Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E3A59/29E748185D4E11F0AB0058C9DAE4EC9C/9AD7B3405D5411F08FFEE8F1DAE4EC9C.roa
File: 9AD7B3405D5411F08FFEE8F1DAE4EC9C.roa (raw, json)
Hash identifier: tG5jCWxr8NnTaFHCnUdyN5XLLiYftQEzWisN5lfMzy0=
Subject key identifier: 2C:CB:1E:BC:35:38:22:EA:82:8B:86:8D:4C:DC:61:10:56:35:51:94
Certificate issuer: /CN=F36E3A59AF/serialNumber=0D9BE8A03CF4F921BEAE801209F0CDA9FA5C28A9
Certificate serial: 02
Authority key identifier: 0D:9B:E8:A0:3C:F4:F9:21:BE:AE:80:12:09:F0:CD:A9:FA:5C:28:A9
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/DZvooDz0-SG-roASCfDNqfpcKKk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E3A59/29E748185D4E11F0AB0058C9DAE4EC9C/9AD7B3405D5411F08FFEE8F1DAE4EC9C.roa
Signing time: Thu 10 Jul 2025 06:10:41 +0000
ROA not before: Thu 10 Jul 2025 06:10:36 +0000
ROA not after: Fri 31 Jul 2026 06:10:36 +0000
asID: 329546
IP address blocks: 102.205.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E3A59/29E748185D4E11F0AB0058C9DAE4EC9C/DZvooDz0-SG-roASCfDNqfpcKKk.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E3A59/29E748185D4E11F0AB0058C9DAE4EC9C/DZvooDz0-SG-roASCfDNqfpcKKk.mft
rsync://rpki.afrinic.net/repository/afrinic/DZvooDz0-SG-roASCfDNqfpcKKk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:07:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E3A59AF, serialNumber=0D9BE8A03CF4F921BEAE801209F0CDA9FA5C28A9
Validity
Not Before: Jul 10 06:10:36 2025 GMT
Not After : Jul 31 06:10:36 2026 GMT
Subject: CN=686f5961-a36b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:66:df:02:cc:d8:9d:f0:31:bb:8b:ba:7d:d8:
67:81:0a:b9:fb:bd:d7:86:59:09:50:47:7a:b4:90:
51:a0:a6:45:35:84:0b:94:64:98:6b:40:cf:60:0d:
3e:38:49:7d:09:c5:4d:03:93:14:0a:0a:ae:d6:aa:
96:7d:45:1b:c7:d4:bf:76:1d:bf:9c:dd:58:fc:e8:
23:12:ec:3e:6e:2a:ae:36:e0:b2:17:78:0c:4b:3a:
43:9c:25:2d:01:1e:4b:b5:68:48:83:96:b0:66:06:
c4:38:b5:4d:37:bb:23:da:c9:ce:13:45:c7:2e:75:
13:af:c9:13:32:d2:af:c5:87:9a:51:87:df:0a:e8:
85:6d:0e:43:dd:0c:ef:d5:fb:10:cc:25:7f:27:f5:
d3:6f:8c:c3:a0:49:46:8e:e7:52:21:d8:ed:2c:b7:
1d:c6:f0:88:de:72:84:23:9b:28:78:38:d1:8a:84:
ad:ad:05:50:6a:d3:2b:25:78:45:3d:b9:71:1c:52:
a9:00:72:4f:ab:74:92:de:87:bf:3c:2e:ec:b7:9d:
54:b7:53:46:48:8b:94:8a:ee:90:1a:20:43:1b:18:
02:28:48:dc:7b:9e:da:4b:5b:e8:84:6d:f1:d9:63:
22:30:a3:33:56:30:78:c8:78:ff:d2:8d:ba:d6:12:
97:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:CB:1E:BC:35:38:22:EA:82:8B:86:8D:4C:DC:61:10:56:35:51:94
X509v3 Authority Key Identifier:
keyid:0D:9B:E8:A0:3C:F4:F9:21:BE:AE:80:12:09:F0:CD:A9:FA:5C:28:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3A59/29E748185D4E11F0AB0058C9DAE4EC9C/DZvooDz0-SG-roASCfDNqfpcKKk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DZvooDz0-SG-roASCfDNqfpcKKk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3A59/29E748185D4E11F0AB0058C9DAE4EC9C/9AD7B3405D5411F08FFEE8F1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.205.206.0/24
Signature Algorithm: sha256WithRSAEncryption
38:af:0b:f3:be:9e:ab:21:2d:39:6f:b7:4d:f9:21:9c:1e:42:
33:d9:b5:39:ad:88:38:4b:d7:2a:92:6f:91:b8:d1:ee:c6:40:
2d:52:db:b9:71:88:d3:6c:87:c7:5a:89:65:4e:c9:26:02:9d:
64:f8:41:ca:ba:58:d2:13:03:28:1d:f2:70:aa:cb:e5:6b:f1:
39:16:c0:31:99:dc:cb:03:46:20:2f:81:d4:af:4d:e2:b4:8f:
83:e8:ab:71:c8:41:fa:12:33:14:fd:8d:d1:b8:1b:50:1d:f3:
54:0d:2d:9a:4f:e6:be:fd:32:d1:6e:40:33:cf:a4:a0:fd:0d:
71:9b:69:3b:0f:0e:fa:62:f1:77:41:8f:d4:32:e4:57:d0:3e:
34:28:58:76:46:8c:a2:76:77:5c:d4:f9:aa:c3:e5:0e:0d:78:
7d:f3:e0:f1:61:0f:eb:4a:eb:a6:b4:4d:a9:20:89:7d:18:05:
f8:c6:b9:41:d0:d6:55:bd:e6:ed:dc:e9:82:c1:03:ca:54:d5:
47:0d:b1:74:a7:40:26:a7:55:69:a0:80:f2:0f:e9:91:9d:d2:
f6:fa:16:4a:36:90:51:a7:64:d8:ab:1e:fc:2e:4a:31:64:7e:
fd:7d:1d:75:54:72:6f:68:a1:d1:2d:8e:ad:a7:52:0f:e5:06:
46:26:d1:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:22:12 2025 by rpki-client