Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F7F21/355D737EE70011EC9C84D7B9F1222468/0960CA42BA3211F0A0CE52AFDAE4EC9C.roa
File: 0960CA42BA3211F0A0CE52AFDAE4EC9C.roa (raw, json)
Hash identifier: /hSkccke2QwuiXgH6leYqgSqL0lMDfWuf3RDrn5+nSY=
Subject key identifier: 9C:DC:02:BA:F6:78:13:6C:BF:99:A9:8E:DD:93:A0:51:45:DE:07:B8
Certificate issuer: /CN=F36F7F21AF/serialNumber=52997871235F60CD715A7710FFD6E2EA4C88D29A
Certificate serial: 0518
Authority key identifier: 52:99:78:71:23:5F:60:CD:71:5A:77:10:FF:D6:E2:EA:4C:88:D2:9A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Upl4cSNfYM1xWncQ_9bi6kyI0po.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F7F21/355D737EE70011EC9C84D7B9F1222468/0960CA42BA3211F0A0CE52AFDAE4EC9C.roa
Signing time: Wed 05 Nov 2025 10:27:32 +0000
ROA not before: Wed 05 Nov 2025 10:27:25 +0000
ROA not after: Tue 05 Nov 2030 10:27:25 +0000
asID: 328155
IP address blocks: 154.65.80.0/22 maxlen: 22
2c0f:f610::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F7F21/355D737EE70011EC9C84D7B9F1222468/Upl4cSNfYM1xWncQ_9bi6kyI0po.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F7F21/355D737EE70011EC9C84D7B9F1222468/Upl4cSNfYM1xWncQ_9bi6kyI0po.mft
rsync://rpki.afrinic.net/repository/afrinic/Upl4cSNfYM1xWncQ_9bi6kyI0po.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1304 (0x518)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F7F21AF, serialNumber=52997871235F60CD715A7710FFD6E2EA4C88D29A
Validity
Not Before: Nov 5 10:27:25 2025 GMT
Not After : Nov 5 10:27:25 2030 GMT
Subject: CN=690b2694-64ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:75:f3:09:bf:36:a5:55:c0:cb:2f:0e:3d:1e:
10:1b:8c:2a:e1:f9:34:8b:60:ff:65:de:ed:8f:ff:
5e:6e:4b:7f:a5:70:1e:34:26:cc:23:03:2d:e3:01:
64:be:0c:e2:bc:54:f7:07:e0:82:17:8b:d1:02:5a:
ae:6f:b5:e6:64:47:34:5b:e2:9a:ed:c9:a1:9f:b5:
e2:77:a1:cf:dc:d4:6d:7b:07:8f:7d:1e:9b:bf:c9:
7f:ae:fe:bf:e2:e3:83:1b:f0:ad:e3:85:b0:05:bf:
69:c9:95:29:56:9a:4f:d5:16:65:18:7e:d6:30:89:
5a:b4:c0:f8:1a:4b:08:3f:51:9a:c4:57:80:39:1d:
5e:22:7c:29:15:1e:1d:6d:68:2c:df:09:a3:ab:ae:
ed:34:7d:32:fa:08:66:23:f4:58:e0:9b:71:fc:de:
af:9c:ec:86:8f:7a:9a:cb:9e:2d:7a:55:e9:63:06:
ce:94:72:fd:ad:c9:8d:b0:86:fe:98:71:79:69:75:
54:64:a2:4e:36:0a:06:bf:83:d7:bc:39:39:61:2e:
99:0f:9f:d2:bc:47:db:a5:aa:bc:49:f4:ae:ea:28:
e8:b6:7e:b5:47:13:f4:af:45:3a:2a:76:68:e6:94:
a1:17:fd:da:ce:9c:4f:62:b0:40:bd:02:02:aa:95:
56:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:DC:02:BA:F6:78:13:6C:BF:99:A9:8E:DD:93:A0:51:45:DE:07:B8
X509v3 Authority Key Identifier:
keyid:52:99:78:71:23:5F:60:CD:71:5A:77:10:FF:D6:E2:EA:4C:88:D2:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F7F21/355D737EE70011EC9C84D7B9F1222468/Upl4cSNfYM1xWncQ_9bi6kyI0po.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Upl4cSNfYM1xWncQ_9bi6kyI0po.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F7F21/355D737EE70011EC9C84D7B9F1222468/0960CA42BA3211F0A0CE52AFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.65.80.0/22
IPv6:
2c0f:f610::/32
Signature Algorithm: sha256WithRSAEncryption
76:ae:c2:4a:7f:16:12:c1:b1:42:f3:2b:cd:16:1a:8d:0a:58:
0f:58:d7:9c:7d:b7:4d:f6:af:66:1b:86:5c:f9:24:c5:41:fd:
38:7d:76:9a:26:77:21:cc:c7:62:71:1b:18:16:a6:b1:26:6e:
97:6b:ae:3f:f8:c1:8e:61:59:39:96:d0:38:1c:e6:89:ed:75:
fa:5a:c3:8a:df:e1:01:64:3a:06:3e:14:60:5d:2e:f5:5f:23:
4d:d5:43:35:c9:43:fb:7b:0b:f3:ab:c0:6d:24:1c:52:0e:79:
f1:7d:d3:6e:e6:fb:c4:a1:a1:46:0a:c2:5d:8a:31:63:66:3a:
7c:80:40:1f:ba:84:08:1c:e1:b2:f0:52:5c:cf:ce:d2:ed:49:
7b:03:68:d4:33:40:ca:b1:cb:15:75:77:ec:4b:3f:36:6f:56:
e5:17:ef:1a:79:85:37:61:92:07:cb:50:72:15:64:00:fe:35:
39:e6:0e:f7:a7:20:7c:3f:7e:d2:8b:2d:f5:c1:b1:a1:c2:67:
e1:bc:1e:e9:46:a0:52:a6:ca:bd:d5:3e:c0:db:cf:51:a7:1f:
f5:bb:5d:5e:6d:87:9a:0a:92:52:a2:98:1b:a6:02:1e:84:bd:
5e:c5:9c:b3:29:25:ca:1b:9e:a1:2c:35:81:62:48:3b:28:6a:
ed:98:bd:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:23:28 2025 by rpki-client