Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/7F2A789EB55611F097EC52A0DAE4EC9C.roa
File: 7F2A789EB55611F097EC52A0DAE4EC9C.roa (raw, json)
Hash identifier: 2L2OgLFRPecgH2xTdenUefSJFiuBkC2MjqJciX7PRvY=
Subject key identifier: 0A:3A:C6:9C:9A:20:30:3E:57:4C:9D:09:B0:59:3C:C1:B6:A3:88:95
Certificate issuer: /CN=F36F6034AF/serialNumber=C702799EA4BD5DBA3ED3D069A7191B941B5A779A
Certificate serial: 083D
Authority key identifier: C7:02:79:9E:A4:BD:5D:BA:3E:D3:D0:69:A7:19:1B:94:1B:5A:77:9A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/xwJ5nqS9Xbo-09BppxkblBtad5o.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/7F2A789EB55611F097EC52A0DAE4EC9C.roa
Signing time: Thu 30 Oct 2025 06:05:56 +0000
ROA not before: Thu 30 Oct 2025 06:05:50 +0000
ROA not after: Fri 30 Oct 2026 06:05:50 +0000
asID: 397630
IP address blocks: 196.240.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/xwJ5nqS9Xbo-09BppxkblBtad5o.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/xwJ5nqS9Xbo-09BppxkblBtad5o.mft
rsync://rpki.afrinic.net/repository/afrinic/xwJ5nqS9Xbo-09BppxkblBtad5o.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2109 (0x83d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F6034AF, serialNumber=C702799EA4BD5DBA3ED3D069A7191B941B5A779A
Validity
Not Before: Oct 30 06:05:50 2025 GMT
Not After : Oct 30 06:05:50 2026 GMT
Subject: CN=69030044-5bfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:db:c3:f1:77:06:1e:45:ca:a4:6f:bb:72:dc:
1c:0f:15:09:18:af:f2:e9:41:45:90:7f:e4:46:26:
d1:a5:eb:8e:b2:2c:8b:0d:61:5b:d2:b2:c2:c1:35:
18:85:24:5b:b9:c1:a5:33:ac:6c:77:0d:fb:f5:23:
a0:53:24:ed:8d:d8:84:97:84:9c:3a:f8:17:52:9a:
2c:92:44:ed:40:7a:99:f4:ff:a1:fc:46:ec:2c:18:
93:aa:16:a9:4b:81:66:ed:46:cd:9b:b9:58:c8:88:
8c:bc:9c:c5:a3:99:89:04:f9:64:85:44:b6:80:9e:
d4:64:7a:89:01:bf:79:56:cc:ea:1a:df:8e:4b:c0:
1f:5c:57:0c:85:29:b1:d3:2a:64:99:68:a4:55:7e:
54:92:a2:a3:68:ca:5e:2c:5b:f9:5f:14:75:b3:3c:
77:1d:f8:da:8d:be:83:cb:1e:a7:84:2e:7c:75:16:
0c:ba:16:80:d2:ad:8e:a9:18:13:16:4d:14:c8:a9:
1f:f9:58:57:96:a9:40:38:1c:24:b4:7e:e3:d9:72:
60:be:d0:1b:20:1b:83:68:eb:fe:67:93:00:0f:ba:
fe:a9:d6:78:56:2e:0f:9d:23:ec:cb:19:20:6e:c1:
92:13:8e:c7:28:f6:c3:b7:3d:fd:ba:30:39:05:fa:
f6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:3A:C6:9C:9A:20:30:3E:57:4C:9D:09:B0:59:3C:C1:B6:A3:88:95
X509v3 Authority Key Identifier:
keyid:C7:02:79:9E:A4:BD:5D:BA:3E:D3:D0:69:A7:19:1B:94:1B:5A:77:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/xwJ5nqS9Xbo-09BppxkblBtad5o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xwJ5nqS9Xbo-09BppxkblBtad5o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/7F2A789EB55611F097EC52A0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.240.108.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:ee:64:a1:31:03:bc:b4:11:fa:83:2e:4d:5a:63:c8:af:ec:
27:2a:01:7d:e6:ec:6b:9b:e1:54:15:64:92:2d:01:cc:44:49:
3a:3b:db:7e:0a:25:25:fb:fc:0e:29:b5:38:39:01:d7:3a:de:
6b:77:18:d9:40:b4:15:92:b0:a9:b5:21:95:b4:54:b4:af:3b:
84:9a:47:4a:83:ff:bc:c7:8c:17:66:a7:d8:49:3d:ec:c9:d4:
49:20:b4:cf:3e:75:1d:ce:2a:97:ad:8e:5d:53:6a:7b:6c:9c:
ad:5f:8f:83:eb:b6:76:e6:5d:51:47:14:8b:44:e3:6b:b8:2c:
84:fa:7a:d4:93:1a:28:79:e9:4f:29:ed:b0:dd:cd:29:a3:ef:
f7:dd:f4:5e:da:63:24:af:e1:92:46:2c:96:97:91:07:f1:10:
aa:03:42:9d:84:69:2f:67:57:d0:22:cf:47:02:20:ef:3f:7f:
3d:fd:11:ac:ee:b5:13:e2:ae:9a:4f:57:b9:b4:4a:c1:1a:bd:
9e:16:7b:bf:ae:86:de:d5:5d:e4:f2:7f:b8:73:4e:f6:af:58:
43:06:a0:08:6c:b3:64:38:76:ff:64:f8:fe:d6:b8:b6:eb:bf:
39:e2:8d:e7:5d:6b:a6:d4:b5:c3:6c:74:c4:e1:1b:32:ac:f4:
e7:5f:c0:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:37:44 2025 by rpki-client