Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/90E3EB36890911E984EC3C5FF8AEA228/E600EA8C82C311F0AA9237BDDAE4EC9C.roa
File: E600EA8C82C311F0AA9237BDDAE4EC9C.roa (raw, json)
Hash identifier: fG/5xWCUdEM58O5TjC0L4Y26zDzPnoakqNic7vSKxmM=
Subject key identifier: 97:EB:62:06:9E:6C:EF:47:BF:13:26:B9:51:64:B1:A6:E8:BF:61:33
Certificate issuer: /CN=F36A44EAAF/serialNumber=9A57D1A048476C90D98C3CA698705D62D4DD44D3
Certificate serial: 0920
Authority key identifier: 9A:57:D1:A0:48:47:6C:90:D9:8C:3C:A6:98:70:5D:62:D4:DD:44:D3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/mlfRoEhHbJDZjDymmHBdYtTdRNM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/90E3EB36890911E984EC3C5FF8AEA228/E600EA8C82C311F0AA9237BDDAE4EC9C.roa
Signing time: Tue 26 Aug 2025 21:30:34 +0000
ROA not before: Tue 26 Aug 2025 21:30:29 +0000
ROA not after: Mon 31 Dec 2035 21:30:29 +0000
asID: 37564
IP address blocks: 154.66.152.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/90E3EB36890911E984EC3C5FF8AEA228/mlfRoEhHbJDZjDymmHBdYtTdRNM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/90E3EB36890911E984EC3C5FF8AEA228/mlfRoEhHbJDZjDymmHBdYtTdRNM.mft
rsync://rpki.afrinic.net/repository/afrinic/mlfRoEhHbJDZjDymmHBdYtTdRNM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 18 Sep 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2336 (0x920)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAF, serialNumber=9A57D1A048476C90D98C3CA698705D62D4DD44D3
Validity
Not Before: Aug 26 21:30:29 2025 GMT
Not After : Dec 31 21:30:29 2035 GMT
Subject: CN=68ae277a-127e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0f:40:43:84:87:95:11:4a:c5:24:d5:d9:fc:
0a:34:24:c9:11:c6:96:8d:f4:0a:81:f7:0f:33:7b:
e6:da:9a:f8:12:bd:0a:2e:d6:1a:a8:04:a0:7e:d5:
5a:3f:ed:a1:80:ba:76:01:1a:a5:00:cb:21:05:b3:
54:ec:58:8b:23:3d:65:da:5e:4f:67:a6:30:a9:52:
c4:e2:f3:aa:44:96:1c:96:59:8f:a9:f8:93:46:42:
64:3b:9c:f9:dc:da:f5:e2:49:6d:46:26:31:0f:40:
6f:66:ba:16:76:5c:c5:82:8c:32:4b:82:c8:96:93:
c9:3c:82:23:87:8e:a6:01:4f:90:38:67:f1:01:7f:
c7:72:96:cb:ad:b5:7f:9b:99:2d:f1:a1:76:ab:bd:
51:4c:f7:62:f5:79:c6:ec:4e:35:0a:37:0f:d4:ae:
22:fb:0d:bb:bc:ed:1b:21:c1:1c:0f:9b:66:34:9d:
44:de:19:d1:eb:e6:ad:f0:34:37:2f:b6:66:14:7a:
cf:0f:bf:3f:40:27:75:9a:df:c3:20:0d:df:10:2f:
d4:80:43:fe:97:fb:d8:c1:21:f2:c7:d7:85:f7:ec:
b8:c3:66:5d:92:7b:42:5a:17:31:67:3c:a4:69:1a:
9e:ec:7d:c2:3b:a0:9a:1d:19:0a:6e:00:aa:21:0f:
fa:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:EB:62:06:9E:6C:EF:47:BF:13:26:B9:51:64:B1:A6:E8:BF:61:33
X509v3 Authority Key Identifier:
keyid:9A:57:D1:A0:48:47:6C:90:D9:8C:3C:A6:98:70:5D:62:D4:DD:44:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/90E3EB36890911E984EC3C5FF8AEA228/mlfRoEhHbJDZjDymmHBdYtTdRNM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/mlfRoEhHbJDZjDymmHBdYtTdRNM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/90E3EB36890911E984EC3C5FF8AEA228/E600EA8C82C311F0AA9237BDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.66.152.0/21
Signature Algorithm: sha256WithRSAEncryption
3d:8a:01:f3:f7:5c:c0:7b:8b:3b:83:a6:11:75:b1:a9:da:04:
ce:ab:1f:07:7d:9c:7f:4d:2d:98:07:91:a8:77:c4:5a:39:df:
37:40:12:00:8a:d5:e1:28:ff:e4:ac:bf:e1:6e:b4:32:27:7b:
15:0e:f2:c9:fd:40:4b:cf:d8:92:93:41:a4:47:cf:e2:de:93:
ff:49:90:a4:52:2a:74:93:25:78:91:18:6b:ca:ed:49:1c:c4:
79:77:5e:3d:56:c9:95:87:41:79:fc:7f:16:8e:27:66:80:90:
98:bb:58:ff:10:1a:65:be:ab:85:cf:ab:22:fe:6e:1f:77:94:
c1:53:79:0d:3c:c5:6a:a1:7a:d3:24:2f:c7:07:e0:02:e5:47:
76:53:f0:7b:c6:6e:d4:2a:2f:89:79:1c:83:a2:de:4a:7f:43:
f6:49:74:21:23:f2:d7:7c:5c:1a:b8:18:5f:5b:22:68:ab:51:
2a:21:a9:d6:90:db:0c:7d:37:8c:15:7c:7c:d1:10:4e:a6:52:
08:29:fc:fc:d2:f6:cb:2e:02:be:36:ed:7e:61:de:75:9f:12:
e9:df:52:d2:00:65:94:9d:e9:e4:cb:8f:18:5d:c1:d9:74:ef:
88:a6:89:20:f2:5d:ac:46:09:43:05:90:c6:c6:de:cb:e2:09:
27:dd:fa:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 07:49:35 2025 by rpki-client