Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/BD0225AE79C911F0BDC899ACDAE4EC9C.roa
File: BD0225AE79C911F0BDC899ACDAE4EC9C.roa (raw, json)
Hash identifier: SVVTzD1gHTnywXiXSXC6Zr4i32IU5rkq1PCzWNpxj6I=
Subject key identifier: B4:D8:0D:C5:65:6F:7F:51:76:9C:76:99:69:F4:74:17:97:60:69:36
Certificate issuer: /CN=F36F2B14AF/serialNumber=90E899936DF9E68B9A7505BFBE63B8AFA0A77AE9
Certificate serial: 0764
Authority key identifier: 90:E8:99:93:6D:F9:E6:8B:9A:75:05:BF:BE:63:B8:AF:A0:A7:7A:E9
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/kOiZk2355ouadQW_vmO4r6Cneuk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/BD0225AE79C911F0BDC899ACDAE4EC9C.roa
Signing time: Fri 15 Aug 2025 11:19:42 +0000
ROA not before: Fri 15 Aug 2025 11:19:37 +0000
ROA not after: Fri 15 Aug 2031 11:19:37 +0000
asID: 37239
IP address blocks: 196.46.184.0/22 maxlen: 24
196.46.184.0/24 maxlen: 24
196.46.185.0/24 maxlen: 24
196.46.186.0/24 maxlen: 24
196.46.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/kOiZk2355ouadQW_vmO4r6Cneuk.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/kOiZk2355ouadQW_vmO4r6Cneuk.mft
rsync://rpki.afrinic.net/repository/afrinic/kOiZk2355ouadQW_vmO4r6Cneuk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1892 (0x764)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F2B14AF, serialNumber=90E899936DF9E68B9A7505BFBE63B8AFA0A77AE9
Validity
Not Before: Aug 15 11:19:37 2025 GMT
Not After : Aug 15 11:19:37 2031 GMT
Subject: CN=689f17ce-c6dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2f:e4:76:78:2f:72:88:dd:f1:f4:61:11:95:
1a:ee:34:74:dd:ec:d7:de:fa:49:6a:fb:b8:ca:59:
12:b7:1a:02:c7:80:63:03:a8:07:96:9e:6e:fb:3b:
2f:ea:b9:36:61:33:db:9b:85:69:5a:a8:d3:4c:0e:
f5:67:6e:56:a7:44:61:86:77:d3:a3:e6:35:78:70:
95:e6:f5:47:a6:9f:9f:17:e9:5b:6d:f0:90:ff:ac:
fe:2c:75:9f:ed:42:9e:94:ae:da:09:da:88:93:d2:
a9:5c:b9:d4:0d:d7:1a:0c:85:4e:68:48:f6:a4:87:
c6:dc:d8:9f:83:ed:f4:84:f3:97:9a:dd:13:cf:a0:
84:30:76:4f:66:bd:f9:7c:87:c4:58:80:cf:3c:d7:
bf:d9:a5:ec:15:4b:1d:cd:d1:82:5d:ce:55:46:10:
3f:c4:6d:33:d1:e1:47:16:16:f8:ee:fe:04:f8:53:
44:cb:36:2b:62:fb:6e:74:9a:3e:c9:99:43:b5:c5:
ce:44:94:1e:49:f5:5e:4e:79:d2:df:0b:68:67:86:
a7:85:77:33:ed:73:65:1e:9c:0b:c6:34:3d:9f:45:
9f:b6:77:ed:4c:ac:15:ec:cc:e4:98:be:d4:df:a3:
d7:2a:13:90:5e:77:b3:18:c0:fd:65:4a:23:65:3b:
bf:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:D8:0D:C5:65:6F:7F:51:76:9C:76:99:69:F4:74:17:97:60:69:36
X509v3 Authority Key Identifier:
keyid:90:E8:99:93:6D:F9:E6:8B:9A:75:05:BF:BE:63:B8:AF:A0:A7:7A:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/kOiZk2355ouadQW_vmO4r6Cneuk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kOiZk2355ouadQW_vmO4r6Cneuk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/BD0225AE79C911F0BDC899ACDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.46.184.0/22
Signature Algorithm: sha256WithRSAEncryption
40:51:2e:19:1f:1a:2e:6f:2a:7b:ec:0b:41:83:d0:26:e1:58:
7c:c7:36:19:37:90:be:21:cd:86:a9:7b:13:4a:f0:74:30:bd:
23:b7:c6:e8:51:93:c6:1d:1e:41:8a:1c:5f:40:05:d8:16:47:
6f:3b:a1:7d:da:13:dc:cf:c2:c3:80:b5:df:7e:91:a7:d3:fe:
77:22:78:54:16:e8:30:7d:93:ba:bd:99:11:e9:cf:d7:88:4b:
1d:64:5a:73:99:b6:5f:ba:91:d4:5d:d2:44:ee:78:7c:b8:4c:
53:48:12:e2:db:ff:ea:9d:4f:32:96:bc:28:7e:f5:60:5b:d1:
78:ce:11:1b:8c:b0:34:4e:66:ac:1d:a7:0a:c1:90:f4:03:ae:
9f:01:f8:0b:26:33:78:61:26:02:90:83:5a:ab:a6:70:bf:e6:
c5:f4:38:fa:6d:88:ec:47:a0:29:0c:27:4d:8f:66:3b:41:18:
fc:a0:7e:18:ef:2a:36:e3:7d:53:b4:57:ee:7a:88:a9:88:0d:
9d:f8:b9:f0:a2:86:e6:26:b5:ce:80:db:d1:2f:36:8a:b5:d0:
30:66:34:0a:13:3c:c8:90:8d:0d:4d:ed:bd:08:6b:44:bc:2d:
37:2e:74:59:86:fe:57:7e:48:c2:e8:60:ae:fa:f1:86:05:96:
5f:df:38:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:19:56 2025 by rpki-client