Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B222D/452A30E0B5E111F0B13E07F6DAE4EC9C/C4BDCF3CB82B11F0B7DB80E1DAE4EC9C.roa
File: C4BDCF3CB82B11F0B7DB80E1DAE4EC9C.roa (raw, json)
Hash identifier: tOfIeOAf4uXl6pOeSJ1Xju9VQWrYerPezpD2f2dwyfA=
Subject key identifier: C5:E7:D8:91:DC:19:03:14:F4:78:FC:08:62:E2:93:C4:D7:31:78:10
Certificate issuer: /CN=F36B222DAF/serialNumber=0ADC3CFBB7DD032DA99F48C7A40D86F0F91CFE1A
Certificate serial: 05
Authority key identifier: 0A:DC:3C:FB:B7:DD:03:2D:A9:9F:48:C7:A4:0D:86:F0:F9:1C:FE:1A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Ctw8-7fdAy2pn0jHpA2G8Pkc_ho.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B222D/452A30E0B5E111F0B13E07F6DAE4EC9C/C4BDCF3CB82B11F0B7DB80E1DAE4EC9C.roa
Signing time: Sun 02 Nov 2025 20:37:38 +0000
ROA not before: Sun 02 Nov 2025 20:37:32 +0000
ROA not after: Tue 02 Nov 2027 20:37:32 +0000
asID: 329622
IP address blocks: 102.204.148.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B222D/452A30E0B5E111F0B13E07F6DAE4EC9C/Ctw8-7fdAy2pn0jHpA2G8Pkc_ho.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B222D/452A30E0B5E111F0B13E07F6DAE4EC9C/Ctw8-7fdAy2pn0jHpA2G8Pkc_ho.mft
rsync://rpki.afrinic.net/repository/afrinic/Ctw8-7fdAy2pn0jHpA2G8Pkc_ho.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B222DAF, serialNumber=0ADC3CFBB7DD032DA99F48C7A40D86F0F91CFE1A
Validity
Not Before: Nov 2 20:37:32 2025 GMT
Not After : Nov 2 20:37:32 2027 GMT
Subject: CN=6907c111-00a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cf:f5:88:0d:66:c8:61:29:7f:76:c5:95:35:
e9:d9:e7:b7:bb:79:bf:31:41:92:6d:a5:f2:c6:09:
b9:87:01:d7:fe:07:a0:27:5e:85:75:11:98:1a:f9:
ff:16:7a:bb:04:2a:9b:3d:ef:e0:33:37:c6:24:fc:
17:77:ca:9b:4a:67:19:74:c2:58:f8:e4:ad:e9:76:
33:bd:51:86:96:cf:fc:fe:f4:a6:74:2e:c2:7e:b2:
e6:00:67:a4:3b:fe:a5:17:eb:9c:f7:1b:71:2a:ee:
c8:82:d8:e4:95:10:07:4f:65:2b:2c:00:d1:13:36:
1f:29:da:7d:74:3f:71:4f:d8:99:8b:be:76:85:7e:
4a:b9:3c:42:e7:4e:df:84:74:58:50:c3:3c:18:95:
08:32:3a:fd:ec:46:9f:2f:5e:ff:84:a1:37:a1:a8:
3b:15:1d:c1:19:aa:02:73:f2:01:dc:58:ba:b4:ce:
f2:a1:7c:54:fe:f5:37:5b:cc:a4:f7:0f:3d:2f:e2:
5b:af:30:c2:ce:4e:7b:a8:74:3e:52:33:a0:88:83:
c3:99:81:24:d4:ee:85:d2:7a:57:d2:af:ba:09:95:
a7:ad:ab:56:ca:10:bc:7c:57:8a:96:50:2c:c9:8b:
17:5b:0a:00:3a:70:7d:22:e7:cb:93:3b:f8:39:59:
2d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:E7:D8:91:DC:19:03:14:F4:78:FC:08:62:E2:93:C4:D7:31:78:10
X509v3 Authority Key Identifier:
keyid:0A:DC:3C:FB:B7:DD:03:2D:A9:9F:48:C7:A4:0D:86:F0:F9:1C:FE:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B222D/452A30E0B5E111F0B13E07F6DAE4EC9C/Ctw8-7fdAy2pn0jHpA2G8Pkc_ho.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ctw8-7fdAy2pn0jHpA2G8Pkc_ho.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B222D/452A30E0B5E111F0B13E07F6DAE4EC9C/C4BDCF3CB82B11F0B7DB80E1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.204.148.0/22
Signature Algorithm: sha256WithRSAEncryption
c3:62:cf:c5:3c:82:f8:5a:a7:27:84:a2:38:f8:69:07:51:91:
4d:18:df:e2:3a:fb:48:bc:fc:33:16:9c:bc:be:ff:63:37:21:
e8:6d:e3:20:e1:61:48:ec:4c:14:21:9a:d7:02:27:a8:49:d6:
52:ee:14:a0:7a:c3:48:74:b9:5d:68:62:35:74:b0:7e:1d:1b:
75:2d:b4:ac:af:23:36:4d:2b:36:18:5d:c4:9a:89:fe:99:8e:
4a:0d:43:3a:a2:20:33:c0:0e:62:fa:9c:39:e1:53:b9:ee:d5:
a5:6d:c8:c9:1e:79:98:8a:08:69:ea:a4:59:4f:85:0b:1b:f4:
59:fb:80:85:c9:cb:53:37:38:7f:9e:87:a5:6b:db:38:26:9d:
1f:ec:58:17:3d:1a:6d:03:23:21:93:14:5f:54:fb:2a:b5:2d:
dc:8a:5f:c2:3c:f5:ab:28:d8:8a:fe:57:0c:80:a4:8e:8b:52:
22:6c:d3:7f:0f:d7:50:92:52:c0:a6:88:8c:07:7d:56:2b:12:
71:b7:b6:38:7c:c2:8c:e8:71:85:3a:ba:bb:9c:fe:41:8e:a0:
b1:e9:cc:98:df:85:b2:97:0e:79:c5:7b:bc:48:63:be:59:6f:
f7:32:2e:5e:22:0c:b2:5d:07:4e:f6:2d:ec:9b:73:8b:9f:fa:
78:a6:7a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:23:32 2025 by rpki-client