
Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/10D10C286BA511F0B8054983DAE4EC9C.roa
File: 10D10C286BA511F0B8054983DAE4EC9C.roa (raw, json)
Hash identifier: YOt7z6zUSQ398VAfRJQVdPzwq84eJC0DCBZ8l2FmKfk=
Subject key identifier: 85:0E:68:FC:D9:B8:69:36:5B:A0:1A:C1:2A:17:B5:1E:7F:89:A3:DF
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1562
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/10D10C286BA511F0B8054983DAE4EC9C.roa
Signing time: Mon 28 Jul 2025 11:21:55 +0000
ROA not before: Mon 28 Jul 2025 11:21:50 +0000
ROA not after: Wed 28 Jul 2027 11:21:50 +0000
asID: 212335
IP address blocks: 102.129.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 08 Aug 2025 00:06:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5474 (0x1562)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jul 28 11:21:50 2025 GMT
Not After : Jul 28 11:21:50 2027 GMT
Subject: CN=68875d53-609f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:bf:cc:13:5d:cd:77:12:c5:88:8c:f0:6d:3c:
9f:0a:9c:76:b7:dc:3f:0c:90:61:ca:64:22:6b:77:
8b:65:63:18:7d:a3:6f:ab:0a:c6:2c:02:5f:09:ce:
bf:90:d1:35:b7:0b:dd:8d:ec:da:63:e2:85:9b:a3:
4f:27:f5:08:0f:88:03:23:01:6c:c3:1b:21:a8:e0:
8e:b8:69:6b:0d:73:08:b2:38:47:8b:29:2d:ef:0a:
e0:88:7a:13:f4:d2:fd:ea:20:42:79:a6:c1:b0:d6:
f5:38:63:07:18:f0:a5:72:8c:d7:5d:ce:44:29:96:
8b:64:94:3d:b8:ab:ea:ea:c7:6d:0d:7b:0b:4c:87:
1e:44:89:52:eb:d9:95:2c:31:2f:00:3a:91:c5:5c:
c4:2d:6d:4f:16:21:7c:e6:bf:d2:b8:c3:ca:99:52:
3f:1e:0f:53:57:4e:63:9d:23:04:6a:ee:a6:0d:84:
24:7e:c0:10:95:2f:ab:da:f5:92:de:ca:e7:5c:95:
ce:e0:b3:ac:ce:a5:8b:47:f7:b4:71:bf:83:01:f0:
a5:21:df:92:e3:49:bb:8d:95:0b:39:8d:61:57:d9:
55:d2:a5:ee:89:04:5b:82:39:1f:2d:ff:d7:d4:38:
15:63:43:5a:40:b6:ee:f0:a4:31:8f:33:5f:d1:43:
0e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:0E:68:FC:D9:B8:69:36:5B:A0:1A:C1:2A:17:B5:1E:7F:89:A3:DF
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/10D10C286BA511F0B8054983DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.187.0/24
Signature Algorithm: sha256WithRSAEncryption
37:cd:46:e2:47:3f:ef:52:ac:44:8f:75:8b:81:2e:2c:c8:c7:
e7:a3:17:43:3e:0a:4b:f2:be:99:4d:77:da:8a:9d:b7:32:9d:
b6:ed:fa:a0:cf:97:93:e3:74:72:49:51:4d:c8:a7:dc:48:af:
67:f0:b0:1c:11:87:09:29:e7:a9:6c:71:d5:5c:e8:f5:13:9e:
d3:69:a9:46:f8:78:fc:5c:8b:66:0b:b3:23:25:eb:a6:4f:5c:
86:53:32:60:73:5e:90:15:ca:01:05:7c:4f:0d:eb:a5:46:91:
b4:b8:bd:44:87:92:f4:09:64:ea:e8:fe:cd:ea:ba:6f:c8:11:
99:b7:0d:ca:a1:84:da:b5:03:59:79:2c:dd:f8:95:c4:9a:42:
3c:1e:0a:38:b6:9b:68:05:43:f8:46:97:a2:46:bc:46:62:3c:
2a:2d:a8:0a:52:69:1f:44:24:a3:5f:93:a7:49:17:db:92:b0:
08:9f:c4:4f:6c:a5:62:f8:00:5e:18:66:80:9e:79:b6:dc:ba:
2c:ac:be:b7:3f:0f:12:c6:43:56:0b:ec:df:f6:fd:11:30:11:
91:dd:33:b6:39:2b:ef:c4:58:51:9b:46:3b:48:7b:fd:81:16:
51:a2:17:7c:7a:05:18:21:00:a8:ce:2b:8c:d5:c4:d5:1f:2f:
3d:60:42:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:30:10 2025 by rpki-client