Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/3D01BFAE6ED911F080BCEBDBDAE4EC9C.roa
File: 3D01BFAE6ED911F080BCEBDBDAE4EC9C.roa (raw, json)
Hash identifier: mrZzaeyJ8Nk365sQKbJP4TnWm4CCt9xqW7M/uVMF+S0=
Subject key identifier: 6D:EA:64:A7:3A:3F:90:BC:96:BB:32:C0:CC:77:8A:26:63:E4:8C:0D
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 156B
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/3D01BFAE6ED911F080BCEBDBDAE4EC9C.roa
Signing time: Fri 01 Aug 2025 13:12:56 +0000
ROA not before: Fri 01 Aug 2025 13:12:51 +0000
ROA not after: Sun 01 Aug 2027 13:12:51 +0000
asID: 135375
IP address blocks: 102.165.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:07:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5483 (0x156b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Aug 1 13:12:51 2025 GMT
Not After : Aug 1 13:12:51 2027 GMT
Subject: CN=688cbd58-0918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e2:af:c0:6c:7e:bf:21:98:24:06:10:6d:56:
46:f5:54:1d:92:a5:3b:e8:08:51:f3:db:5c:8d:8b:
fb:2f:db:09:7b:24:a9:22:33:cd:01:c0:96:9f:41:
37:a2:f8:c5:14:a3:97:bc:5c:b5:f8:2a:a9:30:b2:
e7:10:36:81:fb:02:f9:8e:53:74:3d:75:00:9c:31:
1a:1a:dc:74:90:eb:1d:91:df:4c:da:66:82:d5:2f:
f1:68:f7:27:d8:1e:1e:87:a2:a4:0d:42:04:82:d0:
0f:3e:ba:19:7d:12:d5:0c:60:ea:55:d2:61:40:65:
77:ef:43:8f:0b:c4:ca:31:09:72:8e:5e:68:bf:3a:
e1:68:47:8f:75:b6:54:84:ad:ae:64:ef:bd:61:b4:
f4:09:97:49:65:c4:ab:53:9c:c2:f6:f4:66:dd:96:
5e:cf:10:1c:ee:9e:84:65:ef:b9:d9:e3:a0:05:ee:
d1:8e:4d:b0:aa:7c:b8:36:0b:3f:3f:a8:2e:79:09:
26:ff:12:b6:5e:d4:b7:e2:fc:a8:62:75:80:e7:c9:
ff:f0:f4:e1:8c:1f:6b:f4:cc:bd:18:bb:3a:bf:78:
04:df:4a:80:0b:74:a7:d0:fa:05:ef:af:36:75:7f:
5c:87:13:dc:ea:39:b1:e8:c1:19:12:fa:b5:f2:23:
f3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:EA:64:A7:3A:3F:90:BC:96:BB:32:C0:CC:77:8A:26:63:E4:8C:0D
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/3D01BFAE6ED911F080BCEBDBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.58.0/24
Signature Algorithm: sha256WithRSAEncryption
72:fa:2a:f3:63:af:6e:5d:2d:72:70:7a:31:a7:d4:65:0b:5c:
47:1b:0d:67:7b:6e:ad:92:92:7b:fe:b3:db:c1:04:66:4b:f8:
f1:c1:47:ad:04:a1:33:f1:85:2b:97:9a:78:4a:bd:3e:3a:58:
f7:9c:c5:63:e6:33:81:55:2d:34:0c:8e:3c:8a:26:29:bf:9f:
cc:5b:af:37:18:36:1a:23:c2:a1:18:b2:61:0c:dd:5d:14:17:
8d:ae:9e:14:5e:bc:5d:86:70:96:a2:fa:3f:04:61:2e:a4:3b:
10:00:d2:e2:e6:10:9d:d0:43:76:ee:f2:79:66:7c:1a:d6:1d:
a4:e8:e8:9d:30:16:b7:3f:ae:87:a6:f6:04:cc:4d:04:d4:95:
ae:c0:25:d6:5b:1a:aa:7f:0f:45:8f:c6:c6:1b:cd:9d:e9:a8:
a8:10:bd:3c:0e:e1:9d:b2:52:e6:fa:a6:95:2f:c5:03:28:a1:
37:2e:35:d6:10:f6:90:c8:7a:f1:38:df:f6:b2:96:18:03:49:
29:0b:8b:4e:15:b9:d2:d2:9c:85:c9:73:7f:d5:96:f9:e3:5e:
b4:18:2c:b1:d5:3e:0b:32:ae:da:91:f0:6e:ce:c2:97:6c:ed:
4c:d2:24:5d:37:af:d4:54:a5:00:e0:aa:30:b8:d7:58:30:40:
a9:1f:4f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:54:06 2025 by rpki-client