
Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A413F/EFD79ED2D33911EFB26AD7B3762E951A/9FC2FD909B0411F0887961DFDAE4EC9C.roa
File: 9FC2FD909B0411F0887961DFDAE4EC9C.roa (raw, json)
Hash identifier: SQLFm7c0g8dDMdmzog7bxprxzbcmvNx7dNociNoNFR4=
Subject key identifier: 9D:01:74:08:E2:54:53:9F:CD:28:D3:37:00:0A:9A:BA:17:C6:AC:B4
Certificate issuer: /CN=F36A413FAF/serialNumber=C44EE299AF58B1CBF46BD1D20FC7DCD97C6A5768
Certificate serial: 0103
Authority key identifier: C4:4E:E2:99:AF:58:B1:CB:F4:6B:D1:D2:0F:C7:DC:D9:7C:6A:57:68
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/xE7ima9Yscv0a9HSD8fc2XxqV2g.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A413F/EFD79ED2D33911EFB26AD7B3762E951A/9FC2FD909B0411F0887961DFDAE4EC9C.roa
Signing time: Fri 26 Sep 2025 18:14:21 +0000
ROA not before: Fri 26 Sep 2025 18:14:16 +0000
ROA not after: Tue 26 Sep 2028 18:14:16 +0000
asID: 204720
IP address blocks: 196.61.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A413F/EFD79ED2D33911EFB26AD7B3762E951A/xE7ima9Yscv0a9HSD8fc2XxqV2g.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A413F/EFD79ED2D33911EFB26AD7B3762E951A/xE7ima9Yscv0a9HSD8fc2XxqV2g.mft
rsync://rpki.afrinic.net/repository/afrinic/xE7ima9Yscv0a9HSD8fc2XxqV2g.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 259 (0x103)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A413FAF, serialNumber=C44EE299AF58B1CBF46BD1D20FC7DCD97C6A5768
Validity
Not Before: Sep 26 18:14:16 2025 GMT
Not After : Sep 26 18:14:16 2028 GMT
Subject: CN=68d6d7fd-8010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4c:4e:9f:4c:c5:20:a2:e1:04:73:65:b3:0b:
18:4b:b8:f9:05:d0:94:27:8b:a4:ec:06:c4:c1:1d:
ec:95:9d:ca:d2:70:c0:88:16:ea:d4:e7:2c:a3:04:
95:4b:5d:4b:db:e0:ca:91:97:23:4a:54:85:44:5d:
55:ab:0d:24:0d:d1:ce:cd:bf:cc:23:66:65:cc:5f:
3d:dd:7e:0d:10:25:9c:75:67:74:d4:b3:a1:d7:b9:
44:b6:45:03:78:55:d0:61:da:30:36:f5:37:e3:f7:
61:ac:f4:43:dd:0a:61:c0:56:e3:1b:7f:53:6c:e4:
18:da:c9:1d:4a:cf:d8:45:c9:b0:8f:ee:14:14:fe:
75:0e:b1:bb:88:34:8b:09:fe:84:fa:c3:6a:12:bc:
7d:88:8b:9c:39:4d:c1:84:48:02:e0:5e:94:79:a6:
cd:08:97:42:de:b1:b9:c6:dd:12:b4:bb:ac:4a:58:
c9:47:73:fb:f4:84:77:c0:a9:ea:85:a0:a4:29:1e:
1a:2d:78:ad:d1:d6:31:fd:6c:89:61:2b:3e:e6:e8:
f8:5f:e1:09:04:86:4a:05:8d:9c:49:c0:6e:b2:8d:
19:44:27:dc:5b:55:16:04:96:f3:8a:d9:c6:0c:ea:
77:b9:74:32:c1:21:7c:4f:89:7b:0d:95:25:1f:f2:
33:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:01:74:08:E2:54:53:9F:CD:28:D3:37:00:0A:9A:BA:17:C6:AC:B4
X509v3 Authority Key Identifier:
keyid:C4:4E:E2:99:AF:58:B1:CB:F4:6B:D1:D2:0F:C7:DC:D9:7C:6A:57:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A413F/EFD79ED2D33911EFB26AD7B3762E951A/xE7ima9Yscv0a9HSD8fc2XxqV2g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xE7ima9Yscv0a9HSD8fc2XxqV2g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A413F/EFD79ED2D33911EFB26AD7B3762E951A/9FC2FD909B0411F0887961DFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.61.180.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:d7:50:31:06:fd:e2:fc:54:da:a3:b1:36:59:96:f8:7a:77:
e5:e0:85:3e:f9:60:8d:8b:78:dd:e2:12:59:5d:79:50:bf:76:
08:b0:e0:08:f7:b0:42:c2:bd:c6:b3:84:66:76:b4:c5:76:bc:
7d:19:d9:12:5c:fa:19:37:d4:04:b7:34:9c:16:f9:b4:6a:b2:
a6:a8:d7:40:94:5d:2d:be:68:91:1f:bf:22:ae:70:cc:36:b8:
7b:e1:21:d5:95:bf:1a:f7:69:ff:1c:9c:f4:4d:e6:ea:3a:aa:
87:fa:c3:8c:92:3d:c2:0f:5e:30:ca:b7:6b:fb:4e:88:64:21:
93:0c:d1:f8:73:99:36:a4:74:3b:9d:2f:0e:37:ce:44:0a:17:
e0:9d:6a:96:7a:a3:31:55:27:36:19:bd:e1:ef:24:a1:e6:f4:
9f:45:58:56:10:4d:07:f0:c3:6c:73:da:85:1e:c3:f3:fb:a8:
5b:b0:e1:1a:e8:dd:05:f0:ff:e2:51:37:ee:2a:87:90:9b:96:
01:63:ce:d8:5b:dc:a5:35:b9:44:1a:0e:f3:bf:34:ba:7b:e0:
c3:b4:3e:43:c6:ef:58:74:27:97:d5:15:d0:03:f8:1a:cc:3a:
d7:eb:08:d7:7a:4b:7b:aa:9f:6e:10:37:17:76:fa:1a:9b:0e:
4f:6e:da:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:52:56 2025 by rpki-client