Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36505B2/541804E4347111EF9A875180762E951A/548B0AF26EB311F0B670BDEADAE4EC9C.roa
File: 548B0AF26EB311F0B670BDEADAE4EC9C.roa (raw, json)
Hash identifier: MSCXN7CK853L5I1Qwa+0YevpQNgqjaIeterGK34JrYk=
Subject key identifier: F2:E7:18:46:55:09:21:26:54:E9:A9:33:DE:B0:7F:20:8A:DC:84:2D
Certificate issuer: /CN=F36505B2AF/serialNumber=16296889BFF031BF7FDE7367E2DEE93CB0080283
Certificate serial: 01A5
Authority key identifier: 16:29:68:89:BF:F0:31:BF:7F:DE:73:67:E2:DE:E9:3C:B0:08:02:83
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Filoib_wMb9_3nNn4t7pPLAIAoM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36505B2/541804E4347111EF9A875180762E951A/548B0AF26EB311F0B670BDEADAE4EC9C.roa
Signing time: Fri 01 Aug 2025 08:41:35 +0000
ROA not before: Fri 01 Aug 2025 08:41:30 +0000
ROA not after: Wed 01 Aug 2035 08:41:30 +0000
asID: 37183
IP address blocks: 41.85.204.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36505B2/541804E4347111EF9A875180762E951A/Filoib_wMb9_3nNn4t7pPLAIAoM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36505B2/541804E4347111EF9A875180762E951A/Filoib_wMb9_3nNn4t7pPLAIAoM.mft
rsync://rpki.afrinic.net/repository/afrinic/Filoib_wMb9_3nNn4t7pPLAIAoM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 10 Aug 2025 04:38:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 421 (0x1a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36505B2AF, serialNumber=16296889BFF031BF7FDE7367E2DEE93CB0080283
Validity
Not Before: Aug 1 08:41:30 2025 GMT
Not After : Aug 1 08:41:30 2035 GMT
Subject: CN=688c7dbf-d89b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:74:07:40:16:6c:43:31:29:c6:a2:f0:e1:38:
e8:9a:35:37:93:ae:59:8c:3a:ca:cb:ee:95:42:bf:
7b:86:4d:a6:8a:32:b6:03:cb:54:f1:ac:c7:1a:c4:
32:db:fb:29:d1:eb:3d:ca:fa:b8:fe:67:89:46:55:
29:3f:a4:dc:bf:d3:4d:0d:84:2b:c8:6c:d9:86:44:
6d:a5:a2:5e:db:8f:36:13:f7:30:02:42:62:18:6e:
ce:15:5f:d8:f3:c9:bd:7d:74:00:b9:be:21:56:84:
d8:59:c5:b4:5f:0f:f5:37:67:a1:78:c0:39:a4:47:
fc:93:86:19:6a:75:fe:02:32:5a:c9:d4:9d:04:91:
7a:32:10:46:2f:7f:b9:20:a5:d5:3c:7a:89:0c:4b:
de:47:c2:d4:c9:9f:f0:fb:46:0b:b6:e3:ad:12:ab:
ab:31:6e:53:43:97:07:c8:36:74:6e:47:9a:40:17:
45:7d:96:04:3e:2c:f4:0c:bb:23:ea:cc:20:cf:d8:
4c:9a:5a:17:f0:5d:9a:58:4c:54:c1:92:15:04:c6:
84:84:6b:1f:a4:dc:ba:5d:be:4e:12:aa:ec:a4:17:
1b:93:12:8a:bf:ed:84:d0:c1:b3:1a:67:af:67:fc:
e0:d0:71:eb:eb:e6:40:5e:97:04:9f:5b:9e:40:4e:
a4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:E7:18:46:55:09:21:26:54:E9:A9:33:DE:B0:7F:20:8A:DC:84:2D
X509v3 Authority Key Identifier:
keyid:16:29:68:89:BF:F0:31:BF:7F:DE:73:67:E2:DE:E9:3C:B0:08:02:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36505B2/541804E4347111EF9A875180762E951A/Filoib_wMb9_3nNn4t7pPLAIAoM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Filoib_wMb9_3nNn4t7pPLAIAoM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36505B2/541804E4347111EF9A875180762E951A/548B0AF26EB311F0B670BDEADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.85.204.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:fc:d4:b3:ab:43:da:6f:63:77:af:52:df:08:76:9d:8f:52:
b4:b9:95:0a:ed:0d:c9:9f:e2:35:8c:48:1c:45:1c:a4:c7:86:
23:6d:71:3e:d8:46:17:ec:84:c9:ca:c4:e0:ce:a9:c3:9e:f7:
cb:35:e9:be:df:63:b1:bb:74:d5:4f:59:25:9a:0c:76:fe:6c:
ab:94:d4:fa:b1:ee:de:52:c8:0a:5a:c3:ac:8d:bc:32:89:61:
cd:c3:dc:78:07:f3:51:bb:0d:d9:c2:29:c1:66:a6:3a:e2:13:
da:4b:70:c1:01:12:e6:a2:4d:5e:59:b9:49:cf:20:01:be:be:
fb:93:b3:81:3d:e1:ae:b9:c4:0b:77:f3:8b:b9:aa:e9:f9:49:
5b:e0:b3:ed:6a:35:98:91:b4:2d:a5:e1:0b:b7:da:65:a2:b4:
2d:0c:f1:04:bb:54:63:12:0a:4f:76:f7:c8:5a:ec:8b:06:f5:
0a:68:9c:e1:fb:f9:ad:21:a6:84:32:04:91:7e:1c:b7:a3:6c:
a7:23:1f:46:68:b8:95:8e:7f:44:37:97:48:e8:5c:e3:7f:f9:
bc:e7:3e:7f:c5:ed:a0:63:d0:c9:0b:b8:29:39:16:55:ff:2d:
b9:3f:93:27:e4:03:eb:8c:96:10:30:ca:81:eb:76:7e:f9:60:
f7:97:42:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 21:01:17 2025 by rpki-client