Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DB560/8DC5FACE6EFF11F0B3F601D1DAE4EC9C/EF1EDC126F1511F0896E51DFDAE4EC9C.roa
File: EF1EDC126F1511F0896E51DFDAE4EC9C.roa (raw, json)
Hash identifier: nncn04IJgdyOwnNCorMzliS/IExnEzLZa8RXxvCREP8=
Subject key identifier: 13:40:59:F5:C6:6F:F0:C9:8E:48:2F:A6:19:D8:90:A3:2D:54:E6:69
Certificate issuer: /CN=F36DB560AF/serialNumber=F3FD08864FE415436C1EA108ED5ACFE90D4BB0DC
Certificate serial: 02
Authority key identifier: F3:FD:08:86:4F:E4:15:43:6C:1E:A1:08:ED:5A:CF:E9:0D:4B:B0:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/8_0Ihk_kFUNsHqEI7VrP6Q1LsNw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DB560/8DC5FACE6EFF11F0B3F601D1DAE4EC9C/EF1EDC126F1511F0896E51DFDAE4EC9C.roa
Signing time: Fri 01 Aug 2025 20:27:25 +0000
ROA not before: Fri 01 Aug 2025 20:27:17 +0000
ROA not after: Tue 31 Dec 2030 20:27:17 +0000
asID: 329528
IP address blocks: 102.206.10.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DB560/8DC5FACE6EFF11F0B3F601D1DAE4EC9C/8_0Ihk_kFUNsHqEI7VrP6Q1LsNw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DB560/8DC5FACE6EFF11F0B3F601D1DAE4EC9C/8_0Ihk_kFUNsHqEI7VrP6Q1LsNw.mft
rsync://rpki.afrinic.net/repository/afrinic/8_0Ihk_kFUNsHqEI7VrP6Q1LsNw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 Aug 2025 00:06:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DB560AF, serialNumber=F3FD08864FE415436C1EA108ED5ACFE90D4BB0DC
Validity
Not Before: Aug 1 20:27:17 2025 GMT
Not After : Dec 31 20:27:17 2030 GMT
Subject: CN=688d232d-43cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:47:24:6d:3a:ea:0f:10:28:54:c9:d3:17:58:
71:8c:2e:ed:b0:97:16:b6:e1:ab:f0:15:97:e8:c1:
fd:98:4b:15:1b:a5:3f:66:2b:be:10:09:c8:bb:d5:
14:9f:56:58:71:20:37:c4:2c:67:ff:13:0e:fa:8b:
97:36:d1:92:a9:49:57:c3:7f:da:64:0c:09:a1:af:
af:b7:f0:9f:43:9f:6f:e0:5d:9d:17:79:58:cd:de:
b5:91:e9:01:29:0d:7a:91:b9:8c:1c:47:5a:24:64:
cc:ff:94:4a:b1:fb:a4:d6:6c:4e:f3:61:43:dd:c1:
7b:f0:9f:b0:eb:96:57:ad:2d:a8:09:31:23:67:80:
c0:80:28:dc:2b:4f:19:19:4c:11:68:fc:0c:82:c8:
9b:e4:bf:ac:6e:a9:33:7c:e8:c5:e9:34:38:1a:a5:
6b:31:1c:53:2a:5e:56:66:08:5c:65:74:39:e6:46:
32:cd:b4:f8:61:ce:52:b4:0f:e5:13:c7:dd:30:a5:
83:52:df:c1:34:76:52:a4:36:ee:6b:5e:d2:89:9a:
80:8a:30:35:f2:39:21:ce:8f:0d:b2:32:d0:9c:63:
aa:e6:d1:3f:8e:6d:42:00:23:65:29:18:62:bc:96:
52:83:32:a6:41:ff:91:07:5b:64:d9:32:aa:c3:b4:
90:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:40:59:F5:C6:6F:F0:C9:8E:48:2F:A6:19:D8:90:A3:2D:54:E6:69
X509v3 Authority Key Identifier:
keyid:F3:FD:08:86:4F:E4:15:43:6C:1E:A1:08:ED:5A:CF:E9:0D:4B:B0:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB560/8DC5FACE6EFF11F0B3F601D1DAE4EC9C/8_0Ihk_kFUNsHqEI7VrP6Q1LsNw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/8_0Ihk_kFUNsHqEI7VrP6Q1LsNw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB560/8DC5FACE6EFF11F0B3F601D1DAE4EC9C/EF1EDC126F1511F0896E51DFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.206.10.0/23
Signature Algorithm: sha256WithRSAEncryption
38:2b:f8:d4:c2:8f:9c:cb:c0:00:59:90:ad:ae:10:e1:0b:46:
f0:8f:9a:28:4c:3d:6c:c8:50:90:2f:b5:56:c4:c4:10:27:a7:
ec:75:25:52:66:25:84:35:83:92:2c:ae:7a:0c:f5:c7:c6:93:
36:81:5a:1f:77:8c:59:dd:1e:50:69:6e:d9:cb:29:15:0b:8c:
08:a5:c4:0d:8e:93:7b:3f:0e:16:a7:58:8c:ea:eb:0b:e7:50:
43:66:e0:5f:9d:82:73:f7:78:a2:89:42:7d:a4:c3:6c:5f:f8:
c4:46:51:e4:09:e8:64:97:4d:ef:5b:e1:64:28:e2:bf:83:18:
ae:e9:be:e0:91:7f:d7:54:4f:18:17:fe:af:45:a4:90:92:0b:
8e:5c:30:47:d4:1e:9c:76:71:17:3c:69:6a:be:54:c3:59:61:
8b:ad:29:a0:bd:f4:b8:2f:49:0a:b0:ce:d4:aa:75:32:1a:f6:
5b:27:42:95:48:20:c8:17:d5:f2:01:df:4a:32:fa:b4:cb:7b:
01:da:a3:88:c6:bf:62:d0:1a:80:86:95:2f:d1:35:4a:f1:df:
88:20:fe:cb:af:b1:ac:4f:77:a0:23:d2:bd:36:8b:d4:95:93:
31:c5:41:2f:ec:25:bf:00:f3:52:4b:e7:df:4c:fe:ef:6c:a0:
ef:93:70:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:36:39 2025 by rpki-client