Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/C4C9B73AB55511F08736369ADAE4EC9C.roa
File: C4C9B73AB55511F08736369ADAE4EC9C.roa (raw, json)
Hash identifier: CMYKxCS3jFNWQQUqDagCHxfFByaW82mbkSwsyKkTgQ4=
Subject key identifier: 37:A0:6F:A5:C9:8D:D0:7A:26:81:01:BB:3F:A5:EA:EA:A2:BD:18:BB
Certificate issuer: /CN=F36F6034AF/serialNumber=C702799EA4BD5DBA3ED3D069A7191B941B5A779A
Certificate serial: 0833
Authority key identifier: C7:02:79:9E:A4:BD:5D:BA:3E:D3:D0:69:A7:19:1B:94:1B:5A:77:9A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/xwJ5nqS9Xbo-09BppxkblBtad5o.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/C4C9B73AB55511F08736369ADAE4EC9C.roa
Signing time: Thu 30 Oct 2025 06:00:43 +0000
ROA not before: Thu 30 Oct 2025 06:00:38 +0000
ROA not after: Fri 30 Oct 2026 06:00:38 +0000
asID: 54252
IP address blocks: 196.198.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/xwJ5nqS9Xbo-09BppxkblBtad5o.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/xwJ5nqS9Xbo-09BppxkblBtad5o.mft
rsync://rpki.afrinic.net/repository/afrinic/xwJ5nqS9Xbo-09BppxkblBtad5o.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Nov 2025 00:06:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2099 (0x833)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F6034AF, serialNumber=C702799EA4BD5DBA3ED3D069A7191B941B5A779A
Validity
Not Before: Oct 30 06:00:38 2025 GMT
Not After : Oct 30 06:00:38 2026 GMT
Subject: CN=6902ff0b-6463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:57:e7:8e:1e:81:d2:8d:43:42:2d:1f:e3:96:
6d:2b:7e:a3:07:05:72:25:ec:79:d8:22:75:e0:8d:
0c:48:ff:a6:f5:25:43:65:81:47:66:e3:23:35:dd:
a1:ae:e7:12:c7:18:c6:62:4d:ec:c0:a2:db:fb:ad:
a8:10:b2:c3:27:0b:30:1e:c8:59:a2:ed:4f:2d:6a:
61:03:6d:ba:bb:e0:8e:33:25:43:30:47:f0:fe:89:
03:db:0a:ea:5d:7d:7b:b9:24:1e:da:ea:77:bb:05:
ce:9f:01:c0:62:1e:ec:9b:c9:8b:e7:42:2a:e6:be:
1b:58:fa:1b:cb:55:86:e9:98:f2:b2:f5:4f:88:9d:
22:3f:24:6b:1e:8c:84:c5:62:7b:22:be:91:28:68:
51:f2:f9:4e:05:d5:5e:b6:49:be:53:2b:b6:f4:7b:
44:2b:b7:0e:e8:5a:34:98:fd:4f:e4:95:0c:ab:b1:
a1:ea:2f:de:2b:c5:91:e1:31:09:64:3e:66:04:0f:
18:e3:e9:7e:1b:2d:7c:f2:1b:89:80:8b:4e:62:fe:
4f:9b:d9:e6:f6:9e:3f:4b:c5:f7:a6:47:b6:1d:f1:
3a:52:06:76:97:80:22:07:3e:5c:a2:c8:40:4f:63:
94:0f:7e:b0:8b:b8:10:f4:10:1b:d1:15:d3:2b:b3:
e4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:A0:6F:A5:C9:8D:D0:7A:26:81:01:BB:3F:A5:EA:EA:A2:BD:18:BB
X509v3 Authority Key Identifier:
keyid:C7:02:79:9E:A4:BD:5D:BA:3E:D3:D0:69:A7:19:1B:94:1B:5A:77:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/xwJ5nqS9Xbo-09BppxkblBtad5o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xwJ5nqS9Xbo-09BppxkblBtad5o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/C4C9B73AB55511F08736369ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.198.134.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:05:dd:a3:e9:fd:09:74:5e:c7:e0:6d:4c:40:51:22:95:aa:
76:e4:b3:fe:1d:a7:b1:5e:2b:95:aa:de:00:18:9e:2c:58:45:
ef:16:06:b0:9e:63:45:82:be:82:c7:88:97:cd:f4:02:98:89:
98:56:1d:62:cf:f1:86:17:70:1a:df:d7:25:ea:d1:91:c4:d3:
96:4d:68:09:e7:4f:bd:83:bf:b9:18:d4:4d:90:84:a6:e4:1b:
29:8c:f5:a6:fa:06:79:c9:52:85:0f:c9:9c:aa:68:24:bc:c1:
08:61:9c:aa:d7:16:7c:5e:8b:22:6d:b9:9a:28:a8:90:ca:64:
5e:89:20:f3:e9:8d:39:5d:78:10:aa:08:73:2c:88:6c:55:77:
93:61:ec:a5:21:a3:eb:5e:0f:92:fb:26:26:f5:62:f4:91:bc:
e7:00:c9:b0:22:fd:60:46:0f:39:6c:3f:b9:04:bd:23:d0:b5:
ba:81:45:3c:8a:04:c7:80:97:1f:ac:7e:81:dc:82:ca:a8:d6:
65:c9:70:1f:cf:bb:87:6f:63:f1:b3:e8:ff:b4:0e:d0:42:ae:
68:ce:d0:80:6c:18:bb:0a:ef:ba:a0:81:55:bf:52:32:88:75:
0e:d3:aa:7e:fa:a0:d3:90:28:da:77:b8:b8:bb:5d:9b:c6:c0:
d1:cc:01:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 00:09:09 2025 by rpki-client