Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/115DB472B5D111F0A1AC2194DAE4EC9C.roa
File: 115DB472B5D111F0A1AC2194DAE4EC9C.roa (raw, json)
Hash identifier: zLkLQwxPLh5BBWNzGvRyOityfiR56S+KxQLYKxeld8U=
Subject key identifier: 2F:14:89:45:59:98:B1:14:1E:08:43:7F:26:81:BA:57:69:16:4D:F6
Certificate issuer: /CN=F36BC80AAF/serialNumber=8C8F8CE2AD55B9366BEC6EDF492CD9C1498E0664
Certificate serial: 0554
Authority key identifier: 8C:8F:8C:E2:AD:55:B9:36:6B:EC:6E:DF:49:2C:D9:C1:49:8E:06:64
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/115DB472B5D111F0A1AC2194DAE4EC9C.roa
Signing time: Thu 30 Oct 2025 20:43:19 +0000
ROA not before: Thu 30 Oct 2025 20:43:11 +0000
ROA not after: Wed 31 Oct 2035 20:43:11 +0000
asID: 59895
IP address blocks: 41.215.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.mft
rsync://rpki.afrinic.net/repository/afrinic/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 04 Nov 2025 00:06:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1364 (0x554)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BC80AAF, serialNumber=8C8F8CE2AD55B9366BEC6EDF492CD9C1498E0664
Validity
Not Before: Oct 30 20:43:11 2025 GMT
Not After : Oct 31 20:43:11 2035 GMT
Subject: CN=6903cde7-9d23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c5:cd:59:b2:73:c7:08:80:c4:23:03:57:2c:
a7:bf:47:76:93:a9:ca:e4:40:ee:07:32:2a:be:8d:
dd:b3:2e:59:90:bf:9c:a5:c4:38:f6:6e:e5:97:60:
6b:75:f8:bf:8d:18:39:5f:8a:77:e5:0a:42:06:d9:
53:82:99:d5:3a:cc:a3:34:12:a7:a9:84:d9:01:c8:
f0:00:25:da:ef:77:77:1d:51:a0:24:4c:80:b1:45:
f3:52:c1:4f:fa:f2:4c:e8:70:3a:4a:cb:cc:52:1d:
09:f8:d1:df:c3:65:97:0f:d1:15:9c:2f:b6:a7:63:
25:d7:7f:88:ee:c4:b7:62:1b:a0:b6:a2:d4:b2:a7:
a6:02:ab:1d:67:a4:bb:7e:66:36:f6:bc:ed:ed:b4:
f7:b7:b8:76:6d:17:04:30:0b:c6:87:67:6b:56:04:
95:7a:f7:e1:8b:9c:2f:f6:44:94:7f:1a:5c:d4:bd:
bd:49:6e:bd:20:e7:3a:23:63:0d:56:29:a6:39:0c:
ce:be:9b:6d:ea:70:02:40:27:69:2b:6a:46:f8:50:
62:4a:6a:08:3f:5a:9e:96:6d:78:71:19:a0:66:eb:
29:57:b2:12:bf:d6:9f:51:f7:bf:35:ba:db:28:e2:
9e:63:0b:a9:0b:e5:82:7f:23:cf:61:d9:12:49:2e:
69:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:14:89:45:59:98:B1:14:1E:08:43:7F:26:81:BA:57:69:16:4D:F6
X509v3 Authority Key Identifier:
keyid:8C:8F:8C:E2:AD:55:B9:36:6B:EC:6E:DF:49:2C:D9:C1:49:8E:06:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/115DB472B5D111F0A1AC2194DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.215.242.0/24
Signature Algorithm: sha256WithRSAEncryption
14:f9:31:b4:fd:b6:48:c9:8a:9b:a1:63:fb:e3:1a:5e:2c:70:
6e:15:12:fc:be:63:b1:4d:54:b8:9c:2d:a1:9d:a1:1c:3e:40:
4d:4a:79:38:bc:b3:bd:a8:ca:b4:32:7e:64:26:b2:a5:03:5a:
df:90:19:c6:ce:73:e2:f3:c9:c4:3c:49:ee:25:0d:96:82:ae:
e8:a3:b4:12:6e:05:36:bc:26:c5:6a:fc:74:9d:0c:53:34:28:
e1:81:c9:af:ca:10:56:d5:93:97:3e:13:53:5d:af:9e:77:4e:
57:79:63:9e:69:3b:53:f6:9a:a9:ee:97:b9:3c:50:ec:8c:a8:
3a:24:3e:55:1a:80:cb:ea:6f:2d:f8:0d:f2:f5:36:9f:41:49:
02:90:d0:20:8c:24:c0:d8:c0:62:ea:89:f4:0e:a2:73:e0:2b:
98:47:46:9a:c9:48:43:91:eb:9b:2f:46:c6:c2:e4:39:ed:de:
0f:a9:17:1e:39:2e:61:7b:c4:0f:9b:86:46:54:8d:b3:50:a8:
5f:f3:9c:4d:34:ec:f7:71:f0:b1:6d:50:e9:9a:39:27:28:aa:
73:7b:fe:36:ff:5e:f1:a6:17:6f:25:d5:a6:97:f4:12:c2:1f:
5a:23:9f:78:6a:5e:99:db:15:b2:a8:46:e3:f4:7f:e1:a2:92:
9d:df:39:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 09:04:04 2025 by rpki-client