Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/26FAD3C49F6411F0B33CA3BFDAE4EC9C.roa
File: 26FAD3C49F6411F0B33CA3BFDAE4EC9C.roa (raw, json)
Hash identifier: hNSRelLTbTrq5jFytICLmCpJINckDyawV0X+PkX4+j8=
Subject key identifier: DA:3F:E2:A5:7F:03:18:B5:9D:78:C4:9A:7E:F7:1E:32:63:4F:58:39
Certificate issuer: /CN=F36F0628AF/serialNumber=8605D7599A0402F70EC2F258D6C16BD2E4E8D1FE
Certificate serial: 06A2
Authority key identifier: 86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/26FAD3C49F6411F0B33CA3BFDAE4EC9C.roa
Signing time: Thu 02 Oct 2025 07:48:15 +0000
ROA not before: Thu 02 Oct 2025 07:48:10 +0000
ROA not after: Sat 01 Nov 2025 07:48:10 +0000
asID: 209854
IP address blocks: 196.44.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.mft
rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 02:23:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1698 (0x6a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F0628AF, serialNumber=8605D7599A0402F70EC2F258D6C16BD2E4E8D1FE
Validity
Not Before: Oct 2 07:48:10 2025 GMT
Not After : Nov 1 07:48:10 2025 GMT
Subject: CN=68de2e3f-4fe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b8:e6:9d:4e:a8:f8:b4:c0:f3:e4:9e:53:b0:
ac:53:88:f7:bf:64:c9:4f:ec:6a:c1:8d:37:47:94:
25:3c:ea:5e:33:b1:7e:52:11:4e:2a:35:b1:81:71:
5b:1a:e2:3c:71:9c:a0:ac:7e:35:8b:42:39:5b:8a:
23:be:07:c3:42:07:11:c1:4e:df:9e:a6:2f:88:c2:
35:65:39:39:5b:b7:8a:2d:7b:72:3e:11:f8:d7:6c:
30:c0:99:9b:d7:ae:1f:5a:db:e3:5b:d7:ab:72:cb:
98:ef:c6:55:45:51:86:fb:9c:96:e8:ba:68:53:93:
ab:8c:96:ce:9b:cf:2b:94:63:2a:db:b0:8e:df:06:
bf:89:08:fb:6c:a8:7d:39:3c:13:a0:00:51:ae:dc:
a0:1b:f2:1b:ec:c5:11:4c:86:a8:91:9d:40:61:68:
e6:06:cc:24:26:24:79:c6:73:5d:e8:9d:7e:2a:c2:
f1:1e:bd:2c:8e:db:e3:1f:b2:02:aa:93:97:5a:39:
4f:40:0d:3f:26:e2:a0:8b:be:b2:03:87:20:0e:94:
77:f3:43:e4:c6:33:76:c2:c8:c8:e7:fe:43:34:bb:
8c:b0:fa:68:a5:28:2b:ad:40:d5:3f:51:58:93:1d:
9b:71:f0:b6:40:f2:e6:1d:8f:fd:58:e6:00:df:6a:
bc:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:3F:E2:A5:7F:03:18:B5:9D:78:C4:9A:7E:F7:1E:32:63:4F:58:39
X509v3 Authority Key Identifier:
keyid:86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/26FAD3C49F6411F0B33CA3BFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.44.118.0/24
Signature Algorithm: sha256WithRSAEncryption
64:1e:a3:43:86:23:37:91:a2:46:0a:ae:09:45:99:49:ed:77:
4a:7e:af:41:10:3d:59:a2:31:0f:4b:ed:70:79:d3:83:67:36:
d0:ab:d6:7a:cc:52:d5:9d:80:9f:16:44:2f:7d:7e:1d:09:e4:
6b:bd:95:d6:3f:9f:6d:a6:b4:73:08:b9:a5:03:34:6a:05:e3:
2c:bc:26:91:ad:8a:73:26:7b:cb:10:6f:ee:76:d9:03:13:e4:
ec:62:28:1c:2e:35:ad:35:15:6b:a1:ec:70:30:6a:b6:25:f3:
eb:85:21:f9:d5:d3:c4:bf:c9:7a:a1:c1:ad:8e:86:c7:e2:4c:
51:5d:60:73:ed:77:1f:17:fa:f9:a4:09:8f:4f:7d:42:ee:23:
f9:47:99:54:58:c2:4c:25:cf:67:db:98:03:d2:fb:88:e7:03:
a9:1b:bb:4e:b9:9b:ff:e6:b3:da:16:ae:44:84:1c:d1:80:e2:
d7:69:c8:cd:af:f9:15:d0:f1:3a:6b:40:95:be:67:6a:9e:89:
2e:7a:e7:f1:bb:fe:d4:ce:00:4e:c9:d1:45:e0:bf:7a:b8:c2:
8c:de:2d:e6:be:45:97:58:cd:ea:74:9c:0e:18:10:22:07:76:
5e:62:da:6c:b4:83:58:c2:13:15:01:eb:a4:74:91:d8:33:d1:
44:b0:3b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:42:30 2025 by rpki-client