Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3642CB1/2A238452348911EF96C98D9E762E951A/0489B53CA44E11F0AC16C09CDAE4EC9C.roa
File: 0489B53CA44E11F0AC16C09CDAE4EC9C.roa (raw, json)
Hash identifier: a2XOlsngKOqqGq1EHjARQHyDrpnuVCxetumHZtqolnw=
Subject key identifier: 15:82:A4:E3:8A:02:EA:FC:DB:BA:5F:B5:54:60:7C:0A:00:82:4B:81
Certificate issuer: /CN=F3642CB1AF/serialNumber=482DEEC29130ED202D8399D69A13269AA612AFD3
Certificate serial: 0218
Authority key identifier: 48:2D:EE:C2:91:30:ED:20:2D:83:99:D6:9A:13:26:9A:A6:12:AF:D3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SC3uwpEw7SAtg5nWmhMmmqYSr9M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/2A238452348911EF96C98D9E762E951A/0489B53CA44E11F0AC16C09CDAE4EC9C.roa
Signing time: Wed 08 Oct 2025 13:52:24 +0000
ROA not before: Wed 08 Oct 2025 13:52:18 +0000
ROA not after: Sun 01 Dec 2030 13:52:18 +0000
asID: 29286
IP address blocks: 196.175.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/2A238452348911EF96C98D9E762E951A/SC3uwpEw7SAtg5nWmhMmmqYSr9M.crl
rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/2A238452348911EF96C98D9E762E951A/SC3uwpEw7SAtg5nWmhMmmqYSr9M.mft
rsync://rpki.afrinic.net/repository/afrinic/SC3uwpEw7SAtg5nWmhMmmqYSr9M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 04:21:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 536 (0x218)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3642CB1AF, serialNumber=482DEEC29130ED202D8399D69A13269AA612AFD3
Validity
Not Before: Oct 8 13:52:18 2025 GMT
Not After : Dec 1 13:52:18 2030 GMT
Subject: CN=68e66c98-c2bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ed:81:63:c9:a9:18:ca:3f:94:0c:bc:b1:eb:
1e:31:26:75:6b:aa:7a:3d:59:f0:6f:65:ca:3c:80:
24:c5:0a:2b:c8:4a:c0:a0:fe:02:c5:e6:3a:b2:8a:
5b:86:c3:73:eb:9b:2f:c9:37:fa:61:1a:88:ae:44:
24:75:1a:22:74:6d:4d:0f:4e:de:eb:e8:2b:12:47:
76:63:1f:62:e2:34:7b:70:28:12:94:d1:08:7e:04:
77:d6:f8:82:31:7d:1c:55:29:4e:f3:e2:51:1f:3f:
8d:22:0f:0f:a5:84:52:a9:8e:c0:90:32:0b:c0:2e:
83:09:0f:2d:4f:80:02:99:f6:c6:ca:21:be:15:9d:
b0:6d:59:c9:46:f9:18:36:18:38:5a:20:73:bc:05:
0a:b5:a6:81:bc:86:cc:f5:c4:bb:84:96:16:b6:d3:
af:76:1e:48:3e:a6:99:47:03:60:38:5d:7a:01:90:
12:6e:6f:ab:35:a1:90:38:0a:48:9a:9c:38:f9:eb:
93:d6:9f:be:45:e8:0b:db:8e:78:a1:d2:8e:19:7f:
33:fa:78:a2:6d:64:98:42:4d:68:df:1e:c3:c4:6f:
e4:ee:22:35:2a:7a:84:07:d3:20:cd:d0:d4:ac:d6:
9c:be:da:b5:75:35:b6:c9:81:fb:39:f9:5e:19:21:
64:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:82:A4:E3:8A:02:EA:FC:DB:BA:5F:B5:54:60:7C:0A:00:82:4B:81
X509v3 Authority Key Identifier:
keyid:48:2D:EE:C2:91:30:ED:20:2D:83:99:D6:9A:13:26:9A:A6:12:AF:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/2A238452348911EF96C98D9E762E951A/SC3uwpEw7SAtg5nWmhMmmqYSr9M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SC3uwpEw7SAtg5nWmhMmmqYSr9M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/2A238452348911EF96C98D9E762E951A/0489B53CA44E11F0AC16C09CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.175.4.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:bb:15:9c:22:d4:7a:d7:9a:e0:4d:79:a7:86:eb:35:b9:47:
43:b8:b8:83:d1:f0:8f:0c:17:f7:dd:cf:cd:b5:8f:a0:bb:9a:
be:e3:c7:e6:84:0d:de:2d:81:1a:e3:95:b2:fb:a3:be:a4:21:
ca:e6:22:5f:30:05:83:90:5f:0d:4a:4b:26:cc:19:f4:49:eb:
0f:0b:d3:64:e8:55:b9:6b:3a:ae:5e:a4:7c:69:20:21:3c:78:
2d:82:5e:b8:20:ac:df:d1:11:83:ef:34:65:b3:0e:c0:b2:eb:
35:cc:90:40:80:2d:b7:93:78:66:c3:91:6b:31:ef:b5:f3:2b:
ad:c9:5d:c6:4c:b6:aa:a6:d2:e0:eb:e9:4c:2c:58:a6:fb:ad:
56:9b:86:04:6e:8b:aa:68:25:14:49:e4:18:38:77:cb:e2:62:
68:70:49:0c:f3:18:5d:95:32:9b:b7:29:e8:1b:8d:f2:14:de:
94:bc:a1:a5:39:3f:a8:d0:13:fe:9b:2d:41:f8:5a:14:e6:78:
7b:18:ff:9f:4e:0f:65:87:cc:0f:be:64:f8:86:4b:71:c6:6a:
86:6c:17:f5:14:16:c1:3d:94:54:4d:d9:e7:38:2e:2e:42:f2:
a4:9d:61:ec:bb:83:d2:66:87:14:0e:e3:af:9b:45:e2:aa:b2:
1b:b9:1d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:40:21 2025 by rpki-client