Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/577E3F28B40811F0A66FB7E7DAE4EC9C.roa
File: 577E3F28B40811F0A66FB7E7DAE4EC9C.roa (raw, json)
Hash identifier: dQbd5fRxrAAu/Hiu4+U2Iipe1G2HBR1VErL8Q9yTXkU=
Subject key identifier: D9:65:57:83:E4:D0:EA:4D:AB:F6:FD:21:80:89:E6:E6:2D:77:83:A5
Certificate issuer: /CN=F369591CAF/serialNumber=C1090D37DA9FFEEE1A9C229BAFF1190BD22E8934
Certificate serial: 0440
Authority key identifier: C1:09:0D:37:DA:9F:FE:EE:1A:9C:22:9B:AF:F1:19:0B:D2:2E:89:34
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/577E3F28B40811F0A66FB7E7DAE4EC9C.roa
Signing time: Tue 28 Oct 2025 14:13:57 +0000
ROA not before: Tue 28 Oct 2025 14:13:53 +0000
ROA not after: Tue 31 Dec 2030 14:13:53 +0000
asID: 15964
IP address blocks: 154.72.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.mft
rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1088 (0x440)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369591CAF, serialNumber=C1090D37DA9FFEEE1A9C229BAFF1190BD22E8934
Validity
Not Before: Oct 28 14:13:53 2025 GMT
Not After : Dec 31 14:13:53 2030 GMT
Subject: CN=6900cfa5-09bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fe:7f:1f:a3:9a:b3:78:60:90:63:32:26:c1:
8b:d4:8b:f8:16:51:9d:3c:41:db:04:b1:6e:a3:ba:
f0:a6:12:6e:d5:3a:4b:37:17:0e:7c:48:56:2f:5b:
d9:3c:3d:f7:dc:b2:8e:bd:52:d4:d6:39:dc:88:a9:
c7:6c:ff:aa:c6:0d:7a:47:eb:50:66:58:a7:3d:b5:
01:f6:95:fa:61:b5:d4:d1:ae:93:52:db:cc:3b:99:
80:58:c4:a4:ad:90:87:33:67:db:fb:57:71:31:20:
69:03:11:c9:ed:1a:cd:45:e3:85:d1:be:6e:f7:72:
11:24:9c:71:08:a5:6b:21:ed:24:13:0c:5e:45:ec:
50:5f:c4:62:66:92:84:df:11:3a:a1:ea:ce:64:fb:
fa:93:c4:dc:7e:d8:4d:70:d5:f8:d7:af:09:8b:33:
ac:e5:66:15:d0:0e:3c:e8:80:c2:6e:98:2a:89:ab:
55:89:6f:50:d1:34:33:81:cf:00:1b:bc:9a:43:8f:
54:31:f0:07:20:40:cd:cc:58:af:c0:b6:b2:49:04:
38:15:cb:5a:6f:dc:aa:1a:eb:ee:5a:b2:90:23:e9:
9f:0e:b7:e3:b6:75:40:05:a5:4c:fd:66:03:99:b8:
38:b4:61:8d:0f:28:fe:36:a0:a7:c9:bd:c3:aa:8d:
c3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:65:57:83:E4:D0:EA:4D:AB:F6:FD:21:80:89:E6:E6:2D:77:83:A5
X509v3 Authority Key Identifier:
keyid:C1:09:0D:37:DA:9F:FE:EE:1A:9C:22:9B:AF:F1:19:0B:D2:2E:89:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/577E3F28B40811F0A66FB7E7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.72.182.0/24
Signature Algorithm: sha256WithRSAEncryption
64:c7:3f:7e:7e:bf:be:82:a8:26:4b:be:0f:bb:b5:5c:e5:f8:
17:1c:60:96:1c:80:8e:dc:14:de:8a:e2:17:34:3e:8f:1e:84:
71:aa:57:ce:0c:2f:f5:a2:bb:7b:e3:a7:87:1f:df:c0:f7:4c:
37:b5:80:49:ae:f5:06:67:ee:eb:2a:e8:c7:b2:63:c8:f2:cf:
f4:ed:c0:35:b6:80:00:ea:cc:cf:87:25:ee:71:47:f3:33:7f:
b0:cf:c1:5c:1f:f3:28:7d:d9:4c:be:d3:76:74:d1:14:b9:68:
4b:2a:79:e9:66:40:7b:5c:92:07:88:7e:6c:e2:5b:19:ef:04:
d6:2c:20:6b:53:d0:a5:cb:88:57:2d:ef:16:55:c2:74:24:9c:
6d:d0:ec:3a:9a:15:fb:e7:e0:6b:b7:85:1d:87:0b:eb:ab:2a:
e4:91:ef:67:b4:d7:d0:68:cb:20:29:e9:69:3c:8c:bc:1e:3c:
63:b8:c3:dd:ad:e7:a5:f8:52:5e:b2:98:65:60:1e:d9:04:c7:
05:8b:49:d0:60:8d:5c:01:62:16:97:d4:85:c3:40:bd:ad:10:
78:86:85:01:65:4f:a9:84:65:93:49:c3:67:77:b5:da:dc:ed:
0d:58:5a:ba:f5:f9:54:46:7c:37:02:ab:1e:36:b7:5f:a3:e3:
6f:e5:98:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:20:52 2025 by rpki-client