Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D5F5A/2173E83ADAA611ED8227D4C42F6D8C1D/C65FE1F692FE11F0BC8418F5DAE4EC9C.roa
File: C65FE1F692FE11F0BC8418F5DAE4EC9C.roa (raw, json)
Hash identifier: 36hjpJHDjwEXOIEOe0bkLRIciGsDO/S0H+3g2hxaodo=
Subject key identifier: 30:4C:2A:F9:79:53:2B:8F:B5:3B:39:C8:A5:53:25:09:B5:9F:6B:F4
Certificate issuer: /CN=F36D5F5AAF/serialNumber=28293436D4D6DA3A93A60ECA3FBEC77D8DC38F61
Certificate serial: 039E
Authority key identifier: 28:29:34:36:D4:D6:DA:3A:93:A6:0E:CA:3F:BE:C7:7D:8D:C3:8F:61
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/KCk0NtTW2jqTpg7KP77HfY3Dj2E.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D5F5A/2173E83ADAA611ED8227D4C42F6D8C1D/C65FE1F692FE11F0BC8418F5DAE4EC9C.roa
Signing time: Tue 16 Sep 2025 13:12:20 +0000
ROA not before: Tue 16 Sep 2025 13:12:15 +0000
ROA not after: Wed 16 Sep 2026 13:12:15 +0000
asID: 37276
IP address blocks: 41.75.96.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D5F5A/2173E83ADAA611ED8227D4C42F6D8C1D/KCk0NtTW2jqTpg7KP77HfY3Dj2E.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D5F5A/2173E83ADAA611ED8227D4C42F6D8C1D/KCk0NtTW2jqTpg7KP77HfY3Dj2E.mft
rsync://rpki.afrinic.net/repository/afrinic/KCk0NtTW2jqTpg7KP77HfY3Dj2E.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 18 Sep 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 926 (0x39e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D5F5AAF, serialNumber=28293436D4D6DA3A93A60ECA3FBEC77D8DC38F61
Validity
Not Before: Sep 16 13:12:15 2025 GMT
Not After : Sep 16 13:12:15 2026 GMT
Subject: CN=68c96234-786f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6e:e6:ed:60:1d:80:bf:4e:f8:7b:13:54:05:
e0:39:e3:85:e5:d8:1f:0f:6a:96:11:97:cb:9d:6f:
5c:39:2d:dc:6d:69:72:8f:0c:a2:a9:83:73:80:de:
a1:fa:77:35:30:45:76:9d:3a:d0:bb:80:68:5c:99:
23:9b:c7:11:4a:1c:bd:62:8b:11:f4:8a:19:c8:62:
94:24:5f:65:7d:8d:d7:92:f0:57:e0:f7:76:00:a7:
78:22:eb:7a:78:d5:3a:0c:77:76:94:bb:90:dd:c6:
c9:9f:03:75:17:d7:e7:f2:59:fb:98:3c:d9:7c:bb:
b1:9b:ba:3f:46:80:a5:6b:80:1c:23:97:1c:18:bc:
14:15:b7:e0:06:21:ee:b2:1f:3b:48:62:89:9d:3d:
8b:a6:cf:af:4f:4f:9b:1d:d8:a0:60:ef:7f:d8:d0:
ad:2f:47:64:2a:87:7e:f4:d4:21:a5:8c:54:6c:a7:
b6:4f:6b:83:71:59:2c:2a:a7:4c:4f:b4:53:dd:ed:
c9:cc:ef:63:59:6c:3e:af:c1:43:29:ff:0c:3d:eb:
d8:a6:16:00:76:90:e2:c1:1e:46:72:72:9f:ce:85:
20:f4:4e:8d:18:c3:26:b8:0e:e6:a1:67:e7:3a:30:
9d:a4:e4:d3:7a:33:8f:88:5d:be:80:62:dd:e0:e1:
0f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:4C:2A:F9:79:53:2B:8F:B5:3B:39:C8:A5:53:25:09:B5:9F:6B:F4
X509v3 Authority Key Identifier:
keyid:28:29:34:36:D4:D6:DA:3A:93:A6:0E:CA:3F:BE:C7:7D:8D:C3:8F:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D5F5A/2173E83ADAA611ED8227D4C42F6D8C1D/KCk0NtTW2jqTpg7KP77HfY3Dj2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KCk0NtTW2jqTpg7KP77HfY3Dj2E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D5F5A/2173E83ADAA611ED8227D4C42F6D8C1D/C65FE1F692FE11F0BC8418F5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.75.96.0/20
Signature Algorithm: sha256WithRSAEncryption
1e:94:fe:2f:29:e6:38:35:51:ae:aa:57:27:2b:45:c2:1c:fc:
39:1e:1d:e0:f8:d8:74:43:e8:4a:58:36:10:f7:7a:93:ba:16:
a9:d1:1b:27:fa:ac:8b:8d:39:b7:58:77:24:ed:5c:7b:6e:2b:
cd:6a:89:33:f2:e0:c3:57:6a:63:8d:1e:a6:c9:5d:ff:41:ff:
0c:39:cd:4c:27:fc:9c:13:7f:42:40:16:2f:8d:61:cd:aa:2a:
66:65:c0:31:8e:76:d9:9c:29:e4:48:ec:e3:82:48:df:46:76:
a0:ec:b2:95:a0:4a:06:dd:11:4c:c8:62:66:74:04:14:93:80:
3b:c6:6a:ef:77:8b:3d:04:d0:c9:e9:28:35:5e:48:24:a2:c0:
b7:d7:55:ce:73:11:82:03:5a:20:ce:86:63:9f:b4:ae:3f:61:
43:6b:ff:0e:54:1f:2d:16:89:d9:1f:eb:cf:85:59:c5:c1:4b:
41:66:39:7b:e0:d7:c4:99:bb:66:a3:c6:43:79:02:45:57:9a:
98:cf:d6:57:a1:d9:7e:b4:c0:91:08:32:72:13:69:42:2c:c4:
66:a4:49:0c:18:84:13:e7:41:85:20:74:bc:3e:6c:5e:0b:a8:
ae:ac:a5:f2:db:a4:37:3e:9f:d8:d4:5c:a7:b5:88:1e:2c:97:
a5:ff:b5:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 23:08:49 2025 by rpki-client