Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F151E/F98CDB7C1A1911EC9393452DD8A014CE/C6D08762AE7911F0865B5AB3DAE4EC9C.roa
File: C6D08762AE7911F0865B5AB3DAE4EC9C.roa (raw, json)
Hash identifier: bUSiJqRSq5rymPhrVLnmkhbhEBlGLZN5B0EkvrcOa1o=
Subject key identifier: 7C:52:42:AC:8E:F9:58:34:47:E0:51:FD:4B:F3:0E:DD:12:24:68:37
Certificate issuer: /CN=F36F151EAF/serialNumber=EA95913551827BA6D653BA86AE93A4EE1F58CD5D
Certificate serial: 060A
Authority key identifier: EA:95:91:35:51:82:7B:A6:D6:53:BA:86:AE:93:A4:EE:1F:58:CD:5D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/6pWRNVGCe6bWU7qGrpOk7h9YzV0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F151E/F98CDB7C1A1911EC9393452DD8A014CE/C6D08762AE7911F0865B5AB3DAE4EC9C.roa
Signing time: Tue 21 Oct 2025 12:31:50 +0000
ROA not before: Tue 21 Oct 2025 12:29:46 +0000
ROA not after: Sat 20 Oct 2035 12:29:46 +0000
asID: 328585
IP address blocks: 102.206.136.0/24 maxlen: 24
102.206.137.0/24 maxlen: 24
102.206.138.0/24 maxlen: 24
102.206.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F151E/F98CDB7C1A1911EC9393452DD8A014CE/6pWRNVGCe6bWU7qGrpOk7h9YzV0.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F151E/F98CDB7C1A1911EC9393452DD8A014CE/6pWRNVGCe6bWU7qGrpOk7h9YzV0.mft
rsync://rpki.afrinic.net/repository/afrinic/6pWRNVGCe6bWU7qGrpOk7h9YzV0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1546 (0x60a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F151EAF, serialNumber=EA95913551827BA6D653BA86AE93A4EE1F58CD5D
Validity
Not Before: Oct 21 12:29:46 2025 GMT
Not After : Oct 20 12:29:46 2035 GMT
Subject: CN=68f77d36-c99f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9c:14:28:30:41:27:8d:35:f3:e7:3b:3b:2e:
50:4d:19:9c:42:06:1b:49:77:dd:e0:12:e6:32:70:
dd:8d:1e:13:43:d9:03:c8:45:d5:d1:38:81:68:ad:
68:c7:09:7a:0c:f3:d5:6b:4f:48:ad:e1:b8:01:a0:
4b:f3:74:66:e2:97:14:0a:23:d8:f7:da:ba:f3:01:
a8:ee:01:a7:15:33:76:74:58:3f:9f:9e:16:6e:90:
4d:30:b3:af:a1:99:66:bb:6c:8b:ce:11:cf:b5:ec:
ee:b0:20:0e:85:33:57:3f:b0:2e:57:f7:e5:be:26:
cb:df:91:1f:f2:ba:66:d0:62:c5:49:72:96:f0:aa:
12:86:60:98:94:6a:30:87:3d:c2:f4:29:df:8f:74:
ce:73:24:c3:22:08:e9:5e:18:ff:8b:5d:00:26:fa:
b6:73:69:fc:d1:5b:39:55:a0:08:af:cf:59:5e:05:
1e:ea:22:32:23:55:67:c1:ca:3b:c4:96:4d:4c:cb:
3d:e3:bf:16:17:38:df:3c:f2:72:79:61:d3:d2:25:
6e:36:d1:fb:c9:f4:bd:5f:bb:9c:91:ba:bd:2e:49:
fc:a3:44:c0:32:8f:50:be:9c:e0:58:67:d0:6e:f3:
32:1b:a5:c8:33:64:23:32:45:db:f7:8c:d7:63:07:
33:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:52:42:AC:8E:F9:58:34:47:E0:51:FD:4B:F3:0E:DD:12:24:68:37
X509v3 Authority Key Identifier:
keyid:EA:95:91:35:51:82:7B:A6:D6:53:BA:86:AE:93:A4:EE:1F:58:CD:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F151E/F98CDB7C1A1911EC9393452DD8A014CE/6pWRNVGCe6bWU7qGrpOk7h9YzV0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/6pWRNVGCe6bWU7qGrpOk7h9YzV0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F151E/F98CDB7C1A1911EC9393452DD8A014CE/C6D08762AE7911F0865B5AB3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.206.136.0/22
Signature Algorithm: sha256WithRSAEncryption
49:9c:2d:55:1f:33:24:be:81:88:2e:c8:3d:af:f2:62:72:e0:
2f:ed:20:55:78:5b:d0:6d:c8:e6:f8:78:77:f8:f2:c3:dc:7a:
a2:5d:d4:b6:25:d0:d4:e1:a5:10:a2:e5:6b:d9:e8:26:25:c2:
6a:99:f5:67:33:89:18:54:9a:c7:fd:3f:02:2b:20:dd:ad:62:
7d:71:58:b5:5f:88:50:87:94:1a:78:94:d5:ba:84:18:73:07:
90:62:30:f7:9d:32:04:d6:9b:47:ad:cb:28:95:f5:f0:6a:01:
ce:b3:df:22:de:35:c4:0b:d9:f1:c7:3d:be:dc:5c:05:ad:1b:
87:ff:bc:05:12:a2:ce:d7:b2:0b:88:05:89:90:3c:e3:02:02:
2c:c0:b6:bf:08:82:2e:43:29:8c:b8:de:5b:90:0f:ee:79:8e:
63:85:29:c0:74:cf:ba:02:48:0a:65:e4:8d:4c:77:3a:59:c1:
dd:9a:88:39:97:c0:8d:5d:fe:1e:62:83:ec:fc:d8:ca:d4:51:
46:77:90:da:4a:ae:7b:eb:34:ee:8e:59:3f:9f:48:c1:99:56:
f6:59:45:37:2a:ec:ce:5e:ea:8f:76:98:ec:35:c7:15:b7:81:
b5:ff:c3:90:40:65:d7:df:6a:29:3f:76:6f:09:e8:bf:1c:73:
c9:f8:cc:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:12:23 2025 by rpki-client