Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368BC41/C230B48C2EE811EF8028E5BA762E951A/CD4AEF6C84E711F082A7A4C7DAE4EC9C.roa
File: CD4AEF6C84E711F082A7A4C7DAE4EC9C.roa (raw, json)
Hash identifier: TD1wlhKZOrZP/F+QwOCwitVpVwlglIWA3dyIYL4ym/c=
Subject key identifier: 8A:4D:11:C7:18:74:8C:6E:E9:8C:10:B2:35:2D:F0:02:1C:9F:3E:AD
Certificate issuer: /CN=F368BC41AF/serialNumber=CE147CA405945ACF5CDFE15E4FA5D2BDEA48D90A
Certificate serial: 01CB
Authority key identifier: CE:14:7C:A4:05:94:5A:CF:5C:DF:E1:5E:4F:A5:D2:BD:EA:48:D9:0A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/zhR8pAWUWs9c3-FeT6XSvepI2Qo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368BC41/C230B48C2EE811EF8028E5BA762E951A/CD4AEF6C84E711F082A7A4C7DAE4EC9C.roa
Signing time: Fri 29 Aug 2025 14:52:37 +0000
ROA not before: Fri 29 Aug 2025 14:52:31 +0000
ROA not after: Wed 31 Dec 2025 14:52:31 +0000
asID: 16907
IP address blocks: 41.221.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368BC41/C230B48C2EE811EF8028E5BA762E951A/zhR8pAWUWs9c3-FeT6XSvepI2Qo.crl
rsync://rpki.afrinic.net/repository/member_repository/F368BC41/C230B48C2EE811EF8028E5BA762E951A/zhR8pAWUWs9c3-FeT6XSvepI2Qo.mft
rsync://rpki.afrinic.net/repository/afrinic/zhR8pAWUWs9c3-FeT6XSvepI2Qo.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 459 (0x1cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368BC41AF, serialNumber=CE147CA405945ACF5CDFE15E4FA5D2BDEA48D90A
Validity
Not Before: Aug 29 14:52:31 2025 GMT
Not After : Dec 31 14:52:31 2025 GMT
Subject: CN=68b1beb5-d006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c1:09:57:0d:7a:79:4c:74:80:6a:62:88:c9:
64:17:61:a0:1a:d1:ec:89:82:e8:20:5d:e2:34:0a:
30:37:b0:c0:cb:7a:92:ad:3c:3c:b1:af:0f:ec:68:
d1:48:9a:f9:68:b8:7e:4b:fc:f8:26:ca:7f:9f:40:
32:26:dd:38:6a:b0:ab:92:fa:a2:f5:52:21:c2:1d:
41:89:03:2a:02:79:a8:f9:ea:4a:8d:df:46:1f:e4:
60:47:c9:42:0a:76:53:df:33:8e:f1:ce:65:8b:0f:
40:de:c7:ac:90:c5:a8:a8:65:b9:35:74:6b:3f:cc:
ba:0c:6a:2b:8c:82:89:6e:cf:ad:fa:c8:ee:ea:67:
2f:b6:b3:d1:c8:4c:d0:71:b1:f5:64:78:20:79:1c:
6c:5d:f6:5e:fe:c2:60:5c:72:75:42:e3:a5:3f:3d:
2a:82:00:00:ee:61:25:f1:aa:3e:e4:e9:05:fb:d2:
51:4f:3e:2a:f7:14:82:31:33:2d:83:12:ea:19:e6:
c4:a1:37:78:97:25:4f:a9:59:0a:b5:86:a4:f9:9e:
e7:e6:1c:12:d9:cb:0c:1f:25:ab:00:c1:5e:54:ae:
41:00:af:3f:02:fe:0c:91:4f:0b:fb:b2:fd:63:de:
e0:34:33:66:dd:68:95:6e:fe:0f:b9:09:34:d6:f2:
6d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:4D:11:C7:18:74:8C:6E:E9:8C:10:B2:35:2D:F0:02:1C:9F:3E:AD
X509v3 Authority Key Identifier:
keyid:CE:14:7C:A4:05:94:5A:CF:5C:DF:E1:5E:4F:A5:D2:BD:EA:48:D9:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368BC41/C230B48C2EE811EF8028E5BA762E951A/zhR8pAWUWs9c3-FeT6XSvepI2Qo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zhR8pAWUWs9c3-FeT6XSvepI2Qo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368BC41/C230B48C2EE811EF8028E5BA762E951A/CD4AEF6C84E711F082A7A4C7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.221.35.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:25:47:a9:90:b0:0c:fa:d0:e0:b2:24:10:59:50:81:fc:e0:
09:7e:e4:bf:c9:2a:16:dd:05:a8:b0:b8:ed:b3:da:28:a5:88:
52:15:a5:e5:a9:3a:f2:99:17:23:e1:63:39:ef:85:5a:75:19:
29:c8:40:18:5c:4e:fa:9c:03:c0:b0:bb:e1:36:e4:98:46:0a:
45:91:3e:6d:68:47:ff:11:ab:2c:2d:a4:94:6f:bf:8f:8f:6e:
ad:0f:73:bf:e9:bd:b8:30:83:8d:2e:dc:8a:d6:22:b0:d0:6a:
55:7f:76:ce:9d:62:88:21:0f:3d:ec:a1:01:ec:62:f6:8e:d4:
a8:62:60:16:19:64:3e:48:14:27:f7:55:fa:78:1f:fe:b1:cf:
cf:ec:6c:9d:f1:fa:60:9b:36:95:98:a7:0a:9d:54:ec:8a:96:
ec:ca:f1:1f:d1:aa:58:6c:79:7b:bc:1a:1d:48:8f:91:67:a5:
75:da:63:09:8a:9a:20:40:7f:7d:7f:eb:60:48:84:80:cd:7f:
fb:ce:22:6a:8f:14:13:28:22:f6:c1:39:a4:31:13:65:a2:5f:
f9:c6:25:52:23:e5:ca:5d:ab:b1:8f:b2:92:de:a6:be:10:cb:
f9:19:24:d2:fb:03:48:c9:88:66:80:04:2f:ba:12:09:61:00:
d8:36:47:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:49:53 2025 by rpki-client