Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D5F5A/2173E83ADAA611ED8227D4C42F6D8C1D/FDA533F092FE11F0BA755DF5DAE4EC9C.roa
File: FDA533F092FE11F0BA755DF5DAE4EC9C.roa (raw, json)
Hash identifier: pQCV7Xh0G5jeTLV72a/weSIz6eXJKOWd6gDgzxScmXg=
Subject key identifier: C4:4D:29:90:30:68:CD:2F:F7:D3:0E:5D:75:93:7F:86:BB:B7:63:9B
Certificate issuer: /CN=F36D5F5AAF/serialNumber=28293436D4D6DA3A93A60ECA3FBEC77D8DC38F61
Certificate serial: 03A0
Authority key identifier: 28:29:34:36:D4:D6:DA:3A:93:A6:0E:CA:3F:BE:C7:7D:8D:C3:8F:61
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/KCk0NtTW2jqTpg7KP77HfY3Dj2E.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D5F5A/2173E83ADAA611ED8227D4C42F6D8C1D/FDA533F092FE11F0BA755DF5DAE4EC9C.roa
Signing time: Tue 16 Sep 2025 13:13:53 +0000
ROA not before: Tue 16 Sep 2025 13:13:48 +0000
ROA not after: Wed 16 Sep 2026 13:13:48 +0000
asID: 37276
IP address blocks: 41.78.200.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D5F5A/2173E83ADAA611ED8227D4C42F6D8C1D/KCk0NtTW2jqTpg7KP77HfY3Dj2E.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D5F5A/2173E83ADAA611ED8227D4C42F6D8C1D/KCk0NtTW2jqTpg7KP77HfY3Dj2E.mft
rsync://rpki.afrinic.net/repository/afrinic/KCk0NtTW2jqTpg7KP77HfY3Dj2E.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 18 Sep 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 928 (0x3a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D5F5AAF, serialNumber=28293436D4D6DA3A93A60ECA3FBEC77D8DC38F61
Validity
Not Before: Sep 16 13:13:48 2025 GMT
Not After : Sep 16 13:13:48 2026 GMT
Subject: CN=68c96291-8d57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:0e:78:60:30:eb:2c:1e:ef:44:87:88:9d:73:
88:4c:1a:2c:0b:60:bd:f1:ae:0a:8c:aa:cf:0c:6c:
16:67:3d:12:2a:e9:ac:82:92:37:d1:13:74:23:ce:
e5:d7:8a:9d:ff:84:09:a9:cf:08:17:b2:39:ac:bd:
1e:f9:59:e3:87:de:99:3e:2b:76:92:02:e7:58:9d:
af:e1:47:2a:d8:cd:08:42:b5:94:25:36:4a:18:b1:
6e:90:cb:cf:73:3b:7e:41:04:9f:8c:38:43:5a:6d:
11:c2:b4:25:da:af:85:4a:d2:ef:2d:3c:17:fe:de:
f4:ec:ae:d5:e6:34:bd:67:5d:ca:da:fb:db:c4:28:
6a:51:ee:a3:62:b1:5f:2b:16:c2:ea:84:1c:ba:50:
fe:00:5d:da:e5:03:62:64:f6:bd:bf:f1:64:69:a8:
18:e4:7a:0a:4a:f5:23:f8:70:57:7e:de:fa:9f:63:
5e:c6:2a:aa:aa:43:ac:a7:7a:f3:50:1e:04:af:bf:
23:c0:f8:4c:32:e1:a4:24:c7:32:fa:be:8c:76:41:
47:c9:ac:fc:64:e2:c9:04:bc:43:bf:25:6a:d6:b9:
37:d4:bd:ad:72:d1:19:a6:56:c7:9a:3f:be:42:7e:
72:42:9a:26:2c:9e:bb:0a:25:4d:f9:50:7c:67:bb:
d5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:4D:29:90:30:68:CD:2F:F7:D3:0E:5D:75:93:7F:86:BB:B7:63:9B
X509v3 Authority Key Identifier:
keyid:28:29:34:36:D4:D6:DA:3A:93:A6:0E:CA:3F:BE:C7:7D:8D:C3:8F:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D5F5A/2173E83ADAA611ED8227D4C42F6D8C1D/KCk0NtTW2jqTpg7KP77HfY3Dj2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KCk0NtTW2jqTpg7KP77HfY3Dj2E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D5F5A/2173E83ADAA611ED8227D4C42F6D8C1D/FDA533F092FE11F0BA755DF5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.78.200.0/22
Signature Algorithm: sha256WithRSAEncryption
76:ac:01:ee:82:dc:c4:cb:0d:ad:7d:cc:a3:6f:22:92:32:25:
6c:0f:aa:47:25:91:85:bb:c9:d0:5d:51:b5:d2:a6:b0:3a:78:
33:24:ab:e6:83:5f:35:79:7d:01:e9:22:51:2e:4e:42:c9:6a:
67:e4:d2:46:4f:13:dc:79:f0:31:de:a5:87:9b:00:e5:01:f7:
7d:dd:42:bf:34:f7:b1:b9:f1:a7:72:62:ed:66:93:c4:cb:af:
fe:20:4d:a3:4f:89:e7:a2:23:3d:7e:37:19:e9:04:3d:26:a3:
75:7b:a0:ca:f9:63:65:f5:03:1e:31:86:55:11:0d:2d:8d:74:
33:92:63:da:65:9b:62:fb:2b:74:f6:fc:b8:35:62:ed:ca:68:
42:b4:bc:50:0f:57:db:a4:5e:6e:51:62:9a:ce:22:ee:e8:8c:
ee:a0:e1:b7:ce:e1:a8:0f:30:df:4e:7f:00:ac:53:3a:a8:5f:
46:8f:a1:c5:81:bd:64:06:28:7d:51:9e:23:82:10:2b:c4:9a:
7a:32:0e:53:fa:a7:f6:26:80:ec:fc:f0:4c:5e:6f:91:72:6f:
ab:0c:c3:86:9c:69:41:aa:6c:50:70:6f:67:d3:1f:a7:9b:e2:
16:fe:8e:96:f0:d5:e8:df:2a:02:35:f0:f5:dd:da:f9:5e:41:
2b:b5:c0:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 23:06:07 2025 by rpki-client