Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/8659D352A86411F0B9650C85DAE4EC9C.roa
File: 8659D352A86411F0B9650C85DAE4EC9C.roa (raw, json)
Hash identifier: IiumYV39jtmaUlyhcB4ETxNnW6cIU6D31mSGz7y4M0U=
Subject key identifier: 12:86:54:BE:41:92:7A:3A:C2:3C:53:C3:BA:7E:1B:01:E7:A8:18:36
Certificate issuer: /CN=F36FE19EAF/serialNumber=C78CDC3B5D4B13675CB48AD3B63BE01EC5A807F8
Certificate serial: 04A9
Authority key identifier: C7:8C:DC:3B:5D:4B:13:67:5C:B4:8A:D3:B6:3B:E0:1E:C5:A8:07:F8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/x4zcO11LE2dctIrTtjvgHsWoB_g.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/8659D352A86411F0B9650C85DAE4EC9C.roa
Signing time: Mon 13 Oct 2025 18:43:36 +0000
ROA not before: Mon 13 Oct 2025 18:43:31 +0000
ROA not after: Mon 31 Dec 2035 18:43:31 +0000
asID: 328977
IP address blocks: 102.206.168.0/22 maxlen: 24
2c0f:6300::/32 maxlen: 56
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/x4zcO11LE2dctIrTtjvgHsWoB_g.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/x4zcO11LE2dctIrTtjvgHsWoB_g.mft
rsync://rpki.afrinic.net/repository/afrinic/x4zcO11LE2dctIrTtjvgHsWoB_g.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1193 (0x4a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FE19EAF, serialNumber=C78CDC3B5D4B13675CB48AD3B63BE01EC5A807F8
Validity
Not Before: Oct 13 18:43:31 2025 GMT
Not After : Dec 31 18:43:31 2035 GMT
Subject: CN=68ed4857-c02e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c8:e6:9d:45:a4:e6:69:f5:84:5d:01:28:c3:
28:a6:a9:35:43:1e:9c:95:42:55:36:4a:03:32:a1:
dc:4a:e0:49:a2:7c:93:49:58:b9:45:69:db:a2:6e:
87:47:76:89:0c:5a:12:68:48:0f:c7:03:48:2c:f9:
ac:d1:db:23:fc:48:31:7d:14:09:60:3f:c3:57:49:
36:b6:3f:e0:ca:e9:5c:b0:9f:30:6a:49:37:1d:fa:
f9:a3:a4:bc:ea:57:ed:4a:0f:67:90:3c:4b:fd:e5:
e2:7d:15:91:9a:43:bd:ae:77:8c:88:65:38:97:b6:
5e:8f:9a:9c:00:97:ec:20:43:c0:26:81:b4:bf:bc:
da:9e:f3:9c:d0:19:4b:28:dc:76:30:2c:aa:c3:32:
e9:9a:28:8b:62:a9:aa:30:bc:12:7d:ff:2f:86:7d:
77:ec:55:2a:45:7e:ce:5a:a0:a4:0f:1f:62:31:37:
e2:15:68:e5:9e:72:02:ec:78:ba:a3:ca:f7:3d:db:
0a:81:26:eb:d8:d9:a5:42:e2:70:9e:01:cf:8c:1c:
de:f5:06:35:30:7f:bc:c2:56:4a:59:9b:23:53:2c:
b2:4d:95:d4:c5:20:24:55:18:13:ca:ec:4e:19:69:
07:0c:02:90:ce:e1:10:97:95:b0:fa:31:7f:06:55:
64:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:86:54:BE:41:92:7A:3A:C2:3C:53:C3:BA:7E:1B:01:E7:A8:18:36
X509v3 Authority Key Identifier:
keyid:C7:8C:DC:3B:5D:4B:13:67:5C:B4:8A:D3:B6:3B:E0:1E:C5:A8:07:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/x4zcO11LE2dctIrTtjvgHsWoB_g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/x4zcO11LE2dctIrTtjvgHsWoB_g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/8659D352A86411F0B9650C85DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.206.168.0/22
IPv6:
2c0f:6300::/32
Signature Algorithm: sha256WithRSAEncryption
9f:db:d9:3b:2f:e6:0f:f4:fd:27:5e:a5:3a:86:36:f4:0e:2d:
61:28:c1:12:11:ea:05:a9:11:b1:e0:a0:10:64:d7:5a:17:fd:
76:cf:97:36:a3:6a:7d:ec:ab:61:2f:75:2b:13:6b:80:09:66:
04:b4:e6:e2:26:19:51:76:5f:ae:fc:d0:95:c9:4b:f5:c1:50:
29:1b:7a:df:6c:0b:a8:5e:0a:65:7d:d1:31:39:5d:92:c1:48:
fa:07:5e:e5:4d:62:23:fe:75:cc:ed:65:23:4f:38:a5:5a:47:
3c:da:a7:e7:45:d5:46:54:41:a3:0f:db:88:c2:1f:1d:54:58:
ce:68:82:d9:b3:af:33:d1:09:da:6e:98:20:f1:0b:40:6c:23:
02:c4:ea:eb:e1:b5:ba:3a:8d:d5:b8:83:c8:ce:a2:ce:d1:92:
b6:91:97:76:da:95:19:8b:a4:fa:18:d0:55:85:2b:9b:29:74:
07:d5:1d:6a:44:cf:a3:8c:7b:42:a1:a0:db:2d:1a:37:c6:17:
5c:a5:8b:04:e1:5e:49:8b:5a:15:c9:c4:b9:e6:c7:db:41:dc:
07:07:8e:78:80:f9:de:41:98:98:59:35:c0:73:87:e3:73:0f:
21:a2:76:5e:65:d9:4a:64:ba:c9:a1:0f:d8:66:30:39:b8:ae:
ec:a4:10:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:49:24 2025 by rpki-client