Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F731F/A187DF92379711EEA4C498314AD9E6FC/6FBE03AE72E311F0BDEFCDABDAE4EC9C.roa
File: 6FBE03AE72E311F0BDEFCDABDAE4EC9C.roa (raw, json)
Hash identifier: GDOqL1OTznuXTMdN5hvVfNOqFauRmjCI7pSQfs/61Bg=
Subject key identifier: 2C:76:DF:32:C9:E8:AE:18:31:43:B7:B7:47:E0:16:FE:87:18:F5:64
Certificate issuer: /CN=F36F731FAF/serialNumber=F5C0B63BAA5E7AF7A4386B637FD1206A3682D0C3
Certificate serial: 031B
Authority key identifier: F5:C0:B6:3B:AA:5E:7A:F7:A4:38:6B:63:7F:D1:20:6A:36:82:D0:C3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/9cC2O6peevekOGtjf9EgajaC0MM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F731F/A187DF92379711EEA4C498314AD9E6FC/6FBE03AE72E311F0BDEFCDABDAE4EC9C.roa
Signing time: Wed 06 Aug 2025 16:36:01 +0000
ROA not before: Wed 06 Aug 2025 16:35:56 +0000
ROA not after: Tue 06 Aug 2030 16:35:56 +0000
asID: 29571
IP address blocks: 102.210.80.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F731F/A187DF92379711EEA4C498314AD9E6FC/9cC2O6peevekOGtjf9EgajaC0MM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F731F/A187DF92379711EEA4C498314AD9E6FC/9cC2O6peevekOGtjf9EgajaC0MM.mft
rsync://rpki.afrinic.net/repository/afrinic/9cC2O6peevekOGtjf9EgajaC0MM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 795 (0x31b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F731FAF, serialNumber=F5C0B63BAA5E7AF7A4386B637FD1206A3682D0C3
Validity
Not Before: Aug 6 16:35:56 2025 GMT
Not After : Aug 6 16:35:56 2030 GMT
Subject: CN=68938471-98ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0f:6e:f9:11:f2:68:4c:ea:c4:f8:73:c7:c5:
ef:1a:e2:c9:2d:15:0b:5f:a5:a3:35:57:74:15:61:
7a:c4:35:3b:25:1d:82:85:90:4b:87:46:73:b0:7f:
93:54:ad:01:ee:d5:c3:86:83:af:85:eb:19:3f:6d:
c2:31:0c:c4:dc:a3:96:34:e9:7d:80:f6:90:14:5f:
8c:04:1a:df:54:63:e5:dd:47:b4:76:e6:d5:bf:35:
5a:d1:c4:da:46:d5:32:b6:34:50:fd:f0:fc:ff:16:
ce:40:bd:33:76:6e:9b:c4:e7:09:01:0a:cb:54:75:
c7:a4:ad:a8:68:cc:e6:64:45:5e:a2:c4:10:1f:fa:
09:e8:90:df:b4:d6:96:de:c4:54:3d:ac:7a:21:cd:
3e:6f:21:a3:ac:f0:e7:3a:c2:fc:72:90:0e:ff:ff:
dc:16:5a:87:b3:10:f2:3e:a9:7b:6f:fb:96:92:df:
17:40:0b:92:b5:10:49:fa:c5:af:4d:06:9e:15:33:
aa:1c:b7:1c:e1:3b:5a:a9:45:e4:eb:3b:b2:fc:7d:
a7:d7:c3:2d:e9:05:68:01:5d:e9:fb:60:2d:31:2c:
2c:dc:55:f7:9b:e1:a0:0c:85:a8:d5:af:e8:0a:be:
7f:dc:6e:12:5e:c6:14:2a:3f:a0:04:1b:fc:03:9d:
cd:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:76:DF:32:C9:E8:AE:18:31:43:B7:B7:47:E0:16:FE:87:18:F5:64
X509v3 Authority Key Identifier:
keyid:F5:C0:B6:3B:AA:5E:7A:F7:A4:38:6B:63:7F:D1:20:6A:36:82:D0:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F731F/A187DF92379711EEA4C498314AD9E6FC/9cC2O6peevekOGtjf9EgajaC0MM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9cC2O6peevekOGtjf9EgajaC0MM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F731F/A187DF92379711EEA4C498314AD9E6FC/6FBE03AE72E311F0BDEFCDABDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.210.80.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:0a:d4:44:d9:cc:fc:35:24:5d:cf:69:d0:44:9a:ea:d7:a9:
a0:5c:06:5d:47:60:54:33:21:92:81:f1:39:93:47:2a:09:ea:
ef:a6:6c:4e:cd:b3:69:e4:27:4c:c1:2b:37:6a:1c:cb:e2:b8:
f4:9b:f4:f6:d2:52:15:a9:aa:27:95:74:e7:e5:fe:b6:78:ae:
98:73:56:a5:70:55:b2:19:31:89:63:bd:ca:98:69:de:ee:25:
78:4f:8c:ee:e1:4b:8b:0c:99:33:d7:d4:a7:3a:16:8a:b6:b4:
28:b2:9e:03:f7:20:20:cc:c1:02:a8:0f:59:02:41:75:f0:d2:
15:46:b1:91:ce:07:5e:7f:f6:7c:9d:5a:bc:63:8d:56:70:fd:
11:8c:37:b8:af:72:12:5d:81:7f:8c:96:e3:64:48:e8:92:ea:
73:3a:23:f6:80:81:bb:a6:91:75:00:77:c1:31:fb:46:51:d3:
4f:34:17:c0:9f:6e:03:d1:d8:27:bf:bb:ac:82:da:08:2f:14:
91:04:2e:3e:5d:79:3c:07:79:69:ac:2a:04:bb:19:09:db:f9:
50:75:8f:25:fa:a1:46:f6:ef:b3:c0:81:ab:72:6a:55:12:2f:
05:43:51:c4:2d:db:cf:94:7b:b5:8a:10:a1:36:80:d5:a6:c9:
b7:f2:44:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:22:38 2025 by rpki-client