Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4B82B13E810111F0B69665B8DAE4EC9C.roa
File: 4B82B13E810111F0B69665B8DAE4EC9C.roa (raw, json)
Hash identifier: AA89aFnwSx3w5LyDnOB0lJbwmtGAhS27Av/tuCgEkWU=
Subject key identifier: BA:D8:96:2B:EB:E0:09:5A:AD:31:AA:58:49:5E:85:1E:A2:2C:21:28
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1599
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4B82B13E810111F0B69665B8DAE4EC9C.roa
Signing time: Sun 24 Aug 2025 15:45:02 +0000
ROA not before: Sun 24 Aug 2025 15:44:56 +0000
ROA not after: Tue 24 Aug 2027 15:44:56 +0000
asID: 399073
IP address blocks: 196.251.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 09 Sep 2025 00:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5529 (0x1599)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Aug 24 15:44:56 2025 GMT
Not After : Aug 24 15:44:56 2027 GMT
Subject: CN=68ab337d-f138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:94:f1:a2:e8:a7:dd:c6:ef:91:ad:1d:8b:0a:
47:94:85:ae:42:12:41:75:bd:77:d8:65:ab:85:27:
69:7c:36:36:98:33:19:40:84:db:fd:71:b7:9c:70:
c1:a8:ea:6b:d3:c1:92:c4:d0:c8:ef:19:73:3a:a0:
e2:ab:9e:0c:ae:59:69:e6:59:03:e6:5b:1f:a1:8b:
f0:e8:27:d7:d4:ba:0d:92:8e:0f:83:39:3a:ec:c2:
2f:ec:06:6e:f0:a7:f6:d9:fe:bc:00:6f:34:c0:c2:
9c:b5:31:12:90:7e:a9:8f:1a:31:db:08:5e:04:ff:
20:ce:94:b5:ec:3b:db:75:09:1a:df:0c:d5:0c:c6:
b1:cb:36:3f:62:f1:5e:75:d4:c2:b3:57:4c:22:e2:
25:30:26:8e:9d:18:4c:67:35:24:49:b4:ac:b9:14:
73:31:fe:9a:0e:57:98:e3:e5:77:91:37:c6:be:38:
87:4a:f4:f8:af:d4:7c:63:e1:c7:cf:49:8b:5f:50:
71:da:ac:bd:df:1f:83:20:93:f3:91:64:db:a3:5c:
7f:24:a9:a9:2e:fc:ba:88:de:9a:bb:a0:c2:36:b8:
03:f1:3b:dd:89:9b:96:fd:90:5b:3d:a1:e7:47:69:
47:74:a1:d9:ed:fc:c4:e2:c9:5c:34:94:99:14:24:
d7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D8:96:2B:EB:E0:09:5A:AD:31:AA:58:49:5E:85:1E:A2:2C:21:28
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4B82B13E810111F0B69665B8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.251.0/24
Signature Algorithm: sha256WithRSAEncryption
dc:ca:38:a3:b0:c9:d1:a9:ee:b4:94:95:d4:27:13:47:9b:58:
6a:1f:ef:44:b4:60:41:97:cf:d8:84:0c:53:57:99:11:f1:ff:
b9:7a:41:f5:d2:17:76:93:37:2a:b9:d8:a2:b1:62:f5:1a:10:
32:c6:ba:19:55:a0:ab:40:ab:55:61:e7:29:6a:09:ca:42:65:
c0:bd:bb:d9:de:11:1f:61:a6:08:e7:ba:2e:11:9c:d0:b7:ba:
2a:0e:a8:7f:05:46:aa:a2:3c:c1:db:8c:46:a2:34:0b:7b:ce:
ca:2f:d6:ad:64:42:29:df:e2:fb:4d:75:d2:9e:16:52:f2:57:
4e:c9:8b:21:a1:62:25:e7:45:ed:24:40:68:41:d7:c8:cf:b6:
00:b8:f1:2a:b3:38:cb:28:94:73:fb:8c:ff:ac:69:6e:cb:d0:
d4:e1:a8:e7:a6:e2:3e:01:24:1d:08:9d:da:e3:ed:4a:ca:2a:
56:1b:c2:0b:e0:69:a4:c8:f5:5a:5b:e2:58:dc:88:30:4b:2a:
48:f2:24:b9:2a:32:89:a7:fa:d8:46:99:94:29:19:dd:e8:77:
ab:8e:0e:5b:3c:8a:d3:d8:fb:65:31:43:79:ad:14:93:45:e6:
7e:02:c8:85:76:57:63:cb:56:7b:ff:fa:32:f7:22:ca:93:26:
55:8e:16:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:33:14 2025 by rpki-client