Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/5080F86A79C911F0A4D8A3A8DAE4EC9C.roa
File: 5080F86A79C911F0A4D8A3A8DAE4EC9C.roa (raw, json)
Hash identifier: oYW4sgY5AveI0m/hszR/UAybv2k2KBPwfZQyUyew8kc=
Subject key identifier: 7D:7F:78:53:58:A1:A4:50:4B:52:74:27:85:32:65:DA:68:91:01:C3
Certificate issuer: /CN=F36F2B14AF/serialNumber=90E899936DF9E68B9A7505BFBE63B8AFA0A77AE9
Certificate serial: 0761
Authority key identifier: 90:E8:99:93:6D:F9:E6:8B:9A:75:05:BF:BE:63:B8:AF:A0:A7:7A:E9
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/kOiZk2355ouadQW_vmO4r6Cneuk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/5080F86A79C911F0A4D8A3A8DAE4EC9C.roa
Signing time: Fri 15 Aug 2025 11:16:40 +0000
ROA not before: Fri 15 Aug 2025 11:16:33 +0000
ROA not after: Fri 15 Aug 2031 11:16:33 +0000
asID: 37239
IP address blocks: 154.72.56.0/21 maxlen: 24
154.72.56.0/24 maxlen: 24
154.72.57.0/24 maxlen: 24
154.72.58.0/24 maxlen: 24
154.72.59.0/24 maxlen: 24
154.72.60.0/24 maxlen: 24
154.72.61.0/24 maxlen: 24
154.72.62.0/24 maxlen: 24
154.72.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/kOiZk2355ouadQW_vmO4r6Cneuk.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/kOiZk2355ouadQW_vmO4r6Cneuk.mft
rsync://rpki.afrinic.net/repository/afrinic/kOiZk2355ouadQW_vmO4r6Cneuk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1889 (0x761)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F2B14AF, serialNumber=90E899936DF9E68B9A7505BFBE63B8AFA0A77AE9
Validity
Not Before: Aug 15 11:16:33 2025 GMT
Not After : Aug 15 11:16:33 2031 GMT
Subject: CN=689f1718-537f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:6f:25:77:00:b9:85:7c:eb:6e:4a:72:30:41:
9f:09:be:14:db:62:18:04:8a:d9:7e:e0:ae:43:ec:
c5:de:0a:c4:72:d0:09:67:a7:71:e4:58:ed:03:d9:
71:e9:14:9a:46:4b:5c:05:a8:4f:e3:aa:dd:ac:97:
ce:ba:2c:a1:86:8b:e3:00:24:9e:a0:69:e8:b3:2b:
09:98:e4:62:38:71:34:b6:e4:b5:8b:21:2e:c5:6a:
18:25:6a:60:21:fe:80:74:9f:ef:17:21:99:ac:d3:
25:85:29:21:3f:a3:6c:67:b0:4f:56:34:e1:c2:d8:
27:80:70:b8:b7:26:99:19:de:f7:fd:7f:77:2a:0b:
4a:f0:60:72:b3:ab:bc:71:f8:47:9d:bf:a7:3f:8a:
0c:13:da:9d:e3:0b:df:62:87:5e:1e:1e:d3:cf:fd:
6d:ef:91:a2:22:ce:aa:79:22:67:9e:9c:ae:fd:dd:
c0:99:68:aa:1c:fc:0a:9e:8b:24:b2:0d:bf:74:cc:
77:e8:4d:3a:cb:27:28:9c:47:e7:e4:89:7a:80:e8:
4b:21:a7:01:5f:e2:92:de:6e:65:ad:d2:f9:87:da:
58:b0:49:00:8d:62:71:dc:79:7b:7a:7e:49:d0:20:
c5:44:b8:d4:30:7a:3f:17:d5:30:9e:97:0f:c5:4e:
90:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:7F:78:53:58:A1:A4:50:4B:52:74:27:85:32:65:DA:68:91:01:C3
X509v3 Authority Key Identifier:
keyid:90:E8:99:93:6D:F9:E6:8B:9A:75:05:BF:BE:63:B8:AF:A0:A7:7A:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/kOiZk2355ouadQW_vmO4r6Cneuk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kOiZk2355ouadQW_vmO4r6Cneuk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/5080F86A79C911F0A4D8A3A8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.72.56.0/21
Signature Algorithm: sha256WithRSAEncryption
19:cc:cd:38:0d:b7:d9:f4:25:56:ee:82:72:18:b6:13:8e:37:
54:01:aa:7c:79:f2:99:90:e6:57:14:d5:f7:c4:a8:f7:47:03:
30:61:59:c6:00:49:5a:1b:fa:62:00:18:3d:3a:96:72:23:71:
83:54:f9:39:7c:81:e4:13:5f:e1:31:d1:f5:6e:58:59:a2:ae:
ad:b3:0c:30:15:b4:5b:a8:1e:a0:f2:c5:81:6c:87:e1:ab:cb:
46:02:d3:5e:4c:0f:85:05:ca:c7:be:e6:48:27:bf:b7:05:2e:
b4:46:aa:7b:2f:b1:a0:30:2d:a2:4d:1c:c4:10:89:ee:3c:bb:
94:d0:d8:84:05:73:21:b3:2c:ea:cb:d9:7f:62:73:e6:fa:7b:
7e:97:a0:a7:ef:dd:a9:ea:38:a0:14:04:8d:d8:01:33:07:36:
43:27:49:c6:cb:2c:58:96:be:03:8b:2d:56:68:16:45:a3:0a:
ad:cc:b9:05:54:19:9e:6a:4f:db:de:3f:89:eb:76:80:eb:b1:
f9:b4:b1:91:62:fd:33:6e:52:73:1c:15:21:3c:79:19:f3:05:
28:f5:6d:23:7c:eb:7a:2f:3a:b2:1b:70:19:c6:82:af:46:dd:
ea:41:a2:16:82:60:11:53:39:d5:00:aa:64:d0:ee:f8:78:19:
77:04:51:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:20:06 2025 by rpki-client