
Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FC4AA/43A969D46DFC11F08A39DCC1DAE4EC9C/433EBDCA6DFF11F0AA2AADD3DAE4EC9C.roa
File: 433EBDCA6DFF11F0AA2AADD3DAE4EC9C.roa (raw, json)
Hash identifier: A3nkp4rPy53u0Z5Ms+sfzKlD65yMF9PSrDUFPQ1Fzco=
Subject key identifier: FB:3C:DD:C1:07:D7:12:29:B5:FD:70:17:9A:28:F8:F7:47:D9:E3:3C
Certificate issuer: /CN=F36FC4AAAF/serialNumber=754909AE078A63E89F0011E3D24ABB7FDE758677
Certificate serial: 02
Authority key identifier: 75:49:09:AE:07:8A:63:E8:9F:00:11:E3:D2:4A:BB:7F:DE:75:86:77
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/dUkJrgeKY-ifABHj0kq7f951hnc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FC4AA/43A969D46DFC11F08A39DCC1DAE4EC9C/433EBDCA6DFF11F0AA2AADD3DAE4EC9C.roa
Signing time: Thu 31 Jul 2025 11:12:36 +0000
ROA not before: Thu 31 Jul 2025 11:12:31 +0000
ROA not after: Tue 31 Jul 2035 11:12:31 +0000
asID: 60171
IP address blocks: 102.205.96.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FC4AA/43A969D46DFC11F08A39DCC1DAE4EC9C/dUkJrgeKY-ifABHj0kq7f951hnc.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FC4AA/43A969D46DFC11F08A39DCC1DAE4EC9C/dUkJrgeKY-ifABHj0kq7f951hnc.mft
rsync://rpki.afrinic.net/repository/afrinic/dUkJrgeKY-ifABHj0kq7f951hnc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 08 Aug 2025 05:31:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FC4AAAF, serialNumber=754909AE078A63E89F0011E3D24ABB7FDE758677
Validity
Not Before: Jul 31 11:12:31 2025 GMT
Not After : Jul 31 11:12:31 2035 GMT
Subject: CN=688b4fa4-38d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:52:b6:5d:4f:da:1d:78:53:85:18:85:d7:5a:
0f:84:7a:3b:fa:2b:ae:39:8b:35:3b:72:a1:07:60:
f1:38:5d:82:e5:74:9a:d2:8a:33:39:7e:a8:01:f2:
1f:a3:ae:d5:fa:f7:a6:f8:7d:b9:11:65:01:62:11:
44:94:23:c3:80:87:9c:1b:8d:1e:86:70:8e:cc:0d:
ea:88:64:b5:bb:bf:33:05:4c:05:21:a1:55:eb:87:
a5:3e:d0:1b:08:af:58:2c:b8:05:38:89:9e:c9:52:
22:89:97:a4:9b:75:62:66:94:58:e3:0e:3f:0b:3d:
0a:6e:ba:24:e2:92:0c:9f:e2:18:45:dd:f6:8e:42:
b8:e6:00:bd:56:3e:30:04:85:05:d1:e3:6f:2d:9e:
ef:be:ac:24:04:d5:39:2f:b8:62:1e:e7:64:1a:59:
7e:08:be:fc:13:a0:cc:94:69:04:fb:c8:10:de:52:
f5:2b:01:ef:53:e9:50:85:df:09:46:98:52:41:e1:
63:cc:92:bf:76:8f:e5:07:99:97:f5:37:d3:08:36:
cd:0e:11:b4:e4:7c:c3:e0:24:00:5c:d6:64:a6:5d:
68:ae:06:9d:7f:7f:3a:a6:96:49:69:c8:d7:87:0b:
2c:17:c7:99:77:38:58:cf:66:4d:7c:39:a6:4e:d6:
87:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:3C:DD:C1:07:D7:12:29:B5:FD:70:17:9A:28:F8:F7:47:D9:E3:3C
X509v3 Authority Key Identifier:
keyid:75:49:09:AE:07:8A:63:E8:9F:00:11:E3:D2:4A:BB:7F:DE:75:86:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC4AA/43A969D46DFC11F08A39DCC1DAE4EC9C/dUkJrgeKY-ifABHj0kq7f951hnc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/dUkJrgeKY-ifABHj0kq7f951hnc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC4AA/43A969D46DFC11F08A39DCC1DAE4EC9C/433EBDCA6DFF11F0AA2AADD3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.205.96.0/22
Signature Algorithm: sha256WithRSAEncryption
90:27:c2:e7:60:8c:e4:95:dc:8a:b5:04:00:d9:da:e4:04:95:
03:a2:5b:55:48:47:58:2a:31:65:aa:12:04:d0:3e:a3:79:a5:
65:0b:71:56:94:cd:e1:c1:65:7f:d7:71:b8:10:e9:23:6f:97:
53:f9:20:99:62:0d:0b:72:10:da:5a:1c:6d:25:71:47:e4:79:
f6:b7:1f:ed:ce:4e:3e:41:80:63:00:1c:f1:59:72:7c:06:33:
2a:49:d6:db:e4:a5:24:fd:0b:8e:78:c5:65:9a:ad:01:94:0a:
d5:b0:ce:fc:f5:f2:f3:17:d0:05:82:81:28:39:93:15:e9:3d:
2e:c6:7a:f8:e2:11:f7:af:85:bc:33:70:bf:72:b9:5a:93:c7:
87:8a:b5:ed:f9:3e:43:0d:ef:fd:08:e0:ba:9a:62:a5:b0:8d:
4d:a4:51:78:bd:6e:f5:06:e5:bd:3c:1d:ac:b3:13:7b:e9:2d:
0e:b0:54:60:26:56:2f:35:32:37:45:76:c3:86:70:ac:26:76:
5f:67:ea:28:74:14:f0:21:53:f9:c2:4e:61:47:14:8c:4f:ac:
65:2d:81:33:b4:25:d6:04:37:5e:95:d9:f1:5c:50:8f:9a:56:
71:be:ee:64:83:54:36:50:54:90:d7:ee:bb:ca:35:47:aa:03:
69:0a:16:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:31:15 2025 by rpki-client