Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/FA54B1109FD011F08E699CF1DAE4EC9C.roa
File: FA54B1109FD011F08E699CF1DAE4EC9C.roa (raw, json)
Hash identifier: F+/CQFEGh7hy0TbdeqQH+fkZYKvk2d9fKx2iVdi2NNY=
Subject key identifier: E2:64:21:F0:81:9E:C1:92:A6:8D:C1:F1:F9:5B:14:20:6A:3A:10:15
Certificate issuer: /CN=F36549B1AF/serialNumber=9F17383EB667E547BA00CFB7F914F4284C5849CC
Certificate serial: 0EC6
Authority key identifier: 9F:17:38:3E:B6:67:E5:47:BA:00:CF:B7:F9:14:F4:28:4C:58:49:CC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/nxc4PrZn5Ue6AM-3-RT0KExYScw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/FA54B1109FD011F08E699CF1DAE4EC9C.roa
Signing time: Thu 02 Oct 2025 20:47:15 +0000
ROA not before: Thu 02 Oct 2025 20:47:11 +0000
ROA not after: Wed 01 Dec 2049 20:47:11 +0000
asID: 37668
IP address blocks: 196.10.55.0/24 maxlen: 24
2001:43f8:1f5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.mft
rsync://rpki.afrinic.net/repository/afrinic/nxc4PrZn5Ue6AM-3-RT0KExYScw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3782 (0xec6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36549B1AF, serialNumber=9F17383EB667E547BA00CFB7F914F4284C5849CC
Validity
Not Before: Oct 2 20:47:11 2025 GMT
Not After : Dec 1 20:47:11 2049 GMT
Subject: CN=68dee4d3-bf2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d7:11:66:5a:30:8b:63:e4:64:31:84:b3:a1:
a8:76:ca:58:33:33:4f:33:99:27:39:df:b7:8f:9d:
83:7a:86:da:54:88:23:96:b5:5d:4b:36:bb:f7:f7:
21:38:9a:3d:a7:1d:8b:c4:58:44:dc:94:ce:5a:a8:
23:a3:59:3b:07:82:47:44:d3:04:9d:17:49:05:32:
85:32:ea:92:34:a0:af:12:3a:a3:0f:d5:69:71:f7:
14:f4:ae:48:10:e8:0b:0a:7f:0a:df:c6:3c:20:47:
1b:20:15:36:8a:a0:68:fb:b5:7d:17:93:7e:0d:5a:
ff:bb:c9:51:7e:d6:d6:e4:ec:aa:7c:8c:68:24:60:
d4:08:65:3b:d5:e4:15:36:ac:f8:61:b8:9f:93:94:
ea:43:95:8a:fb:65:bc:21:1f:cd:b5:5a:88:a6:bc:
21:89:cc:89:64:85:6f:db:de:64:08:ca:51:af:16:
14:50:5c:4e:f3:40:37:e3:6c:f7:70:64:cf:ff:db:
ff:38:76:91:21:27:6e:fd:cb:4a:41:47:f9:5c:94:
f3:ae:bf:ef:59:7a:c6:44:d1:a3:35:9d:64:b6:c0:
2c:48:52:4d:8f:bc:e3:ed:a6:f3:b0:ab:df:83:de:
fe:27:cd:66:78:24:4f:e0:c4:ef:0e:bb:a5:19:e5:
cf:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:64:21:F0:81:9E:C1:92:A6:8D:C1:F1:F9:5B:14:20:6A:3A:10:15
X509v3 Authority Key Identifier:
keyid:9F:17:38:3E:B6:67:E5:47:BA:00:CF:B7:F9:14:F4:28:4C:58:49:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/nxc4PrZn5Ue6AM-3-RT0KExYScw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/FA54B1109FD011F08E699CF1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.10.55.0/24
IPv6:
2001:43f8:1f5::/48
Signature Algorithm: sha256WithRSAEncryption
83:dc:d4:6c:e2:b7:30:c0:a4:ab:90:9e:a0:4a:4d:21:85:82:
03:18:d9:73:8f:ab:df:ff:f3:1e:af:9c:1b:c6:6b:6a:4b:33:
1b:8e:93:9b:f2:8d:e3:e7:84:14:41:11:a8:6e:9f:18:80:b3:
f3:c6:92:35:b5:19:4c:22:66:1c:f0:62:1f:36:6a:35:f7:ee:
d7:b9:fe:c6:04:de:1b:ad:0e:24:93:f8:52:65:00:c5:54:85:
c2:d9:4a:a6:d9:92:b0:24:4c:29:f8:f2:aa:58:74:39:22:fb:
1c:29:a2:5a:9a:81:13:41:86:26:7d:57:d3:77:86:22:ac:27:
13:36:90:b2:12:1f:d5:18:45:7a:67:1d:e7:01:c7:4d:e3:40:
37:c5:88:5d:6c:0d:0e:8c:98:21:80:c5:5f:84:34:c4:99:53:
cf:75:39:53:7f:e1:9b:be:0a:26:eb:b5:42:f3:43:0d:8c:86:
f4:ee:a2:db:2d:0c:20:e2:d7:23:02:cd:be:9f:98:49:7e:7e:
b0:8d:92:4f:8d:ab:8e:4f:32:41:ee:3b:94:85:a0:02:f7:d9:
c3:0d:bb:80:62:f5:02:f0:99:62:36:e4:dc:a3:af:05:5a:75:
47:aa:cc:97:b2:75:a4:af:e1:98:32:73:8e:88:a2:b4:96:cb:
3f:ac:aa:fb
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgICDsYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTQ5QjFBRjExMC8GA1UEBRMoOUYxNzM4M0VCNjY3RTU0N0JBMDBDRkI3RjkxNEY0
Mjg0QzU4NDlDQzAeFw0yNTEwMDIyMDQ3MTFaFw00OTEyMDEyMDQ3MTFaMBgxFjAU
BgNVBAMTDTY4ZGVlNGQzLWJmMmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCc1xFmWjCLY+RkMYSzoah2ylgzM08zmSc537ePnYN6htpUiCOWtV1LNrv3
9yE4mj2nHYvEWETclM5aqCOjWTsHgkdE0wSdF0kFMoUy6pI0oK8SOqMP1Wlx9xT0
rkgQ6AsKfwrfxjwgRxsgFTaKoGj7tX0Xk34NWv+7yVF+1tbk7Kp8jGgkYNQIZTvV
5BU2rPhhuJ+TlOpDlYr7ZbwhH821WoimvCGJzIlkhW/b3mQIylGvFhRQXE7zQDfj
bPdwZM//2/84dpEhJ279y0pBR/lclPOuv+9ZesZE0aM1nWS2wCxIUk2PvOPtpvOw
q9+D3v4nzWZ4JE/gxO8Ou6UZ5c8bAgMBAAGjggK2MIICsjAdBgNVHQ4EFgQU4mQh
8IGewZKmjcHx+VsUIGo6EBUwHwYDVR0jBBgwFoAUnxc4PrZn5Ue6AM+3+RT0KExY
ScwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjU0OUIxL0RGNzg4Qzk4NTYxMzExRTVCMUEwRTM2MEY4QUVBMjI4L254YzRQ
clpuNVVlNkFNLTMtUlQwS0V4WVNjdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL254YzRQclpuNVVlNkFNLTMtUlQwS0V4WVNjdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjU0OUIxL0RGNzg4Qzk4NTYxMzExRTVCMUEwRTM2MEY4
QUVBMjI4L0ZBNTRCMTEwOUZEMDExRjA4RTY5OUNGMURBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBADECjcwDwQCAAIwCQMHACAB
Q/gB9TANBgkqhkiG9w0BAQsFAAOCAQEAg9zUbOK3MMCkq5CeoEpNIYWCAxjZc4+r
3//zHq+cG8ZrakszG46Tm/KN4+eEFEERqG6fGICz88aSNbUZTCJmHPBiHzZqNffu
17n+xgTeG60OJJP4UmUAxVSFwtlKptmSsCRMKfjyqlh0OSL7HCmiWpqBE0GGJn1X
03eGIqwnEzaQshIf1RhFemcd5wHHTeNAN8WIXWwNDoyYIYDFX4Q0xJlTz3U5U3/h
m74KJuu1QvNDDYyG9O6i2y0MIOLXIwLNvp+YSX5+sI2ST42rjk8yQe47lIWgAvfZ
ww27gGL1AvCZYjbk3KOvBVp1R6rMl7J1pK/hmDJzjoiitJbLP6yq+w==
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:15:38 2025 by rpki-client