 (0x390)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36EF7D0AF, serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
Validity
Not Before: Jun 24 09:54:39 2025 GMT
Not After : Jun 24 09:54:39 2030 GMT
Subject: CN=685a75e3-2d05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:99:5b:63:1b:5b:bc:82:22:3d:63:99:3d:41:
2f:3e:0c:0b:62:42:69:e4:b1:1c:fa:2e:8e:81:88:
4d:1b:32:c1:67:aa:a7:97:5d:73:05:dc:79:5c:a3:
dc:1e:21:66:c3:ca:14:6a:32:58:00:78:e6:2a:18:
31:26:f0:9c:97:df:af:89:d3:36:22:87:bd:04:be:
d9:26:c0:b0:a9:a7:3c:e9:5a:84:7d:6d:28:a2:f2:
a9:d9:f7:3c:2e:b1:66:ee:30:3a:0f:4e:d3:d5:cb:
dd:da:2e:c1:66:25:f4:74:a3:47:94:72:d7:c0:f4:
3c:44:9e:af:af:28:c4:83:ca:6c:dd:2c:e7:c2:b0:
84:b9:95:3e:7f:fb:35:12:93:08:49:3a:9b:a4:f4:
a7:be:92:03:8d:12:2e:00:f3:40:bb:dd:08:1a:58:
8c:95:74:1b:38:3b:3c:10:78:62:33:43:33:a0:33:
2a:25:d3:39:a8:4e:42:c0:5c:da:0b:12:ab:13:8c:
78:9d:96:58:f2:1c:a0:af:66:e1:0c:05:7b:bf:cc:
eb:4d:28:e8:95:9d:d5:dd:8c:b4:3d:8d:4d:38:75:
1a:69:9b:ee:e6:59:2b:4b:8c:bc:e3:60:27:b4:87:
05:59:c7:93:03:be:1d:3c:07:e0:2d:f6:90:70:90:
9b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:78:39:4D:5E:0C:9C:49:0C:9D:71:38:82:A2:35:16:37:29:CC:72
X509v3 Authority Key Identifier:
keyid:3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/409CF10850E111F0986264E2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.212.7.0/24
Signature Algorithm: sha256WithRSAEncryption
70:90:f9:e9:41:f2:fe:15:dc:98:da:11:d3:6b:d0:9c:70:a2:
54:76:f9:b1:bc:52:1d:24:81:15:ec:a2:3d:7e:26:1f:70:91:
18:c3:2a:28:ff:e7:c5:dc:d0:bc:d1:f5:8b:cc:c8:60:b6:02:
ac:8f:93:de:c0:d6:4d:40:98:bd:06:20:8f:87:28:76:34:0f:
76:24:25:bb:e5:f4:16:cf:2c:5d:f3:ca:3b:32:a3:69:41:74:
62:f8:50:fc:08:b3:88:94:3b:ea:22:59:23:c2:0a:58:e8:53:
2f:6a:b2:23:b5:5e:55:6d:1c:a7:57:6a:13:db:26:68:7e:44:
50:09:de:52:46:51:ba:48:da:75:8a:6f:38:7b:8d:a7:1e:2d:
28:b8:21:c2:c0:98:ef:6a:1b:dc:d0:fb:7b:cd:7c:d3:97:15:
4b:04:55:76:54:e0:1e:71:89:2f:53:ee:df:07:4f:fa:5a:e0:
69:57:52:9e:47:35:ab:9d:00:53:d7:7b:1b:e6:fe:8f:e3:7a:
d4:e7:ff:b2:44:a4:7f:b0:db:08:de:77:82:96:c5:3c:bf:0b:
5d:24:53:91:aa:b7:b2:44:f3:b8:52:23:b2:ac:4e:27:5e:5d:
d5:69:57:ad:71:cf:22:cb:88:cc:e9:ee:1c:69:a6:41:1a:30:
f9:db:dd:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:56:07 2025 by rpki-client