Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/3755BDE4B5C411F098AA4AC6DAE4EC9C.roa
File: 3755BDE4B5C411F098AA4AC6DAE4EC9C.roa (raw, json)
Hash identifier: 15NkibQq474ORyb/zkvGHgIhZxpEuLmbbjCekhKteDQ=
Subject key identifier: BF:E5:E0:22:9A:E8:2D:5D:59:58:F8:78:1B:79:3A:15:64:19:3F:3D
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1658
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/3755BDE4B5C411F098AA4AC6DAE4EC9C.roa
Signing time: Thu 30 Oct 2025 19:11:20 +0000
ROA not before: Thu 30 Oct 2025 19:11:09 +0000
ROA not after: Sat 30 Oct 2027 19:11:09 +0000
asID: 834
IP address blocks: 102.165.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5720 (0x1658)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Oct 30 19:11:09 2025 GMT
Not After : Oct 30 19:11:09 2027 GMT
Subject: CN=6903b858-db27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:91:06:fd:07:0f:14:60:17:ec:65:5a:fb:bd:
11:ad:64:71:71:3c:8d:ea:55:71:bb:f5:97:bc:c4:
51:1b:6a:17:4d:4b:67:d8:68:86:a2:02:fd:3c:69:
97:a9:2e:5c:f2:76:88:65:0e:33:97:aa:d3:40:c0:
69:db:01:4c:47:57:9f:39:8f:b8:e0:5b:38:3d:3f:
d5:a7:24:33:94:27:e0:78:e5:4b:78:26:6d:90:40:
08:16:0e:99:d9:16:49:3c:11:3b:cc:ca:47:7d:16:
67:87:ef:ef:c3:e8:b7:92:4a:3d:98:98:77:53:67:
21:f2:47:d7:8c:4f:32:33:31:43:9d:cd:19:7c:6f:
14:15:5c:6d:36:12:7b:a8:24:0e:fa:6e:10:46:d8:
42:f5:17:f3:6b:8f:f9:42:e3:ff:72:43:6f:05:28:
e4:77:70:f6:be:7f:b5:1c:33:72:86:12:d3:58:99:
4b:0e:c0:3f:d0:ba:b8:c0:8f:dc:0a:fe:1f:2b:aa:
d5:b6:3c:a1:86:bb:5a:91:c6:f7:44:0f:1b:0e:41:
15:03:a5:42:b8:fe:57:30:f5:62:4b:c2:fc:28:c5:
81:88:d0:af:68:fa:f2:12:d9:e4:d8:b8:91:bc:8b:
f3:8c:e9:e7:20:75:1e:c3:0a:56:05:26:22:8f:c7:
e0:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:E5:E0:22:9A:E8:2D:5D:59:58:F8:78:1B:79:3A:15:64:19:3F:3D
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/3755BDE4B5C411F098AA4AC6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.43.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:aa:3f:03:3e:56:eb:5d:19:a9:46:a3:f9:f9:96:1f:8e:64:
04:7b:d3:43:00:ef:75:7d:f7:c3:aa:09:1e:ff:cf:24:76:50:
20:76:04:7d:31:ed:e5:21:21:6a:8a:f6:3f:b7:cf:9f:a1:82:
a4:d0:75:5a:9e:fe:75:e2:c8:e5:74:81:e1:c3:a8:23:87:b8:
4d:d0:75:a9:0a:81:fd:ce:12:8f:64:d1:10:de:1d:4c:40:9d:
e5:f9:15:64:87:f5:41:10:4a:0f:db:ba:96:c6:1b:10:7d:6a:
98:20:21:9a:6e:2e:26:83:59:99:60:44:96:a9:bf:d2:80:09:
c4:24:7e:8b:4c:32:0b:bc:c9:a7:d0:54:bd:c2:5f:97:8b:a6:
31:4e:f5:5c:2a:1a:8f:05:f5:b2:f6:a3:22:e7:2e:54:0b:da:
fc:a2:17:b2:77:33:2c:14:ec:d6:c3:ac:a0:d8:ec:83:09:ea:
b8:2f:19:d3:9f:fe:12:90:eb:c6:22:09:44:9e:b3:63:9a:70:
01:a7:0d:6b:b8:09:00:0c:07:e0:06:30:a6:d6:d4:cc:a5:5a:
ae:13:7c:06:95:c0:da:66:9e:88:45:07:ee:8b:88:06:95:2a:
19:c3:48:fb:e0:e5:c4:ea:81:0f:32:de:eb:44:ba:d4:50:2b:
93:60:b6:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:01:01 2025 by rpki-client