Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/CB802D6A9FD011F0B09E84F1DAE4EC9C.roa
File: CB802D6A9FD011F0B09E84F1DAE4EC9C.roa (raw, json)
Hash identifier: S80ZZFyyc08N7gI7of8t+4zntc1/6kCBNhlAw4585HY=
Subject key identifier: B3:14:0B:A6:D7:41:5E:4D:76:D9:5D:DB:D7:21:9A:D7:64:D9:71:93
Certificate issuer: /CN=F36549B1AF/serialNumber=9F17383EB667E547BA00CFB7F914F4284C5849CC
Certificate serial: 0EC4
Authority key identifier: 9F:17:38:3E:B6:67:E5:47:BA:00:CF:B7:F9:14:F4:28:4C:58:49:CC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/nxc4PrZn5Ue6AM-3-RT0KExYScw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/CB802D6A9FD011F0B09E84F1DAE4EC9C.roa
Signing time: Thu 02 Oct 2025 20:45:57 +0000
ROA not before: Thu 02 Oct 2025 20:45:51 +0000
ROA not after: Wed 01 Dec 2049 20:45:51 +0000
asID: 37663
IP address blocks: 196.10.54.0/24 maxlen: 24
2001:43f8:1f4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.mft
rsync://rpki.afrinic.net/repository/afrinic/nxc4PrZn5Ue6AM-3-RT0KExYScw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3780 (0xec4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36549B1AF, serialNumber=9F17383EB667E547BA00CFB7F914F4284C5849CC
Validity
Not Before: Oct 2 20:45:51 2025 GMT
Not After : Dec 1 20:45:51 2049 GMT
Subject: CN=68dee485-facc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:18:aa:12:d5:b8:c1:5d:4d:75:95:78:b6:d5:
58:74:d9:f6:bb:92:ed:88:be:fb:5e:39:ee:46:97:
47:8c:20:46:7c:45:28:e9:cf:40:f3:ca:bc:a7:92:
05:94:5b:37:c5:df:94:5e:98:2c:28:02:98:c8:8e:
87:70:a9:21:ac:c0:19:b6:09:25:ea:1c:c2:58:40:
f9:05:18:fd:20:7e:b1:33:31:ae:03:8c:17:5f:be:
ea:fe:c0:dd:74:65:d7:15:e8:62:84:ad:00:16:f8:
1f:88:21:9e:a1:a0:f3:83:3e:f7:5e:f2:02:7c:11:
1c:6b:ec:04:ff:fc:c7:e3:ab:d5:28:ec:8d:21:5a:
d1:e9:1c:d9:a9:fb:45:5e:18:22:d7:8d:82:5b:6b:
46:fa:2e:c0:c5:48:a6:38:2e:92:01:03:ae:c7:7f:
98:75:94:99:0a:09:f0:cf:ff:2a:34:de:7d:ee:4d:
b1:bf:2d:31:db:8a:41:bc:83:7b:1d:ec:e6:7e:12:
86:75:4f:d3:a2:f9:2d:c6:8f:87:68:6f:29:90:b4:
b9:36:16:15:42:0d:7f:75:93:62:7c:c7:29:c0:1b:
c8:5c:52:92:f9:fa:a3:46:d7:75:0d:3f:4f:44:a5:
9c:14:76:3b:39:99:38:a1:9e:45:17:26:93:73:bd:
27:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:14:0B:A6:D7:41:5E:4D:76:D9:5D:DB:D7:21:9A:D7:64:D9:71:93
X509v3 Authority Key Identifier:
keyid:9F:17:38:3E:B6:67:E5:47:BA:00:CF:B7:F9:14:F4:28:4C:58:49:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/nxc4PrZn5Ue6AM-3-RT0KExYScw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/CB802D6A9FD011F0B09E84F1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.10.54.0/24
IPv6:
2001:43f8:1f4::/48
Signature Algorithm: sha256WithRSAEncryption
54:f7:9e:e3:39:1f:8d:bb:37:d1:35:79:43:f3:1d:20:d3:e0:
48:36:af:03:c4:c9:44:fa:a6:71:d9:d7:e2:b1:98:68:d3:b4:
7e:0e:0f:51:72:81:63:15:af:b4:8e:87:1e:e0:92:27:e1:21:
ab:5d:6e:8e:8f:12:07:1e:23:3e:42:5d:e0:67:59:8d:d5:02:
02:8b:80:71:60:e1:45:13:44:2c:56:b8:c5:ae:23:3c:53:19:
ea:e5:76:46:ba:88:36:78:9a:af:db:16:fc:82:ad:f5:b3:4c:
f6:f3:60:8a:7f:48:f2:53:f9:59:ba:07:e5:98:2c:60:e6:9b:
17:fb:69:45:c4:f9:da:c9:60:4d:0d:19:6e:38:64:03:96:e9:
58:07:10:bc:a4:73:8d:33:06:e0:91:f4:7d:96:4e:4b:8a:a8:
ef:25:8a:2c:20:29:fc:f0:36:99:fb:56:5f:5d:b5:e6:75:24:
92:37:1a:1d:da:76:cf:e6:16:dd:4e:8e:fc:88:e6:ec:4c:53:
af:04:c8:e4:77:ff:75:e7:ee:be:e0:05:62:85:82:44:c3:fc:
a7:d4:f0:79:32:82:54:bb:db:0d:db:95:4b:8f:a1:d3:6a:70:
59:69:c8:e3:1c:5c:58:5b:b5:ba:d3:b6:f4:86:7e:ab:f7:ff:
54:01:42:6a
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgICDsQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTQ5QjFBRjExMC8GA1UEBRMoOUYxNzM4M0VCNjY3RTU0N0JBMDBDRkI3RjkxNEY0
Mjg0QzU4NDlDQzAeFw0yNTEwMDIyMDQ1NTFaFw00OTEyMDEyMDQ1NTFaMBgxFjAU
BgNVBAMTDTY4ZGVlNDg1LWZhY2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC+GKoS1bjBXU11lXi21Vh02fa7ku2IvvteOe5Gl0eMIEZ8RSjpz0Dzyryn
kgWUWzfF35RemCwoApjIjodwqSGswBm2CSXqHMJYQPkFGP0gfrEzMa4DjBdfvur+
wN10ZdcV6GKErQAW+B+IIZ6hoPODPvde8gJ8ERxr7AT//Mfjq9Uo7I0hWtHpHNmp
+0VeGCLXjYJba0b6LsDFSKY4LpIBA67Hf5h1lJkKCfDP/yo03n3uTbG/LTHbikG8
g3sd7OZ+EoZ1T9Oi+S3Gj4dobymQtLk2FhVCDX91k2J8xynAG8hcUpL5+qNG13UN
P09EpZwUdjs5mTihnkUXJpNzvSfLAgMBAAGjggK2MIICsjAdBgNVHQ4EFgQUsxQL
ptdBXk122V3b1yGa12TZcZMwHwYDVR0jBBgwFoAUnxc4PrZn5Ue6AM+3+RT0KExY
ScwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjU0OUIxL0RGNzg4Qzk4NTYxMzExRTVCMUEwRTM2MEY4QUVBMjI4L254YzRQ
clpuNVVlNkFNLTMtUlQwS0V4WVNjdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL254YzRQclpuNVVlNkFNLTMtUlQwS0V4WVNjdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjU0OUIxL0RGNzg4Qzk4NTYxMzExRTVCMUEwRTM2MEY4
QUVBMjI4L0NCODAyRDZBOUZEMDExRjBCMDlFODRGMURBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBADECjYwDwQCAAIwCQMHACAB
Q/gB9DANBgkqhkiG9w0BAQsFAAOCAQEAVPee4zkfjbs30TV5Q/MdINPgSDavA8TJ
RPqmcdnX4rGYaNO0fg4PUXKBYxWvtI6HHuCSJ+Ehq11ujo8SBx4jPkJd4GdZjdUC
AouAcWDhRRNELFa4xa4jPFMZ6uV2RrqINniar9sW/IKt9bNM9vNgin9I8lP5WboH
5ZgsYOabF/tpRcT52slgTQ0ZbjhkA5bpWAcQvKRzjTMG4JH0fZZOS4qo7yWKLCAp
/PA2mftWX1215nUkkjcaHdp2z+YW3U6O/Ijm7ExTrwTI5Hf/defuvuAFYoWCRMP8
p9TweTKCVLvbDduVS4+h02pwWWnI4xxcWFu1utO29IZ+q/f/VAFCag==
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:50:05 2025 by rpki-client