Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/6A5D847ABD6111F0A69CE1BFDAE4EC9C.roa
File: 6A5D847ABD6111F0A69CE1BFDAE4EC9C.roa (raw, json)
Hash identifier: fHB735+tbv3iVDIq2ZhU4RWinWdYCJgEt4jlNj33RYU=
Subject key identifier: 97:BF:32:95:D2:BA:43:A2:19:19:7F:AC:6D:6E:C2:14:17:5A:CD:E2
Certificate issuer: /CN=F36F8F4FAF/serialNumber=DC17A0EC58652D31896123A65610C3A32046556B
Certificate serial: 0639
Authority key identifier: DC:17:A0:EC:58:65:2D:31:89:61:23:A6:56:10:C3:A3:20:46:55:6B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/3Beg7FhlLTGJYSOmVhDDoyBGVWs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/6A5D847ABD6111F0A69CE1BFDAE4EC9C.roa
Signing time: Sun 09 Nov 2025 11:44:14 +0000
ROA not before: Sun 09 Nov 2025 11:44:09 +0000
ROA not after: Sat 09 Nov 2030 11:44:09 +0000
asID: 21003
IP address blocks: 41.208.64.0/24 maxlen: 24
41.208.65.0/24 maxlen: 24
41.208.66.0/24 maxlen: 24
41.208.67.0/24 maxlen: 24
41.208.68.0/24 maxlen: 24
41.208.69.0/24 maxlen: 24
41.208.70.0/24 maxlen: 24
41.208.71.0/24 maxlen: 24
41.208.72.0/24 maxlen: 24
41.208.73.0/24 maxlen: 24
41.208.74.0/24 maxlen: 24
41.208.75.0/24 maxlen: 24
41.208.76.0/24 maxlen: 24
41.208.77.0/24 maxlen: 24
41.208.78.0/24 maxlen: 24
41.208.79.0/24 maxlen: 24
41.208.80.0/24 maxlen: 24
41.208.81.0/24 maxlen: 24
41.208.82.0/24 maxlen: 24
41.208.83.0/24 maxlen: 24
41.208.84.0/24 maxlen: 24
41.208.85.0/24 maxlen: 24
41.208.86.0/24 maxlen: 24
41.208.87.0/24 maxlen: 24
41.208.88.0/24 maxlen: 24
41.208.89.0/24 maxlen: 24
41.208.90.0/24 maxlen: 24
41.208.91.0/24 maxlen: 24
41.208.92.0/24 maxlen: 24
41.208.93.0/24 maxlen: 24
41.208.94.0/24 maxlen: 24
41.208.95.0/24 maxlen: 24
41.208.96.0/24 maxlen: 24
41.208.97.0/24 maxlen: 24
41.208.98.0/24 maxlen: 24
41.208.99.0/24 maxlen: 24
41.208.100.0/24 maxlen: 24
41.208.101.0/24 maxlen: 24
41.208.102.0/24 maxlen: 24
41.208.103.0/24 maxlen: 24
41.208.104.0/24 maxlen: 24
41.208.105.0/24 maxlen: 24
41.208.106.0/24 maxlen: 24
41.208.107.0/24 maxlen: 24
41.208.108.0/24 maxlen: 24
41.208.109.0/24 maxlen: 24
41.208.110.0/24 maxlen: 24
41.208.111.0/24 maxlen: 24
41.208.112.0/24 maxlen: 24
41.208.113.0/24 maxlen: 24
41.208.114.0/24 maxlen: 24
41.208.115.0/24 maxlen: 24
41.208.116.0/24 maxlen: 24
41.208.117.0/24 maxlen: 24
41.208.118.0/24 maxlen: 24
41.208.119.0/24 maxlen: 24
41.208.120.0/24 maxlen: 24
41.208.121.0/24 maxlen: 24
41.208.122.0/24 maxlen: 24
41.208.123.0/24 maxlen: 24
41.208.124.0/24 maxlen: 24
41.208.125.0/24 maxlen: 24
41.208.126.0/24 maxlen: 24
41.208.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/3Beg7FhlLTGJYSOmVhDDoyBGVWs.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/3Beg7FhlLTGJYSOmVhDDoyBGVWs.mft
rsync://rpki.afrinic.net/repository/afrinic/3Beg7FhlLTGJYSOmVhDDoyBGVWs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 13 Nov 2025 06:46:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1593 (0x639)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F8F4FAF, serialNumber=DC17A0EC58652D31896123A65610C3A32046556B
Validity
Not Before: Nov 9 11:44:09 2025 GMT
Not After : Nov 9 11:44:09 2030 GMT
Subject: CN=69107e8e-f26e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e4:af:68:b4:89:b9:fc:e6:26:43:f4:0c:77:
da:75:a6:87:fa:05:63:72:00:5f:7e:7c:fe:ac:ea:
cf:92:43:3d:b4:ae:84:37:e0:b2:c8:6e:1f:c5:c3:
16:e1:34:17:99:90:f4:0c:ff:56:9e:74:48:dc:9f:
a7:d8:cf:0d:7c:2d:b5:2e:9a:13:6f:83:1a:9e:6f:
a8:96:ff:b2:db:90:1a:ef:7c:21:a1:3c:28:38:2e:
6e:67:a2:61:d7:aa:93:8f:2a:16:0f:a4:23:21:31:
78:06:98:aa:ca:31:e8:41:80:98:90:75:a0:5a:e0:
d3:08:4b:c7:64:0a:f6:de:40:9d:67:c4:bd:75:19:
42:6e:06:a9:8e:14:2f:cd:6a:c4:18:29:d4:aa:07:
da:27:7b:02:e1:55:c1:38:1c:06:22:ad:ba:ec:3e:
c0:36:8d:40:d4:29:51:26:ef:f1:43:72:b6:33:40:
a9:5f:28:69:7e:b7:e6:82:30:88:97:f2:ca:5f:53:
63:55:71:e4:28:c4:dd:ed:dc:ee:11:c0:86:6b:c3:
3b:5f:67:2b:4f:2b:84:fc:9e:82:3a:f7:34:af:ac:
5f:00:f1:07:4d:84:49:fa:14:f7:07:dd:f6:5f:d8:
61:69:3c:46:4a:a6:7b:15:33:dd:fc:13:4d:bc:9e:
fe:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:BF:32:95:D2:BA:43:A2:19:19:7F:AC:6D:6E:C2:14:17:5A:CD:E2
X509v3 Authority Key Identifier:
keyid:DC:17:A0:EC:58:65:2D:31:89:61:23:A6:56:10:C3:A3:20:46:55:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/3Beg7FhlLTGJYSOmVhDDoyBGVWs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3Beg7FhlLTGJYSOmVhDDoyBGVWs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/6A5D847ABD6111F0A69CE1BFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.208.64.0/18
Signature Algorithm: sha256WithRSAEncryption
90:28:e7:a3:5a:78:54:9c:54:ee:04:e7:42:39:2a:4e:9e:e2:
4a:11:77:5a:a8:97:ce:3e:6f:27:0f:52:a7:06:40:75:93:6c:
3e:60:31:82:52:d4:3c:d3:a3:7c:bb:9f:31:6b:2c:ca:c8:53:
69:4c:9c:10:91:94:79:88:18:ca:67:f3:d2:8c:69:f0:68:f4:
58:da:6d:11:78:84:56:eb:f8:04:ba:37:16:31:88:cd:ad:d2:
0c:43:ae:ba:6c:b4:c4:52:9c:a4:cd:61:a8:a6:7d:c2:59:a4:
c7:0f:22:9a:39:0c:f2:a6:74:70:da:fa:9f:16:49:92:c9:9a:
39:a7:a3:20:7c:03:4d:dd:dd:e4:91:97:c3:7c:a7:d1:4c:b7:
82:d8:72:f7:e8:12:0f:aa:35:81:e3:4b:b7:09:1c:23:f0:da:
8c:d0:30:be:95:81:9e:7f:53:eb:c9:f3:f3:ff:c3:20:2c:97:
2c:e1:b1:b8:d8:e0:93:b8:b5:30:a8:ff:41:d0:8e:49:23:c5:
ff:5a:43:ce:a3:b2:89:7f:4d:b4:70:68:09:6d:99:f6:86:a6:
25:a7:80:3c:f3:14:d8:71:1f:8b:96:26:a4:c4:3d:f7:bd:39:
c8:e0:ac:4d:be:4f:6b:28:5e:b9:b7:4f:eb:9a:60:1f:e2:a1:
0c:84:39:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 12 00:54:28 2025 by rpki-client