Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36505B2/541804E4347111EF9A875180762E951A/C7D794A2833111F0BA372F98DAE4EC9C.roa
File: C7D794A2833111F0BA372F98DAE4EC9C.roa (raw, json)
Hash identifier: 10t3J3G0W//+SuAl6SEkRsS4xMprNtVls3DmnWSADos=
Subject key identifier: 17:15:69:EA:24:A5:A8:CF:F1:CF:A6:EB:FD:49:00:B8:50:01:3C:3B
Certificate issuer: /CN=F36505B2AF/serialNumber=16296889BFF031BF7FDE7367E2DEE93CB0080283
Certificate serial: 01C4
Authority key identifier: 16:29:68:89:BF:F0:31:BF:7F:DE:73:67:E2:DE:E9:3C:B0:08:02:83
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Filoib_wMb9_3nNn4t7pPLAIAoM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36505B2/541804E4347111EF9A875180762E951A/C7D794A2833111F0BA372F98DAE4EC9C.roa
Signing time: Wed 27 Aug 2025 10:37:08 +0000
ROA not before: Wed 27 Aug 2025 10:37:03 +0000
ROA not after: Fri 31 Aug 2035 10:37:03 +0000
asID: 36877
IP address blocks: 41.85.204.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36505B2/541804E4347111EF9A875180762E951A/Filoib_wMb9_3nNn4t7pPLAIAoM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36505B2/541804E4347111EF9A875180762E951A/Filoib_wMb9_3nNn4t7pPLAIAoM.mft
rsync://rpki.afrinic.net/repository/afrinic/Filoib_wMb9_3nNn4t7pPLAIAoM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 18 Sep 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 452 (0x1c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36505B2AF, serialNumber=16296889BFF031BF7FDE7367E2DEE93CB0080283
Validity
Not Before: Aug 27 10:37:03 2025 GMT
Not After : Aug 31 10:37:03 2035 GMT
Subject: CN=68aedfd4-fb3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:7b:58:8f:bf:98:9e:9a:05:43:30:f8:fe:25:
80:17:fb:57:1d:c2:4a:d9:90:1c:cd:02:d8:7b:cb:
b9:a9:67:b6:83:3d:a0:d9:d5:ba:e9:2b:61:56:95:
55:b4:32:f1:aa:c2:dc:f5:22:b9:91:f0:a2:74:1e:
1d:e2:ba:03:e1:e3:f0:7e:d2:2c:00:95:83:19:cb:
33:d4:34:88:12:fb:ce:68:7b:26:38:66:9b:03:08:
0c:00:32:2a:15:5c:bc:44:6b:8d:4f:e4:93:3b:ce:
3d:27:dd:c8:84:fa:47:a4:7d:63:a2:f3:b7:41:1e:
4d:1a:19:c9:87:de:56:7e:63:2f:ca:26:a2:62:cb:
26:c7:92:85:2f:67:de:03:46:0a:65:15:f1:3f:86:
a6:89:c2:64:df:14:65:67:1b:0a:74:fe:73:f2:dc:
3e:e6:ad:8e:1f:6e:0b:85:5e:59:6b:85:57:8b:07:
b1:a3:b7:6e:8a:7e:f3:9a:a1:cf:08:7a:f3:bb:2e:
30:dd:64:65:0b:1d:db:23:f9:ec:cb:01:a4:d7:a4:
52:b6:9d:d6:83:bf:b6:dc:9d:1a:64:51:34:74:35:
80:03:32:6c:20:80:de:14:aa:49:73:83:29:2e:2d:
92:25:57:30:11:ea:04:53:f7:da:41:74:1d:1c:fd:
c7:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:15:69:EA:24:A5:A8:CF:F1:CF:A6:EB:FD:49:00:B8:50:01:3C:3B
X509v3 Authority Key Identifier:
keyid:16:29:68:89:BF:F0:31:BF:7F:DE:73:67:E2:DE:E9:3C:B0:08:02:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36505B2/541804E4347111EF9A875180762E951A/Filoib_wMb9_3nNn4t7pPLAIAoM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Filoib_wMb9_3nNn4t7pPLAIAoM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36505B2/541804E4347111EF9A875180762E951A/C7D794A2833111F0BA372F98DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.85.204.0/22
Signature Algorithm: sha256WithRSAEncryption
27:65:88:47:c1:ba:95:4b:ce:7c:e2:43:91:7a:bc:6b:0c:e2:
28:cc:2c:45:a2:07:55:ee:18:86:25:70:77:d9:a9:87:0d:fd:
19:4f:d6:d1:ec:58:78:37:fb:45:11:7b:1c:ba:dd:03:43:3b:
4d:9b:a8:36:16:d5:3b:51:4c:68:8b:8b:9e:20:74:2b:1e:5e:
cd:65:a4:3b:06:cb:aa:77:34:15:f0:6a:0d:8f:ea:5e:fd:45:
05:83:15:27:ac:72:d5:99:1d:22:fc:6b:8d:6d:62:80:64:e8:
83:6f:74:0c:f1:3e:bd:a1:5a:3f:0a:44:be:78:e9:a5:d4:1a:
80:e5:92:b8:11:db:8e:31:cb:83:81:fe:8c:b4:54:05:e5:72:
5f:fb:b6:6f:dd:8e:d8:2f:b3:2d:55:c0:33:24:d4:d4:7a:75:
b7:2b:04:2b:ad:f5:1e:a0:95:3b:14:4c:e1:03:9f:e5:af:e5:
3e:54:3e:13:7e:2e:5b:2a:c4:16:81:0b:d6:c0:b8:cc:26:86:
ac:74:3c:c9:d4:0d:e1:88:15:60:3d:29:7b:a2:0d:2c:8c:2c:
04:89:a2:35:49:8a:42:a1:de:af:5f:3f:ad:4f:19:b3:bd:df:
5a:80:91:05:f2:8e:3a:22:0b:d1:fb:bd:6f:93:c4:09:09:5b:
a1:4a:43:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 18:40:58 2025 by rpki-client