Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F151E/F98CDB7C1A1911EC9393452DD8A014CE/EDC3F166AE8711F09155758EDAE4EC9C.roa
File: EDC3F166AE8711F09155758EDAE4EC9C.roa (raw, json)
Hash identifier: qrpEwoN4bqccVV8hRmdHHa1nf7DJFBvB/v1V8q4KvmY=
Subject key identifier: FA:FF:3C:3A:48:5A:F4:C4:9B:6A:25:E0:71:FC:6E:3F:33:73:58:84
Certificate issuer: /CN=F36F151EAF/serialNumber=EA95913551827BA6D653BA86AE93A4EE1F58CD5D
Certificate serial: 060E
Authority key identifier: EA:95:91:35:51:82:7B:A6:D6:53:BA:86:AE:93:A4:EE:1F:58:CD:5D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/6pWRNVGCe6bWU7qGrpOk7h9YzV0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F151E/F98CDB7C1A1911EC9393452DD8A014CE/EDC3F166AE8711F09155758EDAE4EC9C.roa
Signing time: Tue 21 Oct 2025 14:12:08 +0000
ROA not before: Tue 21 Oct 2025 14:12:03 +0000
ROA not after: Sat 20 Oct 2035 14:12:03 +0000
asID: 328585
IP address blocks: 102.206.136.0/24 maxlen: 24
102.206.137.0/24 maxlen: 24
102.206.138.0/24 maxlen: 24
102.206.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F151E/F98CDB7C1A1911EC9393452DD8A014CE/6pWRNVGCe6bWU7qGrpOk7h9YzV0.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F151E/F98CDB7C1A1911EC9393452DD8A014CE/6pWRNVGCe6bWU7qGrpOk7h9YzV0.mft
rsync://rpki.afrinic.net/repository/afrinic/6pWRNVGCe6bWU7qGrpOk7h9YzV0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1550 (0x60e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F151EAF, serialNumber=EA95913551827BA6D653BA86AE93A4EE1F58CD5D
Validity
Not Before: Oct 21 14:12:03 2025 GMT
Not After : Oct 20 14:12:03 2035 GMT
Subject: CN=68f794b8-bba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:02:1a:87:80:a3:34:98:78:97:87:07:30:ff:
8e:65:42:02:c3:d4:47:dd:56:fc:90:f2:93:d7:31:
e9:ea:89:67:1a:34:02:fc:ab:93:fe:c0:c4:46:12:
cf:60:70:ab:90:72:48:17:ca:99:59:0c:98:5b:b1:
51:c1:20:80:29:56:27:44:40:eb:80:b7:99:a0:f6:
5f:bf:d0:56:16:c9:cb:40:8d:88:87:1c:28:fc:08:
31:ac:75:91:04:e9:3a:be:a2:ec:93:59:aa:fd:fe:
5e:cf:c5:62:f0:89:18:6a:0d:f7:6b:84:e1:36:b6:
fa:54:5e:8f:90:b5:bc:9d:ce:e7:ff:56:04:26:9f:
48:f6:3f:34:84:e7:1d:0b:9f:9c:9d:b9:57:e2:71:
32:4c:39:70:5c:c0:be:bf:9c:52:8f:bc:6d:ff:84:
46:df:38:9b:77:fd:c1:20:58:17:bd:52:c1:f6:3b:
9f:fb:c4:b3:d4:3e:65:5e:34:65:59:e5:02:e0:56:
6a:d4:47:16:a4:db:03:38:e4:5f:58:7e:dd:cf:06:
5e:dc:73:79:ec:98:59:1a:51:2f:68:10:cc:e2:d6:
6c:d6:81:cf:53:82:a1:81:af:be:9a:63:2d:52:8f:
1d:0b:5d:8e:d0:67:7d:98:fc:0f:82:1e:be:01:4b:
25:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:FF:3C:3A:48:5A:F4:C4:9B:6A:25:E0:71:FC:6E:3F:33:73:58:84
X509v3 Authority Key Identifier:
keyid:EA:95:91:35:51:82:7B:A6:D6:53:BA:86:AE:93:A4:EE:1F:58:CD:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F151E/F98CDB7C1A1911EC9393452DD8A014CE/6pWRNVGCe6bWU7qGrpOk7h9YzV0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/6pWRNVGCe6bWU7qGrpOk7h9YzV0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F151E/F98CDB7C1A1911EC9393452DD8A014CE/EDC3F166AE8711F09155758EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.206.136.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:43:ff:e0:60:6d:f2:3a:a5:3f:69:09:dc:14:11:c0:16:f5:
41:6c:14:d6:fc:54:86:7e:7e:6b:ff:df:df:22:0e:56:c9:56:
b9:b1:60:0d:e2:46:49:0e:96:de:3c:d8:15:04:e6:e9:40:f5:
24:f6:24:94:b6:13:bc:85:95:c1:b8:08:a4:a2:b0:6e:71:18:
ba:6b:4b:37:c0:27:c6:26:b2:de:db:22:36:7f:62:d1:8e:28:
e6:a5:2c:b0:7c:86:11:08:da:98:5f:47:62:8a:59:b2:6b:37:
d4:82:06:64:f3:fe:1e:1d:84:91:6d:cb:35:31:71:b2:29:9f:
66:c2:3a:d0:f0:56:5d:93:32:09:5a:15:45:ed:a4:f9:75:9b:
9d:49:14:8f:ca:35:da:7b:c8:b5:bb:3a:3d:80:61:99:a7:ba:
68:e4:89:13:5c:e3:a4:fa:18:7a:34:80:80:d5:6c:24:d7:1e:
3e:18:c6:e4:6a:13:82:2f:f9:3b:a0:d0:68:74:e4:d1:42:03:
b7:dc:a9:0d:2e:36:29:d2:6a:5f:44:ae:b6:23:bd:d6:a4:c9:
0a:a0:0c:e2:8e:fc:8a:07:c3:45:54:b5:08:53:96:81:58:bf:
32:17:6f:89:36:e9:15:d5:b3:70:70:7d:8c:f5:72:57:81:20:
92:0c:7d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:04:53 2025 by rpki-client