Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/43255EBEB5D211F09330919CDAE4EC9C.roa
File: 43255EBEB5D211F09330919CDAE4EC9C.roa (raw, json)
Hash identifier: WP/J10zandfKZR2eaHtY6wCS0JXLuclaCdl/D//TPkU=
Subject key identifier: 7D:DA:EB:08:53:10:76:74:DF:14:08:A0:2F:3F:15:F2:FB:44:B7:AA
Certificate issuer: /CN=F36BC80AAF/serialNumber=8C8F8CE2AD55B9366BEC6EDF492CD9C1498E0664
Certificate serial: 055B
Authority key identifier: 8C:8F:8C:E2:AD:55:B9:36:6B:EC:6E:DF:49:2C:D9:C1:49:8E:06:64
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/43255EBEB5D211F09330919CDAE4EC9C.roa
Signing time: Thu 30 Oct 2025 20:51:53 +0000
ROA not before: Thu 30 Oct 2025 20:51:48 +0000
ROA not after: Wed 31 Oct 2035 20:51:48 +0000
asID: 59895
IP address blocks: 41.223.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.mft
rsync://rpki.afrinic.net/repository/afrinic/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 04 Nov 2025 00:06:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1371 (0x55b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BC80AAF, serialNumber=8C8F8CE2AD55B9366BEC6EDF492CD9C1498E0664
Validity
Not Before: Oct 30 20:51:48 2025 GMT
Not After : Oct 31 20:51:48 2035 GMT
Subject: CN=6903cfe9-9c9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:02:2a:e3:a0:0c:a2:51:15:a0:0d:f6:f3:3e:
a0:2f:d6:13:80:bc:cb:69:09:d3:b7:66:74:a7:17:
69:ee:7e:ba:47:8d:f6:d7:86:89:1c:d2:1b:71:8a:
03:50:2f:05:6d:fd:35:a2:c2:fd:bf:67:d1:9d:58:
9f:b9:4d:d2:a9:4e:47:ab:94:1e:bf:5b:21:ac:ab:
dd:af:fe:19:a9:d1:2a:32:0e:d3:4d:06:80:95:3b:
9c:e3:88:c6:db:6d:b2:46:28:2e:c5:e4:e8:c7:bf:
6e:79:f5:c1:4b:f4:0e:61:b3:f6:4f:f9:18:4c:d8:
4b:7c:74:59:f4:ef:ef:61:c0:6f:97:63:5c:e0:ee:
4e:d3:c4:78:d9:92:7b:ba:cc:98:23:8c:ab:6f:a7:
b7:28:5b:12:6b:6b:62:55:86:51:e6:de:b5:c7:67:
a2:f0:f9:d1:c6:4d:1a:1c:30:d5:f3:3f:88:fe:f0:
bb:b8:bc:f7:25:57:65:62:58:4f:0e:9e:6b:95:fa:
9f:59:f8:67:7d:2d:82:1f:fc:0e:c5:8f:c5:a9:5e:
ee:78:6e:9c:e8:3f:e2:6f:fd:19:39:49:5e:cd:0b:
45:45:ba:26:49:f3:f5:2f:b8:f4:db:b6:51:67:2e:
96:3b:9c:8a:a7:7f:65:4b:00:48:50:9f:1a:1a:e4:
75:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:DA:EB:08:53:10:76:74:DF:14:08:A0:2F:3F:15:F2:FB:44:B7:AA
X509v3 Authority Key Identifier:
keyid:8C:8F:8C:E2:AD:55:B9:36:6B:EC:6E:DF:49:2C:D9:C1:49:8E:06:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/43255EBEB5D211F09330919CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.223.55.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:4f:56:b4:a8:da:29:ea:b3:a1:1b:d7:1a:d1:d6:df:be:02:
34:ef:2e:70:76:12:25:f8:cb:a2:77:6e:ca:bb:c2:3d:eb:25:
7f:2b:eb:b0:a0:9b:41:6c:89:7a:77:03:86:2f:02:e8:a3:98:
eb:83:02:76:65:ce:7a:a3:1d:00:90:a0:33:04:b7:2e:66:7c:
32:69:b0:8a:58:f2:41:7e:d4:4e:42:0f:73:0f:c1:cc:dd:01:
59:7e:79:c2:4e:08:f7:37:74:b8:90:2d:ee:b0:ea:08:d9:99:
0c:45:9a:af:7d:3a:a5:dd:69:ef:67:7b:2b:d4:9b:ed:b6:69:
e1:22:bc:b8:b6:79:be:ca:01:90:5f:45:30:a2:46:ce:22:71:
20:b8:e6:2e:94:87:92:b3:6e:7a:1d:d0:76:d0:9a:49:83:e2:
bf:12:69:8b:f8:ef:97:8d:d0:a7:19:40:25:3d:13:19:27:43:
17:f5:7a:9a:a7:e9:2f:d8:a5:dc:0a:2b:f2:57:40:46:09:a4:
6e:1e:7f:47:c2:3a:10:d6:e3:67:ac:31:d8:c5:16:01:23:32:
60:93:69:ac:7a:be:d0:d6:7c:51:96:45:2b:22:e5:5c:d6:48:
3b:cf:67:00:58:61:0f:22:9a:32:0c:d1:87:18:4d:31:bb:29:
13:94:f2:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 09:04:01 2025 by rpki-client