Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/7D7FF4BEA36411F0B8DCB4B5DAE4EC9C.roa
File: 7D7FF4BEA36411F0B8DCB4B5DAE4EC9C.roa (raw, json)
Hash identifier: SBSFhFouBWocCQSNhqhVWZk69czQ66awyzRm3+xF0V0=
Subject key identifier: B9:02:6C:56:8F:D9:D7:30:9A:90:5B:CF:6B:5D:4F:7C:49:80:1D:CB
Certificate issuer: /CN=F369591CAF/serialNumber=C1090D37DA9FFEEE1A9C229BAFF1190BD22E8934
Certificate serial: 041A
Authority key identifier: C1:09:0D:37:DA:9F:FE:EE:1A:9C:22:9B:AF:F1:19:0B:D2:2E:89:34
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/7D7FF4BEA36411F0B8DCB4B5DAE4EC9C.roa
Signing time: Tue 07 Oct 2025 10:00:45 +0000
ROA not before: Tue 07 Oct 2025 10:00:40 +0000
ROA not after: Tue 31 Dec 2030 10:00:40 +0000
asID: 15964
IP address blocks: 197.159.0.0/19 maxlen: 19
197.159.8.0/24 maxlen: 24
197.159.12.0/24 maxlen: 24
197.159.20.0/24 maxlen: 24
197.159.28.0/24 maxlen: 24
197.159.29.0/24 maxlen: 24
197.159.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.mft
rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1050 (0x41a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369591CAF, serialNumber=C1090D37DA9FFEEE1A9C229BAFF1190BD22E8934
Validity
Not Before: Oct 7 10:00:40 2025 GMT
Not After : Dec 31 10:00:40 2030 GMT
Subject: CN=68e4e4cd-2c75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b3:c7:f0:b5:be:78:8d:a7:f3:c8:fd:e6:ff:
a5:25:16:70:2e:33:de:ef:28:1e:b6:70:80:f8:54:
24:d3:59:75:c5:d4:36:71:b7:fe:e5:85:59:ba:bf:
e1:73:50:d9:22:b7:8f:ae:29:08:9b:69:9b:c9:b1:
76:20:a8:7b:fa:1e:3a:85:61:28:ad:39:fa:56:77:
41:1c:ab:3f:a4:0d:c9:b4:d6:22:83:05:2a:82:2f:
71:e9:c0:89:e8:60:a5:74:22:21:8a:f0:b5:06:7b:
3a:83:62:bf:be:3d:0c:26:f6:fe:60:a9:cb:cc:7f:
e6:06:f4:22:29:cd:00:ec:96:0f:ab:f3:2f:17:60:
10:57:97:ac:f7:44:aa:3e:04:9a:b8:2e:59:94:76:
dd:f5:8d:8e:ce:73:14:4d:c4:12:9d:9e:e5:97:9e:
2a:f9:50:3a:7a:6e:76:d6:20:8c:d8:c1:5e:da:5a:
18:56:bc:31:ff:b3:40:97:96:08:5d:f1:8d:4b:2f:
0d:e1:c7:47:4c:7d:fc:3d:47:3e:11:19:d1:b3:46:
c2:03:0e:f3:92:d0:19:4e:fc:27:ea:c1:4d:3e:0b:
73:43:89:14:c0:b2:35:86:06:75:e6:8c:80:33:0a:
61:5c:22:b5:a8:59:fe:4e:17:21:7f:48:3f:8a:66:
7c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:02:6C:56:8F:D9:D7:30:9A:90:5B:CF:6B:5D:4F:7C:49:80:1D:CB
X509v3 Authority Key Identifier:
keyid:C1:09:0D:37:DA:9F:FE:EE:1A:9C:22:9B:AF:F1:19:0B:D2:2E:89:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/7D7FF4BEA36411F0B8DCB4B5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
197.159.0.0/19
Signature Algorithm: sha256WithRSAEncryption
95:0b:e4:4e:ff:4c:b9:6a:7c:17:69:11:11:af:cf:1c:e4:f9:
d2:51:f3:6b:b4:f2:15:74:70:ad:e6:32:b9:7e:49:e3:b9:b9:
97:c9:fc:0c:72:08:8b:e0:b8:41:82:27:40:a4:d2:03:b8:f4:
8a:bf:b9:36:8c:0a:a6:c8:7f:5a:4b:d7:1e:68:81:de:4e:1c:
9e:f2:96:a8:7e:e3:61:2c:1c:e6:aa:c0:03:8d:e3:9f:81:7b:
a8:93:67:29:07:82:1f:bb:2c:39:d1:18:e8:aa:50:c2:7d:d8:
fa:19:27:48:a8:4e:bf:32:c4:a9:b5:7c:e6:90:40:44:78:64:
3c:c4:55:65:63:0c:9c:44:26:1d:e4:6d:83:0a:d8:5d:55:be:
86:54:86:90:eb:12:d9:74:26:21:82:c6:01:0d:27:f3:9e:e0:
f2:b5:5d:fd:e3:9a:f3:45:48:a7:bb:41:0d:59:b7:39:ba:76:
fa:a3:56:80:9d:5d:60:3e:ed:4a:c3:15:b2:6e:b2:ad:69:df:
a6:db:3b:cd:5f:c2:ed:7a:e4:aa:50:a7:ec:1d:90:81:4e:5b:
3e:cd:71:8e:b4:c5:f6:9b:20:6f:14:78:3e:2d:48:26:32:41:
4c:f5:b8:3e:7d:b2:93:2d:7a:57:05:61:39:34:b8:b6:45:7c:
51:87:07:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:49:27 2025 by rpki-client