Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/E79DE1AEB54C11F092F6BDDFDAE4EC9C.roa
File: E79DE1AEB54C11F092F6BDDFDAE4EC9C.roa (raw, json)
Hash identifier: yiPtl3UM2gTn4BwT0BadrawkZ+QM2YDZW4gZb83Wnio=
Subject key identifier: A7:45:C2:A5:AE:C1:8B:47:7D:9D:42:7F:17:31:D8:48:FF:8A:86:29
Certificate issuer: /CN=F36F6034AF/serialNumber=C702799EA4BD5DBA3ED3D069A7191B941B5A779A
Certificate serial: 082A
Authority key identifier: C7:02:79:9E:A4:BD:5D:BA:3E:D3:D0:69:A7:19:1B:94:1B:5A:77:9A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/xwJ5nqS9Xbo-09BppxkblBtad5o.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/E79DE1AEB54C11F092F6BDDFDAE4EC9C.roa
Signing time: Thu 30 Oct 2025 04:57:16 +0000
ROA not before: Thu 30 Oct 2025 04:57:10 +0000
ROA not after: Sat 30 Oct 2027 04:57:10 +0000
asID: 64267
IP address blocks: 196.198.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/xwJ5nqS9Xbo-09BppxkblBtad5o.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/xwJ5nqS9Xbo-09BppxkblBtad5o.mft
rsync://rpki.afrinic.net/repository/afrinic/xwJ5nqS9Xbo-09BppxkblBtad5o.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2090 (0x82a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F6034AF, serialNumber=C702799EA4BD5DBA3ED3D069A7191B941B5A779A
Validity
Not Before: Oct 30 04:57:10 2025 GMT
Not After : Oct 30 04:57:10 2027 GMT
Subject: CN=6902f02c-52a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:95:9b:5c:be:28:f6:d4:a1:e0:c7:cc:9a:4e:
49:ef:13:bb:6b:5e:1b:e1:03:da:85:78:c4:b1:83:
9e:bb:f5:5c:da:fd:b3:eb:a8:ea:7a:49:69:79:e0:
67:be:10:f8:78:e3:da:1f:f2:9f:87:e8:44:5b:96:
e6:25:24:c5:c5:d1:d2:f8:7b:df:fd:8a:9c:7b:f0:
c9:4b:a5:35:25:de:02:89:1f:6d:60:dd:3e:78:1a:
03:87:a9:33:a7:01:4c:f2:81:18:bc:0a:63:ef:ef:
31:58:4a:c4:94:2b:07:d6:53:ca:1c:05:3f:42:70:
88:c2:1d:20:3d:9d:bf:cf:0f:54:cd:96:9c:c1:fa:
24:21:28:69:92:40:88:24:23:95:b5:1c:b5:80:e5:
28:79:41:7e:68:cc:74:9e:67:b7:2b:db:2b:4c:ff:
6a:af:a6:6e:aa:ce:fe:16:3d:54:1c:35:59:0e:39:
40:d8:d0:71:4f:45:30:56:96:cc:b7:12:fd:ca:08:
b1:25:7a:58:b5:db:65:e5:bc:7c:cf:be:a2:3f:1f:
d5:de:67:a9:3b:73:82:df:ce:77:b8:58:f5:06:38:
e1:2b:51:c5:11:ac:7d:90:49:21:ee:bb:0e:eb:15:
6b:e0:8d:2c:32:16:9d:73:e8:eb:44:93:3c:74:52:
53:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:45:C2:A5:AE:C1:8B:47:7D:9D:42:7F:17:31:D8:48:FF:8A:86:29
X509v3 Authority Key Identifier:
keyid:C7:02:79:9E:A4:BD:5D:BA:3E:D3:D0:69:A7:19:1B:94:1B:5A:77:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/xwJ5nqS9Xbo-09BppxkblBtad5o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xwJ5nqS9Xbo-09BppxkblBtad5o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/E79DE1AEB54C11F092F6BDDFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.198.134.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:5b:4b:5e:ea:39:81:4a:46:84:56:f3:f6:fc:7b:1f:f4:b1:
51:9b:e1:45:d0:ae:4e:43:6e:07:03:d8:51:b7:26:c7:7a:cf:
09:94:35:30:f1:aa:b1:27:ce:3d:00:82:11:c4:45:34:98:06:
28:e2:09:a8:ea:14:6d:b5:bd:81:c0:4f:30:21:ec:de:18:5b:
0e:14:85:66:da:2e:2f:87:07:1e:f2:eb:d7:86:95:44:62:32:
5e:47:4d:2e:5d:48:6f:a4:9c:90:4c:dd:34:88:43:c5:6c:e1:
3f:08:b1:8b:b5:62:6d:1f:6f:5d:20:88:42:97:f3:9b:27:26:
95:55:3a:1e:88:78:8c:e3:e7:65:e3:ff:cd:f3:6f:27:bc:94:
47:25:2f:09:28:12:57:c6:d3:ed:10:52:3d:14:25:9b:9b:a2:
f0:fb:89:86:be:60:c2:14:b9:63:40:14:2f:49:1c:cd:8c:95:
b5:bb:12:9a:bd:d0:d7:15:45:17:e7:6f:a8:83:d0:1e:9f:e3:
78:6f:3d:9c:18:ce:12:31:91:db:8b:d3:a8:6f:1c:85:11:43:
f9:24:33:b2:5a:c8:1c:77:a8:07:9a:d3:93:ab:7e:5b:9c:7d:
e2:d9:9f:58:98:d6:12:35:10:54:c4:bf:2b:16:b2:4b:cb:ca:
7f:f2:ee:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 08:00:57 2025 by rpki-client