Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/004B1DF2B36811F0A98458F0DAE4EC9C.roa
File: 004B1DF2B36811F0A98458F0DAE4EC9C.roa (raw, json)
Hash identifier: zkIpkIt6ml3z7EI6+y3S5IJ7YdnJfqyc+dJmlhiixtc=
Subject key identifier: 59:89:EB:0C:20:93:6D:C6:03:2E:42:55:35:0E:B7:79:74:AF:B1:83
Certificate issuer: /CN=F36F0628AF/serialNumber=8605D7599A0402F70EC2F258D6C16BD2E4E8D1FE
Certificate serial: 06C7
Authority key identifier: 86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/004B1DF2B36811F0A98458F0DAE4EC9C.roa
Signing time: Mon 27 Oct 2025 19:06:11 +0000
ROA not before: Mon 27 Oct 2025 19:06:03 +0000
ROA not after: Tue 27 Oct 2026 19:06:03 +0000
asID: 4637
IP address blocks: 196.44.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.mft
rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1735 (0x6c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F0628AF, serialNumber=8605D7599A0402F70EC2F258D6C16BD2E4E8D1FE
Validity
Not Before: Oct 27 19:06:03 2025 GMT
Not After : Oct 27 19:06:03 2026 GMT
Subject: CN=68ffc2a3-8b03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6d:81:98:3b:9d:dc:74:d0:9d:d5:a4:0c:b1:
c3:8f:4a:54:74:bc:91:9a:d8:47:e1:c3:82:bb:52:
93:e6:18:23:94:59:18:53:c8:9b:a9:4e:20:77:e5:
50:2f:f5:da:9f:16:03:74:14:0c:a7:ef:8f:cb:c9:
4a:72:fd:c6:50:d5:2f:29:c8:b2:44:35:2b:d0:1c:
a7:b5:7a:dc:6c:b3:a0:6d:cf:e9:aa:d4:ab:a1:39:
d4:df:5f:79:a4:9e:b4:d2:1b:6d:3a:bb:8a:5f:fe:
b8:5a:62:c7:17:87:db:2c:89:ed:e6:9d:46:42:b0:
bf:45:04:6b:d6:58:82:26:5e:b7:1b:fc:39:53:fb:
40:cf:3b:e1:2c:69:b2:57:b8:82:05:20:86:3e:6c:
6a:44:94:b0:52:ad:fc:1a:55:2b:3c:d8:de:ab:2e:
4c:75:a0:f6:b1:bc:67:08:b9:c3:74:02:38:71:31:
fa:af:ec:63:4a:a1:dc:ed:f7:92:68:94:46:5c:60:
a9:0b:0d:58:15:c8:c1:7b:8c:8f:3b:69:f5:02:fa:
fc:7a:79:f0:d9:cd:7d:fa:ef:85:d8:6b:69:5b:26:
41:88:13:df:1c:e0:95:3e:19:ed:e1:b5:40:37:01:
5f:46:f1:36:fa:53:ee:dd:25:e0:8e:9a:b0:b6:08:
d8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:89:EB:0C:20:93:6D:C6:03:2E:42:55:35:0E:B7:79:74:AF:B1:83
X509v3 Authority Key Identifier:
keyid:86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/004B1DF2B36811F0A98458F0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.44.117.0/24
Signature Algorithm: sha256WithRSAEncryption
45:da:6b:13:7c:b4:44:47:60:32:65:d8:2c:40:4f:78:d4:2d:
36:5b:23:7b:3c:e0:63:85:bc:1b:b4:b8:d0:72:4b:3d:a3:ce:
8d:43:d2:33:64:84:35:49:fd:c7:fe:01:e1:ce:76:3b:36:88:
ef:c3:be:b9:cc:d6:73:bd:9c:1e:8d:e4:b6:67:b3:d2:f6:75:
e5:ad:ff:3a:96:df:16:ff:56:76:3e:9b:75:c1:39:d4:5f:53:
1e:2f:a7:bb:9a:21:3d:c4:c1:3e:7f:7f:32:a8:f8:59:55:8d:
b0:cc:20:68:ec:12:1f:ff:1b:9d:82:52:6f:93:ce:00:88:bb:
57:69:47:f4:9e:8f:50:ec:73:b0:14:f2:7a:f7:f6:1a:28:83:
b5:2a:46:07:b2:ba:83:97:f5:22:f1:31:37:e2:13:9f:15:e8:
04:99:d6:99:ae:53:e5:93:14:03:01:e7:a5:43:86:5f:6a:22:
13:cf:a3:db:5f:2e:19:d2:60:07:c3:8c:f4:4f:6e:e3:4b:d7:
ca:1c:29:b3:94:02:33:eb:6b:d6:76:c2:5e:55:d3:a2:5a:21:
fc:38:e3:dc:38:c3:f7:b1:35:28:20:83:73:20:7e:a2:82:e2:
3f:09:b5:0f:bb:e9:85:52:fe:3a:58:c3:b5:e9:52:be:7b:ce:
a6:af:d0:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:31:36 2025 by rpki-client