Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/90E3EB36890911E984EC3C5FF8AEA228/193C239E82C411F090E870BDDAE4EC9C.roa
File: 193C239E82C411F090E870BDDAE4EC9C.roa (raw, json)
Hash identifier: aipTiaVnDtgCS5hSfDq+yj7qAJemAqvJkMKoIB8dgLA=
Subject key identifier: FA:CB:ED:AE:CF:C0:E4:DB:AD:22:12:E1:23:32:DC:29:6A:45:ED:BA
Certificate issuer: /CN=F36A44EAAF/serialNumber=9A57D1A048476C90D98C3CA698705D62D4DD44D3
Certificate serial: 0922
Authority key identifier: 9A:57:D1:A0:48:47:6C:90:D9:8C:3C:A6:98:70:5D:62:D4:DD:44:D3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/mlfRoEhHbJDZjDymmHBdYtTdRNM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/90E3EB36890911E984EC3C5FF8AEA228/193C239E82C411F090E870BDDAE4EC9C.roa
Signing time: Tue 26 Aug 2025 21:32:00 +0000
ROA not before: Tue 26 Aug 2025 21:31:55 +0000
ROA not after: Mon 31 Dec 2035 21:31:55 +0000
asID: 37564
IP address blocks: 196.220.160.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/90E3EB36890911E984EC3C5FF8AEA228/mlfRoEhHbJDZjDymmHBdYtTdRNM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/90E3EB36890911E984EC3C5FF8AEA228/mlfRoEhHbJDZjDymmHBdYtTdRNM.mft
rsync://rpki.afrinic.net/repository/afrinic/mlfRoEhHbJDZjDymmHBdYtTdRNM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 18 Sep 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2338 (0x922)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAF, serialNumber=9A57D1A048476C90D98C3CA698705D62D4DD44D3
Validity
Not Before: Aug 26 21:31:55 2025 GMT
Not After : Dec 31 21:31:55 2035 GMT
Subject: CN=68ae27d0-b391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a7:a7:60:4a:f9:fd:49:0a:d9:3d:b3:c6:27:
2f:44:9e:90:d8:e7:58:65:48:2a:c9:1f:03:48:39:
0f:10:44:41:17:8c:66:02:e0:f4:43:ad:26:d9:89:
40:cd:3f:bb:1e:84:59:44:e3:1b:9a:54:30:bc:7e:
62:8e:8c:62:b0:5d:8c:17:38:29:f9:eb:3f:18:92:
bf:bb:16:e4:ae:9b:3d:3d:9a:fa:ba:59:89:a7:36:
4b:b3:5f:4f:cc:50:b8:01:60:cb:b9:de:49:36:41:
09:15:0a:9f:2f:37:a4:61:ee:b3:eb:65:f7:c4:7f:
7b:32:ff:b0:c0:8f:80:83:9e:94:ed:6f:cf:7d:0d:
02:f2:d5:81:f5:55:83:24:17:03:f6:6f:5f:c0:a7:
a3:4e:fc:84:e8:32:e0:bd:14:42:bd:ee:a5:8c:ca:
15:eb:a2:b2:8a:08:66:0e:04:38:43:ea:7e:96:56:
81:44:6a:6a:af:dd:b7:fd:8e:33:c5:57:c0:e7:e4:
4d:ed:b5:42:cd:df:2f:ef:fd:e1:a4:1d:da:05:6f:
02:3f:ef:ca:7b:20:cb:1a:61:8a:0e:36:0b:28:2d:
a8:24:02:6f:4d:29:a9:2f:3f:31:5a:fc:44:9b:7c:
4d:83:12:e1:d3:7b:40:57:10:a6:78:1b:c5:44:36:
94:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:CB:ED:AE:CF:C0:E4:DB:AD:22:12:E1:23:32:DC:29:6A:45:ED:BA
X509v3 Authority Key Identifier:
keyid:9A:57:D1:A0:48:47:6C:90:D9:8C:3C:A6:98:70:5D:62:D4:DD:44:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/90E3EB36890911E984EC3C5FF8AEA228/mlfRoEhHbJDZjDymmHBdYtTdRNM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/mlfRoEhHbJDZjDymmHBdYtTdRNM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/90E3EB36890911E984EC3C5FF8AEA228/193C239E82C411F090E870BDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.220.160.0/19
Signature Algorithm: sha256WithRSAEncryption
66:0e:a8:2c:ae:06:43:ed:2b:dc:3f:de:3f:f5:7c:d1:de:4c:
c3:c8:bd:67:14:e9:81:54:12:40:3e:53:7b:f7:33:4d:93:fd:
d9:68:8a:6f:3b:ac:05:1f:04:82:c5:5e:d1:db:fb:ee:60:f8:
c3:a2:e2:48:22:43:c3:c5:f8:5c:ea:74:ff:68:72:f3:f7:02:
64:30:db:8f:5f:48:d4:47:c5:d4:5e:e4:30:29:8e:ba:6a:22:
4a:a8:10:a2:aa:7f:05:ff:3a:3d:f7:0f:c1:87:e7:f5:40:15:
f0:26:47:60:70:a4:8a:5e:af:71:7f:97:45:a0:c1:e5:fc:1c:
c7:43:3f:f4:cc:59:a5:db:dc:d0:fa:fb:b5:47:bb:6b:d1:23:
ce:a4:c3:3f:0c:c3:ca:56:ed:9f:21:2a:ab:06:16:11:d1:64:
34:02:db:81:93:f9:64:7c:bb:5f:ff:79:59:ec:e2:6d:a2:28:
f2:98:0e:7e:27:3b:0a:14:2f:7b:0a:e4:4c:c0:a3:3a:db:bd:
ac:ae:20:69:04:86:f9:1b:66:fc:ca:75:3b:e3:da:38:da:b3:
23:b0:c1:61:50:f0:30:b4:e8:4f:db:f1:25:ca:63:8c:6c:89:
35:39:64:6f:0b:f4:77:77:18:4a:5d:83:49:29:32:ef:19:f8:
58:38:63:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 07:51:30 2025 by rpki-client