Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/7FA6B8DC9FD011F09FBF73EDDAE4EC9C.roa
File: 7FA6B8DC9FD011F09FBF73EDDAE4EC9C.roa (raw, json)
Hash identifier: mIreRYj0MVYZW7c/XBrrdQAMZGvWksvf2R6Ym6OT8rM=
Subject key identifier: E1:81:45:13:A9:47:C2:77:B7:BD:C1:21:C8:29:2E:EA:71:C8:8B:75
Certificate issuer: /CN=F36549B1AF/serialNumber=9F17383EB667E547BA00CFB7F914F4284C5849CC
Certificate serial: 0EC2
Authority key identifier: 9F:17:38:3E:B6:67:E5:47:BA:00:CF:B7:F9:14:F4:28:4C:58:49:CC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/nxc4PrZn5Ue6AM-3-RT0KExYScw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/7FA6B8DC9FD011F09FBF73EDDAE4EC9C.roa
Signing time: Thu 02 Oct 2025 20:43:49 +0000
ROA not before: Thu 02 Oct 2025 20:43:44 +0000
ROA not after: Wed 01 Dec 2049 20:43:44 +0000
asID: 37474
IP address blocks: 196.10.52.0/23 maxlen: 23
2001:43f8:1f3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.mft
rsync://rpki.afrinic.net/repository/afrinic/nxc4PrZn5Ue6AM-3-RT0KExYScw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3778 (0xec2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36549B1AF, serialNumber=9F17383EB667E547BA00CFB7F914F4284C5849CC
Validity
Not Before: Oct 2 20:43:44 2025 GMT
Not After : Dec 1 20:43:44 2049 GMT
Subject: CN=68dee405-6f72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:04:e1:ec:a2:17:18:dc:ca:50:36:e2:47:74:
12:e2:13:d1:b7:ff:3b:54:2c:59:a5:0d:e9:42:90:
9c:be:a9:6c:80:1b:17:4d:73:b0:08:3c:1b:bf:d9:
20:63:7c:23:d6:a7:d6:b5:54:8c:30:c2:46:c1:01:
bc:51:04:5e:a1:72:51:af:48:94:84:89:dd:4b:94:
b8:74:f5:eb:86:f3:e2:64:10:66:44:06:88:64:62:
9e:a1:e5:ca:c9:d7:50:6c:ba:3d:b8:b8:61:2c:35:
e2:17:bb:79:1c:4e:c1:d8:22:b7:0e:32:2b:1f:f2:
81:98:11:86:db:d4:ff:c4:95:81:1e:63:78:73:70:
34:76:68:d1:a6:0a:12:d1:eb:67:1c:85:d9:3a:b9:
e5:35:dd:32:1d:e8:d0:8f:18:e0:00:a8:6e:6c:55:
33:05:e9:db:19:41:76:cf:23:28:4b:59:5a:8c:ef:
51:9c:2b:d9:26:17:cb:b3:a2:08:45:f5:49:74:eb:
90:b0:09:0c:9f:4c:17:90:fb:ac:18:43:e3:6b:42:
db:70:8f:3b:62:23:f3:c2:94:53:85:6c:2b:26:2e:
ec:c6:4e:35:25:35:df:bf:d8:c1:2e:41:50:43:35:
b6:96:7e:be:b4:47:75:f8:c8:6f:b7:d9:39:47:b8:
aa:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:81:45:13:A9:47:C2:77:B7:BD:C1:21:C8:29:2E:EA:71:C8:8B:75
X509v3 Authority Key Identifier:
keyid:9F:17:38:3E:B6:67:E5:47:BA:00:CF:B7:F9:14:F4:28:4C:58:49:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/nxc4PrZn5Ue6AM-3-RT0KExYScw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/7FA6B8DC9FD011F09FBF73EDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.10.52.0/23
IPv6:
2001:43f8:1f3::/48
Signature Algorithm: sha256WithRSAEncryption
03:39:aa:b5:51:2c:5a:ff:4d:d1:87:07:01:e0:1b:02:7a:fd:
13:3e:8c:2d:b7:e0:1c:44:f3:04:6d:0a:5a:a1:a3:d6:4a:03:
ea:a7:0b:35:bd:e2:72:f0:ef:e5:dc:60:e3:b1:98:7c:99:44:
b8:98:02:f1:cf:c5:06:92:dc:a7:e4:10:56:1c:c9:f2:73:51:
33:37:6e:f7:ab:18:35:f8:40:5c:e4:f1:0d:7f:b0:1a:20:55:
bc:cf:5c:52:fa:bb:67:e1:08:74:33:62:23:fd:34:dd:58:d3:
7b:31:e4:96:4b:a6:d9:b1:ac:df:da:55:56:ec:f5:25:71:db:
73:0d:9a:7c:48:16:cc:bb:15:9c:4c:8e:f1:eb:a3:86:53:67:
7b:69:7b:ce:da:3a:c6:d4:f3:f3:39:5e:20:66:ed:b8:2b:14:
09:35:5d:d1:bf:21:d4:c4:50:a0:db:0e:ac:1e:84:7a:e8:2d:
e0:7b:82:cf:28:24:d7:6e:e1:90:e9:4f:be:49:78:9b:73:65:
94:7d:9a:09:bd:da:78:13:39:80:98:b2:31:ea:06:fe:95:16:
34:58:be:28:d9:88:e9:03:64:c9:92:13:dc:01:6f:f7:31:ae:
72:98:b6:81:f9:84:14:d1:b8:f5:6b:ae:d1:30:44:96:18:ae:
81:71:d6:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:11:07 2025 by rpki-client