Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B8F68/A101D01CB8AC11F0BC7A6097DAE4EC9C/84BB7BCAB8B011F0B7D56BB0DAE4EC9C.roa
File: 84BB7BCAB8B011F0B7D56BB0DAE4EC9C.roa (raw, json)
Hash identifier: FfRea3nDQ6ntt0Y4r1T1mGH8t64xpRYDvG3sd/6vT5E=
Subject key identifier: BE:20:F7:9F:83:0D:9D:07:FA:21:CB:50:99:CB:FB:37:ED:CB:4E:0C
Certificate issuer: /CN=F36B8F68AF/serialNumber=D09DCA0EBA9B868FEDAE49C2B6692AEE054579CA
Certificate serial: 02
Authority key identifier: D0:9D:CA:0E:BA:9B:86:8F:ED:AE:49:C2:B6:69:2A:EE:05:45:79:CA
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/0J3KDrqbho_trknCtmkq7gVFeco.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B8F68/A101D01CB8AC11F0BC7A6097DAE4EC9C/84BB7BCAB8B011F0B7D56BB0DAE4EC9C.roa
Signing time: Mon 03 Nov 2025 12:27:53 +0000
ROA not before: Mon 03 Nov 2025 12:27:46 +0000
ROA not after: Sun 03 Nov 2030 12:27:46 +0000
asID: 329635
IP address blocks: 102.204.127.0/24 maxlen: 24
2c0f:79c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B8F68/A101D01CB8AC11F0BC7A6097DAE4EC9C/0J3KDrqbho_trknCtmkq7gVFeco.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B8F68/A101D01CB8AC11F0BC7A6097DAE4EC9C/0J3KDrqbho_trknCtmkq7gVFeco.mft
rsync://rpki.afrinic.net/repository/afrinic/0J3KDrqbho_trknCtmkq7gVFeco.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B8F68AF, serialNumber=D09DCA0EBA9B868FEDAE49C2B6692AEE054579CA
Validity
Not Before: Nov 3 12:27:46 2025 GMT
Not After : Nov 3 12:27:46 2030 GMT
Subject: CN=69089fc9-1a25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:18:4c:6c:fb:92:3f:14:6d:a9:59:bd:2d:48:
3c:b2:89:eb:e6:4d:a7:1c:92:d2:83:51:cf:4e:77:
c2:f7:a1:b7:78:09:ff:36:1b:7a:4d:6a:bc:74:45:
c0:bb:06:56:cf:67:2b:c9:1c:45:73:a9:80:cb:24:
16:35:70:02:3d:cd:bf:f1:09:60:f4:02:cd:5b:eb:
46:40:48:1b:d2:9b:1f:99:09:4f:a5:0c:ac:5b:f5:
07:1e:92:d2:42:5a:b5:eb:cd:9e:06:d9:5d:f7:6a:
2d:26:ff:b9:67:38:ce:f9:52:52:c9:5c:c8:4a:54:
2b:fa:f7:a2:a0:33:11:a1:fe:12:d8:9f:dc:19:91:
99:19:59:e7:81:b8:8e:e3:f6:4d:01:c8:65:27:c9:
2f:77:ca:73:74:e4:3b:81:c4:34:c8:7d:7b:5c:6e:
bc:22:80:4a:5b:1c:88:ac:4e:ad:a7:11:9b:fb:51:
c0:e7:ec:79:5e:b3:de:68:ff:dd:c6:37:9b:32:f3:
08:83:c0:bd:7b:47:34:e1:51:12:29:6e:c4:eb:a7:
26:46:bb:d9:fc:9f:d6:ac:ff:a5:2b:a4:88:97:aa:
48:03:78:56:5b:6c:03:0b:ec:e7:5e:b3:40:34:f3:
6a:c8:d0:0a:38:10:60:8a:3f:29:6a:6f:5f:1f:3e:
45:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:20:F7:9F:83:0D:9D:07:FA:21:CB:50:99:CB:FB:37:ED:CB:4E:0C
X509v3 Authority Key Identifier:
keyid:D0:9D:CA:0E:BA:9B:86:8F:ED:AE:49:C2:B6:69:2A:EE:05:45:79:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B8F68/A101D01CB8AC11F0BC7A6097DAE4EC9C/0J3KDrqbho_trknCtmkq7gVFeco.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0J3KDrqbho_trknCtmkq7gVFeco.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B8F68/A101D01CB8AC11F0BC7A6097DAE4EC9C/84BB7BCAB8B011F0B7D56BB0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.204.127.0/24
IPv6:
2c0f:79c0::/32
Signature Algorithm: sha256WithRSAEncryption
16:3c:0a:59:e5:1e:09:64:ae:e5:30:b7:46:29:6e:f4:47:7b:
0b:6f:a6:ec:6d:85:3c:e5:94:a5:1d:09:23:b6:c9:c1:4e:b6:
b8:7d:b0:c6:ac:2e:dd:5c:18:ed:8e:22:70:1d:56:87:11:90:
d2:97:9a:a1:c6:68:52:80:4a:4e:b1:7a:94:aa:53:e7:00:94:
ae:fa:b4:00:e8:f6:fd:16:67:34:2b:06:1a:ec:42:81:89:c3:
3f:b1:2f:bd:14:b0:70:e8:10:60:31:e8:6f:70:0a:d4:9d:c6:
f2:d5:bc:89:74:60:a5:e4:9a:73:aa:95:28:8a:a3:54:1a:36:
52:1c:8e:cb:09:ba:58:42:03:b4:1a:be:6e:52:92:95:6e:fd:
04:02:76:20:79:83:00:47:92:f1:d5:fd:a4:0f:29:cb:7c:ac:
3a:20:48:9c:28:d3:b8:1e:68:b3:4b:7b:db:76:e1:1c:06:61:
8f:0c:25:e7:dd:dc:4d:e1:b6:4e:62:c1:c3:39:c4:07:c1:e4:
1e:4e:d1:5b:04:da:50:47:43:ee:eb:7b:62:65:b9:e7:f6:3d:
72:da:a7:5c:27:9e:82:c7:24:bf:da:83:82:d7:34:fc:3f:de:
aa:14:91:19:90:70:c6:90:3b:43:24:4f:aa:62:d8:fb:3f:69:
82:ec:84:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:31:01 2025 by rpki-client