Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/5FFD958AB6C011F0A433F7F3DAE4EC9C.roa
File: 5FFD958AB6C011F0A433F7F3DAE4EC9C.roa (raw, json)
Hash identifier: lwAlG/Cp9JYBv5HsI1r0REKGcAMN2vMOXvb01TEL3gk=
Subject key identifier: 6F:3E:DC:3D:AC:EA:11:1A:EF:4A:7C:4B:4D:5A:AB:2A:E2:D4:07:FF
Certificate issuer: /CN=F36BC80AAF/serialNumber=8C8F8CE2AD55B9366BEC6EDF492CD9C1498E0664
Certificate serial: 0565
Authority key identifier: 8C:8F:8C:E2:AD:55:B9:36:6B:EC:6E:DF:49:2C:D9:C1:49:8E:06:64
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/5FFD958AB6C011F0A433F7F3DAE4EC9C.roa
Signing time: Sat 01 Nov 2025 01:16:21 +0000
ROA not before: Sat 01 Nov 2025 01:16:15 +0000
ROA not after: Fri 30 Nov 2035 01:16:15 +0000
asID: 59895
IP address blocks: 41.223.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.mft
rsync://rpki.afrinic.net/repository/afrinic/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 04 Nov 2025 00:06:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1381 (0x565)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BC80AAF, serialNumber=8C8F8CE2AD55B9366BEC6EDF492CD9C1498E0664
Validity
Not Before: Nov 1 01:16:15 2025 GMT
Not After : Nov 30 01:16:15 2035 GMT
Subject: CN=69055f65-5733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e8:9a:99:17:c7:2f:b4:3e:e7:35:03:d5:ef:
45:06:2e:9a:4c:4e:3e:6d:e0:a8:63:76:33:ac:81:
f8:78:fb:5e:99:62:f8:e0:77:8c:45:62:8f:5a:d8:
f3:43:79:f0:14:81:8d:62:b3:d9:f1:ce:a1:de:7a:
8f:4a:31:91:a4:f0:38:28:7e:2c:27:89:c0:24:db:
9c:a7:24:f4:b1:32:83:23:4c:28:e2:ea:83:b1:69:
d0:b1:42:0b:fd:19:f5:97:17:6f:af:04:23:62:43:
e8:1d:71:6c:45:91:e9:6f:6d:10:8f:ab:fc:88:86:
e5:2b:69:3e:d8:48:73:0d:8a:06:e5:28:69:e1:7e:
1d:be:d3:31:2f:6a:79:53:94:ef:37:22:0f:8f:e1:
86:76:ac:5a:87:67:a3:fd:17:96:b5:d3:8a:5d:69:
dd:e8:58:aa:cc:97:fe:af:d9:cb:8a:ae:1b:10:79:
94:c3:f1:35:3d:05:2f:9d:0a:85:41:3f:1b:c3:22:
41:7d:19:69:d4:5a:6d:7c:a2:3e:e2:f1:d5:a4:cf:
99:d3:46:9d:fd:c2:86:34:77:ec:b8:a7:82:82:b2:
cf:79:9a:14:9a:91:10:e2:f2:7a:83:35:ea:d3:da:
42:da:cb:60:25:ca:92:d7:00:f1:d6:59:75:a1:06:
8a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:3E:DC:3D:AC:EA:11:1A:EF:4A:7C:4B:4D:5A:AB:2A:E2:D4:07:FF
X509v3 Authority Key Identifier:
keyid:8C:8F:8C:E2:AD:55:B9:36:6B:EC:6E:DF:49:2C:D9:C1:49:8E:06:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/5FFD958AB6C011F0A433F7F3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.223.54.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:6e:a8:7a:8b:b9:3c:df:1e:78:f8:95:b6:cb:68:11:41:84:
4b:47:42:0b:e5:17:36:5f:73:37:4e:da:d4:4e:ab:b7:1d:ba:
23:b5:2b:3b:20:c8:e0:98:a7:d9:14:de:cc:43:05:8e:cf:fb:
fb:76:4e:fa:e1:77:a3:83:d6:cb:de:23:d0:3d:26:77:eb:1f:
95:28:5e:9e:af:6d:5a:83:2d:73:b0:20:07:3d:6e:ae:75:5c:
d4:80:8a:06:42:8a:4d:ae:99:96:f7:0d:7a:9d:30:9c:43:9c:
ad:82:1f:30:50:4f:3b:5c:ff:7c:d9:73:0b:bc:e7:8e:58:d5:
5d:98:03:00:ca:9a:db:e0:52:21:0c:45:7d:29:f7:f1:30:d2:
f6:63:23:43:60:f4:34:83:93:95:82:45:ac:9f:f6:92:5d:31:
d7:f7:81:39:38:56:ed:85:d4:9e:10:db:b2:40:af:2e:b3:8f:
80:22:57:2f:14:0b:87:3d:35:f4:91:b8:ea:80:aa:9f:8c:83:
aa:56:3e:89:cd:0f:9b:dd:8f:a5:47:0d:71:36:5c:7a:d6:98:
bb:0e:0b:0f:ba:a2:a6:0d:aa:04:27:cc:c1:3a:d8:5a:b9:92:
ea:bc:ed:69:3c:29:0e:af:12:6c:19:74:4e:b7:40:5d:a6:7b:
c8:7f:ea:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 09:04:17 2025 by rpki-client