Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/8570FB886ED911F0A9DC9CDFDAE4EC9C.roa
File: 8570FB886ED911F0A9DC9CDFDAE4EC9C.roa (raw, json)
Hash identifier: Ohpq3AfYf6qdE2WMYRoBXiQwW9zEdywswO28rviD9ug=
Subject key identifier: 64:F5:73:2B:32:4D:58:8A:89:8B:26:C9:39:42:65:00:75:E7:76:42
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 156E
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/8570FB886ED911F0A9DC9CDFDAE4EC9C.roa
Signing time: Fri 01 Aug 2025 13:14:58 +0000
ROA not before: Fri 01 Aug 2025 13:14:53 +0000
ROA not after: Sun 01 Aug 2027 13:14:53 +0000
asID: 61317
IP address blocks: 102.129.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 08 Aug 2025 00:06:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5486 (0x156e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Aug 1 13:14:53 2025 GMT
Not After : Aug 1 13:14:53 2027 GMT
Subject: CN=688cbdd2-8143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4b:41:64:9d:b6:87:ec:2d:5c:ae:4f:89:c5:
12:43:ac:d2:34:ef:a2:9d:b9:3d:ff:53:d1:c3:bb:
cd:2e:b9:d7:c3:8b:1c:45:c7:a0:a6:87:9e:c2:bf:
8a:41:d1:6d:ee:c0:a3:f7:6d:a2:db:f7:49:ae:06:
c2:ee:74:d7:2f:a2:df:7a:9d:d7:57:21:31:18:8e:
d8:6b:68:39:03:c6:cf:1b:b1:58:db:77:81:5f:81:
64:1c:a5:b1:18:e2:64:6f:24:40:d8:0f:73:d3:e4:
1b:16:ed:dd:87:02:46:a5:b2:de:d0:4a:1c:aa:a1:
27:38:5b:cf:c3:cc:ae:ec:44:fc:12:81:c9:a7:1d:
e5:d6:00:89:58:06:cb:f4:3d:f7:88:d1:29:4a:4a:
ce:f1:6b:3f:21:85:74:bf:07:1b:73:4e:46:0c:43:
af:b3:01:44:c3:f6:0f:5d:b8:99:56:7c:d4:f1:49:
84:ee:73:c2:f0:f6:0a:35:0f:8c:ba:96:3d:92:b4:
6e:13:b3:2a:ef:05:92:47:05:16:ee:9f:6b:e2:30:
6e:e7:6b:49:60:8a:9c:d1:9e:79:84:d2:d9:44:94:
4f:d7:61:ab:9e:44:7e:0c:68:3b:80:41:a0:57:59:
b6:96:60:5d:b8:2e:5d:7c:e8:9c:55:59:b6:a9:e0:
3f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:F5:73:2B:32:4D:58:8A:89:8B:26:C9:39:42:65:00:75:E7:76:42
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/8570FB886ED911F0A9DC9CDFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.190.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:34:be:f6:11:ba:e9:d4:0b:66:ab:42:0e:c8:f6:c8:aa:49:
73:bc:49:cb:bc:23:2e:b3:81:65:a9:df:d0:e6:85:d0:b6:d4:
d4:d5:ba:fb:c0:26:f9:dd:7c:e4:d3:9c:30:79:b3:d5:66:b4:
51:f6:72:55:58:04:ee:ea:34:46:3d:25:10:d5:fb:87:9c:2f:
ba:f4:ca:5f:83:1a:32:a5:33:3c:1c:1f:3b:88:e6:ad:42:87:
26:b7:75:48:5e:9e:bc:cb:ca:86:63:db:c2:3f:4c:39:10:f1:
4c:0a:9b:b9:c4:f6:b3:bd:e1:6d:6c:ed:4f:4a:b2:c3:51:50:
54:59:47:52:8d:d1:f1:fd:3d:74:ce:6f:6b:bb:5d:27:e2:7f:
fe:42:b4:9d:a5:56:b4:21:c5:2b:1a:ba:5c:01:24:7f:79:c7:
d5:c3:28:fe:15:d6:20:22:b0:e2:38:8d:ff:24:55:1d:a9:1f:
7f:9a:1b:2c:79:bf:80:2c:f1:ba:46:88:85:cb:4b:cc:8a:d8:
88:fc:2a:98:23:b5:5b:70:b1:f1:e7:52:3e:a4:75:e4:e1:6f:
c6:eb:56:39:56:e1:a7:20:90:ab:0b:9d:87:00:65:72:9a:10:
e0:9b:51:f0:d2:b2:c0:5f:62:e3:fa:8f:21:1e:34:fd:02:4b:
51:29:b1:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:10:16 2025 by rpki-client