Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA116/8DC44E0EC62B11EF98DEC0B5762E951A/89415A0E5E7211F0B8E7AF78DAE4EC9C.roa
File: 89415A0E5E7211F0B8E7AF78DAE4EC9C.roa (raw, json)
Hash identifier: bwrmeukzWyPIS164sbq4lq7JkmMuEX5N0YPjyonfsGM=
Subject key identifier: 87:6F:AA:B9:FA:DD:CC:59:44:D6:E2:F1:49:BA:5C:E5:7E:2D:FF:EA
Certificate issuer: /CN=F36FA116AF/serialNumber=BC44CE85A5EC97BDBB21D3348800310153A01CCA
Certificate serial: D3
Authority key identifier: BC:44:CE:85:A5:EC:97:BD:BB:21:D3:34:88:00:31:01:53:A0:1C:CA
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/vETOhaXsl727IdM0iAAxAVOgHMo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA116/8DC44E0EC62B11EF98DEC0B5762E951A/89415A0E5E7211F0B8E7AF78DAE4EC9C.roa
Signing time: Fri 11 Jul 2025 16:17:27 +0000
ROA not before: Fri 11 Jul 2025 16:17:23 +0000
ROA not after: Tue 31 Jul 2035 16:17:23 +0000
asID: 328140
IP address blocks: 196.223.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FA116/8DC44E0EC62B11EF98DEC0B5762E951A/vETOhaXsl727IdM0iAAxAVOgHMo.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FA116/8DC44E0EC62B11EF98DEC0B5762E951A/vETOhaXsl727IdM0iAAxAVOgHMo.mft
rsync://rpki.afrinic.net/repository/afrinic/vETOhaXsl727IdM0iAAxAVOgHMo.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Jul 2025 00:06:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 211 (0xd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA116AF, serialNumber=BC44CE85A5EC97BDBB21D3348800310153A01CCA
Validity
Not Before: Jul 11 16:17:23 2025 GMT
Not After : Jul 31 16:17:23 2035 GMT
Subject: CN=68713917-28cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:14:8c:78:3f:39:b4:6f:40:02:dd:34:d8:77:
8f:17:23:e1:5b:b3:db:6c:bc:93:d8:ae:77:7d:36:
57:02:68:bc:66:4f:58:0b:91:a8:8a:ff:7d:87:69:
13:ef:47:c9:96:9e:a0:c0:91:dd:fd:3b:9f:7b:82:
ca:ff:89:0d:bb:08:e3:6c:b1:e7:60:3c:e0:75:73:
f9:e8:10:7a:28:44:ce:19:16:2e:12:e8:0f:17:bf:
18:c2:6c:8c:8b:95:b4:8b:69:ae:fc:98:5c:e3:f5:
5d:ab:47:ab:ec:df:81:8c:70:47:41:1e:49:45:0b:
e2:0b:cf:98:1f:dc:b3:b5:b8:3a:65:02:e5:28:a9:
03:38:37:62:85:74:6f:db:7e:fc:92:0d:b2:1a:57:
b4:51:1b:1d:15:c3:bf:57:fe:64:d0:44:c9:e9:ec:
96:25:28:59:f7:05:51:d0:37:a5:8f:46:cd:42:66:
b8:ef:1a:7d:43:a5:16:fd:de:c2:a7:cb:a1:3a:16:
9f:5b:2b:e4:8d:6c:93:35:d2:2e:ba:81:fc:a4:c4:
5a:15:02:4d:f5:54:a5:6e:c3:f4:99:18:0f:54:9c:
7e:ec:f2:13:30:8f:6e:f9:69:b1:32:57:ea:77:23:
eb:c3:69:d7:97:4d:59:36:3e:ce:5f:05:db:ff:d4:
09:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:6F:AA:B9:FA:DD:CC:59:44:D6:E2:F1:49:BA:5C:E5:7E:2D:FF:EA
X509v3 Authority Key Identifier:
keyid:BC:44:CE:85:A5:EC:97:BD:BB:21:D3:34:88:00:31:01:53:A0:1C:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA116/8DC44E0EC62B11EF98DEC0B5762E951A/vETOhaXsl727IdM0iAAxAVOgHMo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vETOhaXsl727IdM0iAAxAVOgHMo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA116/8DC44E0EC62B11EF98DEC0B5762E951A/89415A0E5E7211F0B8E7AF78DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.223.148.0/24
Signature Algorithm: sha256WithRSAEncryption
88:66:a7:3c:2e:0c:77:ac:1a:33:24:4e:87:4e:df:36:29:1f:
92:fd:0d:12:4e:2d:fa:f1:fd:9a:27:6e:c2:28:5a:48:5a:ee:
d8:66:a1:e6:9a:d8:92:b8:09:8e:7a:53:e6:67:80:03:d4:d9:
05:ab:ad:6b:e4:e5:ee:75:e0:f4:9b:e0:1a:b8:a4:ec:24:3b:
1b:89:e4:04:d8:58:75:32:38:c5:1f:d5:18:70:16:d7:2d:ed:
6f:36:8d:6a:f3:9e:2b:1c:94:8e:23:2d:03:e4:e3:4f:2b:9e:
a8:04:25:f4:a2:b3:0a:39:6e:23:67:9d:3c:c3:c7:ca:af:27:
f5:65:c2:c6:d1:90:f6:6c:75:29:b4:6a:ac:ee:fb:2c:a7:61:
dd:45:49:1d:08:ea:b7:12:d3:e9:45:1f:85:d3:dc:43:5c:fe:
b6:5f:a0:ae:eb:c0:c7:a7:26:c6:7f:a2:59:c7:93:f0:44:87:
31:ca:53:37:6e:b4:18:d5:a9:04:b4:67:01:10:0e:51:2f:96:
56:0f:21:c1:44:7d:f1:d6:8d:71:70:18:85:7e:54:53:54:06:
2e:4d:07:f1:87:a1:cb:ca:f0:b6:24:78:7e:da:aa:77:77:24:
66:51:57:92:f7:2e:eb:fa:87:b5:0c:5a:de:56:e1:46:05:89:
3f:78:d6:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:56:00 2025 by rpki-client