Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/1D61636AAD9111F0B6C802E0DAE4EC9C.roa
File: 1D61636AAD9111F0B6C802E0DAE4EC9C.roa (raw, json)
Hash identifier: BBiMtDq1924b0zXtKlwj6WdODrF5fjfJCdIU/dUthSg=
Subject key identifier: 59:8F:17:DE:4A:8F:2E:D7:0D:13:B1:F6:BD:9A:60:68:70:FB:DA:69
Certificate issuer: /CN=F369591CAF/serialNumber=C1090D37DA9FFEEE1A9C229BAFF1190BD22E8934
Certificate serial: 0433
Authority key identifier: C1:09:0D:37:DA:9F:FE:EE:1A:9C:22:9B:AF:F1:19:0B:D2:2E:89:34
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/1D61636AAD9111F0B6C802E0DAE4EC9C.roa
Signing time: Mon 20 Oct 2025 08:45:23 +0000
ROA not before: Mon 20 Oct 2025 08:45:18 +0000
ROA not after: Tue 31 Dec 2030 08:45:18 +0000
asID: 15964
IP address blocks: 41.204.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.mft
rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 08:45:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1075 (0x433)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369591CAF, serialNumber=C1090D37DA9FFEEE1A9C229BAFF1190BD22E8934
Validity
Not Before: Oct 20 08:45:18 2025 GMT
Not After : Dec 31 08:45:18 2030 GMT
Subject: CN=68f5f6a2-fd3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4e:38:9d:ca:26:79:0e:c2:87:61:60:de:7c:
27:10:b3:f5:11:cd:98:0e:96:ab:d5:49:49:7a:71:
8f:73:1d:71:e8:6e:cb:27:6e:30:15:8c:46:6a:4f:
60:f8:67:1e:75:7c:dd:25:00:6f:c3:ec:9c:a3:19:
7e:48:a0:46:4e:40:b7:8f:8e:8e:01:3c:e4:90:7c:
72:fd:a9:9c:cd:f3:bb:06:ec:5e:c5:dc:d7:be:d8:
91:91:eb:38:aa:ee:b6:09:fd:61:54:c0:26:58:5b:
65:af:08:46:d9:b2:5e:90:ab:51:93:e3:7d:12:1a:
1b:3b:c0:de:89:72:d9:75:46:50:a8:b4:18:94:5b:
d4:22:4d:73:43:bc:a0:82:76:b6:29:01:81:f9:8c:
e2:00:59:aa:3b:26:cb:e3:98:dc:f3:1e:65:d1:c1:
67:bc:aa:ee:56:c8:9e:ae:7a:d7:36:96:53:55:d7:
1e:4c:46:6c:2b:ae:41:10:79:18:51:3e:52:aa:30:
b9:a4:64:f5:47:72:f1:52:f0:00:28:28:e5:45:21:
cb:40:26:1a:03:12:84:c2:1a:ea:e2:05:d6:5e:02:
f5:71:0c:79:3f:86:c2:59:62:f1:37:00:e9:86:2a:
6c:22:e2:3b:a4:ee:d3:8d:de:24:88:bc:88:2c:ee:
e4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:8F:17:DE:4A:8F:2E:D7:0D:13:B1:F6:BD:9A:60:68:70:FB:DA:69
X509v3 Authority Key Identifier:
keyid:C1:09:0D:37:DA:9F:FE:EE:1A:9C:22:9B:AF:F1:19:0B:D2:2E:89:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/1D61636AAD9111F0B6C802E0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.204.78.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:bb:d3:a7:bb:b9:8a:f9:65:65:be:74:c2:1a:38:7c:a4:9c:
0f:d1:14:90:c9:c5:b9:6f:51:ae:fd:f7:56:2b:a5:a4:92:04:
c0:54:18:2c:a2:fc:b3:18:b5:4a:77:fb:7b:57:f3:89:dc:c3:
b8:b4:67:6b:1c:4f:09:c0:15:37:be:74:10:7f:3b:cc:2a:82:
4d:ea:58:1c:95:f4:8b:b2:ab:73:60:54:c2:38:f2:67:86:85:
81:f1:7a:f0:3a:44:f8:e9:7d:84:21:5e:88:42:9a:ae:53:8d:
54:2f:1f:42:d4:f1:f0:71:33:1c:8a:47:fc:bc:67:af:06:f1:
10:d6:b8:63:e0:29:0b:85:05:32:21:c3:be:2b:74:63:42:1b:
e5:31:ae:ae:4b:0f:a7:c4:95:eb:d8:dd:8f:cf:d2:83:d9:08:
d1:8c:10:32:bf:bb:18:84:0d:2d:7a:8b:3e:c0:57:40:98:d6:
0f:c6:1c:e5:7e:e1:79:33:98:23:c5:ad:81:77:b9:39:69:15:
44:96:d1:a9:af:6f:c6:85:13:d7:00:ba:7f:03:18:40:2f:17:
53:30:b0:e6:f5:42:c1:60:56:d8:13:1f:5e:40:8f:9b:f4:3f:
f3:7e:3e:6c:c9:a6:77:ca:a1:91:d7:66:97:d4:d7:60:ef:a9:
a7:5e:21:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:57:25 2025 by rpki-client