Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F731F/B1CAE0D4379711EE8ED7D9314AD9E6FC/FC67525472E011F0A5185D9CDAE4EC9C.roa
File: FC67525472E011F0A5185D9CDAE4EC9C.roa (raw, json)
Hash identifier: fxMVUdc7VNQmTcNtjievYVXO75cad81vUMPfW3dLOxg=
Subject key identifier: 5A:53:A9:BE:06:4D:71:7E:2C:13:78:A1:E5:57:3E:2C:B6:56:BD:99
Certificate issuer: /CN=F36F731FRI/serialNumber=F1923CDB7573FB097392EE0602BC1DB1B57BF0E3
Certificate serial: 02ED
Authority key identifier: F1:92:3C:DB:75:73:FB:09:73:92:EE:06:02:BC:1D:B1:B5:7B:F0:E3
Authority info access: rsync://rpki.afrinic.net/repository/ripe/8ZI823Vz-wlzku4GArwdsbV78OM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F731F/B1CAE0D4379711EE8ED7D9314AD9E6FC/FC67525472E011F0A5185D9CDAE4EC9C.roa
Signing time: Wed 06 Aug 2025 16:18:28 +0000
ROA not before: Wed 06 Aug 2025 16:18:24 +0000
ROA not after: Tue 06 Aug 2030 16:18:24 +0000
asID: 29571
IP address blocks: 213.136.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F731F/B1CAE0D4379711EE8ED7D9314AD9E6FC/8ZI823Vz-wlzku4GArwdsbV78OM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F731F/B1CAE0D4379711EE8ED7D9314AD9E6FC/8ZI823Vz-wlzku4GArwdsbV78OM.mft
rsync://rpki.afrinic.net/repository/ripe/8ZI823Vz-wlzku4GArwdsbV78OM.cer
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 Aug 2025 00:45:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 749 (0x2ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F731FRI, serialNumber=F1923CDB7573FB097392EE0602BC1DB1B57BF0E3
Validity
Not Before: Aug 6 16:18:24 2025 GMT
Not After : Aug 6 16:18:24 2030 GMT
Subject: CN=68938054-fb35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a2:1f:14:11:97:69:79:9a:a3:d2:c1:fc:40:
d1:90:66:af:c0:68:d6:ee:de:92:c7:f6:6b:52:31:
1f:b2:84:55:67:9c:2a:18:19:4d:58:56:81:94:91:
62:1d:6d:2f:c9:db:5e:14:74:a3:ca:f5:9f:a7:21:
3f:74:2b:e8:73:50:da:80:5f:3a:8d:74:c0:f3:27:
11:52:cb:a0:9a:6b:4a:10:75:ab:60:91:39:d7:89:
90:8a:b8:73:de:cd:2c:53:d7:3e:a4:f0:a6:1d:2b:
13:cf:0b:9e:ae:78:e8:35:aa:9b:43:a6:05:cc:eb:
81:e0:dd:b3:5a:ee:3f:e3:0e:59:4b:19:4e:e7:fc:
37:9c:65:35:c9:13:4f:80:d7:24:fe:18:8f:15:54:
ab:d4:45:ee:8b:1b:b0:be:69:5f:e7:a8:b5:b8:94:
a5:4e:f5:58:37:ed:e6:07:57:75:a8:c5:ee:81:6a:
d1:63:2d:1e:b4:17:c0:cf:24:c6:f0:16:7a:6c:ad:
78:08:21:5f:b0:85:bf:3f:0a:ff:bd:f1:9b:2f:70:
b7:a5:54:d7:2b:4d:ef:f9:98:aa:a9:26:93:78:53:
b9:59:0a:59:47:c9:a1:6e:39:57:09:f2:6b:b7:49:
1d:4b:f0:c1:40:c7:14:a0:39:8e:bd:38:b9:5d:e8:
de:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:53:A9:BE:06:4D:71:7E:2C:13:78:A1:E5:57:3E:2C:B6:56:BD:99
X509v3 Authority Key Identifier:
keyid:F1:92:3C:DB:75:73:FB:09:73:92:EE:06:02:BC:1D:B1:B5:7B:F0:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F731F/B1CAE0D4379711EE8ED7D9314AD9E6FC/8ZI823Vz-wlzku4GArwdsbV78OM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/8ZI823Vz-wlzku4GArwdsbV78OM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F731F/B1CAE0D4379711EE8ED7D9314AD9E6FC/FC67525472E011F0A5185D9CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
213.136.96.0/19
Signature Algorithm: sha256WithRSAEncryption
62:5a:d8:68:2a:7b:ca:c5:57:fe:69:78:7e:8a:a4:34:7e:04:
08:1b:de:09:80:f7:ec:96:61:5f:ba:40:57:ed:56:eb:a2:cc:
9e:7d:86:21:94:94:2e:51:71:dd:58:1e:80:d5:43:90:53:4a:
a0:7a:ad:3e:fe:42:08:8f:5e:b3:24:ff:96:d0:c2:dd:ec:c9:
35:cb:56:c6:cb:a3:3d:69:78:f6:4c:e3:9a:f3:c1:ba:82:87:
a1:e6:5d:c9:9b:0a:28:b0:38:26:0a:ac:d2:22:24:e0:dd:df:
38:c5:f1:2b:1c:59:a1:a4:78:69:71:bc:68:e0:99:3c:f1:6e:
4c:1a:81:8f:3d:c5:04:28:c5:5e:f5:19:1b:76:a3:f2:b1:e8:
a3:0e:81:8b:24:44:a6:36:60:20:a1:48:e9:02:61:02:56:c6:
78:1f:87:8e:7b:b9:56:c7:46:60:4d:e5:3e:57:94:5a:d5:14:
01:33:9a:dd:c4:62:db:62:95:86:16:73:e7:3e:dc:b3:d8:d8:
10:0d:fc:8d:ad:8d:e2:a4:95:b8:b2:7c:78:42:1b:c9:3f:62:
45:20:aa:5d:19:d8:2b:19:95:e3:0a:d2:f3:c8:1b:01:31:b3:
80:12:5f:96:37:6e:f0:1a:4f:58:6e:85:86:75:3b:53:82:cd:
72:c2:ed:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:30:59 2025 by rpki-client