Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FDE36/76CDA4B8C11F11EA93036785F8AEA228/111AAB5C5C9711F097D0649DDAE4EC9C.roa
File: 111AAB5C5C9711F097D0649DDAE4EC9C.roa (raw, json)
Hash identifier: 2ilbNmm7Dtw5c2UyIMm7YdRpQpxsgFasGENfbivKomw=
Subject key identifier: B7:E5:58:43:F5:30:FA:91:A7:45:E3:18:83:28:E1:14:26:2C:C5:68
Certificate issuer: /CN=F36FDE36AF/serialNumber=06E1BC8D2D3415B27909F2A9A5441C50F75009F7
Certificate serial: 0753
Authority key identifier: 06:E1:BC:8D:2D:34:15:B2:79:09:F2:A9:A5:44:1C:50:F7:50:09:F7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/BuG8jS00FbJ5CfKppUQcUPdQCfc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FDE36/76CDA4B8C11F11EA93036785F8AEA228/111AAB5C5C9711F097D0649DDAE4EC9C.roa
Signing time: Wed 09 Jul 2025 07:33:55 +0000
ROA not before: Wed 09 Jul 2025 07:33:49 +0000
ROA not after: Tue 09 Jul 2030 07:33:49 +0000
asID: 11845
IP address blocks: 196.3.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FDE36/76CDA4B8C11F11EA93036785F8AEA228/BuG8jS00FbJ5CfKppUQcUPdQCfc.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FDE36/76CDA4B8C11F11EA93036785F8AEA228/BuG8jS00FbJ5CfKppUQcUPdQCfc.mft
rsync://rpki.afrinic.net/repository/afrinic/BuG8jS00FbJ5CfKppUQcUPdQCfc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Jul 2025 00:06:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1875 (0x753)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FDE36AF, serialNumber=06E1BC8D2D3415B27909F2A9A5441C50F75009F7
Validity
Not Before: Jul 9 07:33:49 2025 GMT
Not After : Jul 9 07:33:49 2030 GMT
Subject: CN=686e1b63-80ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:75:63:0f:90:a6:37:2d:9d:6d:1f:d6:d5:3c:
83:6f:78:08:98:27:d0:29:cd:58:3f:7e:c4:89:ec:
f6:3b:81:72:92:ba:0e:94:f3:07:06:8e:1c:f4:d1:
0c:11:4a:61:be:2c:90:d4:5a:41:69:72:dd:58:0f:
fc:0c:5b:6f:ff:f1:31:9c:1d:c4:11:5c:63:a8:b1:
2f:cb:cb:5d:76:77:6b:34:d2:54:37:ee:25:50:41:
20:de:3a:a0:5e:59:da:df:b4:9b:ea:7e:ec:29:0d:
5e:01:6a:a2:88:09:50:c8:88:94:11:15:dd:d5:31:
60:0f:e5:c5:70:34:a8:2d:10:18:f8:9a:c3:7c:f4:
aa:b1:26:53:da:50:78:0d:86:4d:18:1a:7a:e6:2d:
13:47:8a:ca:48:3e:ca:56:f4:d3:05:b2:34:f7:4e:
e7:df:05:57:42:f9:e6:bc:6c:a5:2b:02:8b:27:fe:
e3:e4:56:26:75:d1:90:a3:d7:2f:96:19:ca:52:d3:
31:3a:d7:5e:56:1c:77:11:25:b8:d6:bd:6f:a0:9a:
5f:11:ff:14:38:42:7e:40:5f:ca:2d:86:1f:9b:d8:
69:53:3b:07:1a:f0:32:1f:4c:70:95:c8:61:2c:8d:
9a:9a:99:9c:34:97:0b:8b:9e:bb:cf:83:37:30:e2:
6c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:E5:58:43:F5:30:FA:91:A7:45:E3:18:83:28:E1:14:26:2C:C5:68
X509v3 Authority Key Identifier:
keyid:06:E1:BC:8D:2D:34:15:B2:79:09:F2:A9:A5:44:1C:50:F7:50:09:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FDE36/76CDA4B8C11F11EA93036785F8AEA228/BuG8jS00FbJ5CfKppUQcUPdQCfc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/BuG8jS00FbJ5CfKppUQcUPdQCfc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FDE36/76CDA4B8C11F11EA93036785F8AEA228/111AAB5C5C9711F097D0649DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.3.105.0/24
Signature Algorithm: sha256WithRSAEncryption
78:89:ba:fd:ba:e7:88:f4:e7:60:82:c2:d1:fc:69:d7:6a:a9:
0b:64:fa:eb:b7:39:f2:f0:15:c6:44:9a:36:f3:50:f8:31:7c:
c8:1c:ee:6f:1d:ae:33:03:f4:92:58:29:81:34:c2:e4:f5:93:
98:73:1c:aa:25:fe:60:ac:64:61:0e:44:2f:1f:89:bc:a2:e6:
dc:a0:9b:89:13:c4:27:c9:24:6c:44:3d:b8:aa:95:62:6f:4e:
e3:9a:79:09:e2:52:37:ce:dd:2c:6d:f7:8d:e2:41:1d:b8:eb:
54:84:ec:0a:a9:e7:f7:dd:c2:37:dd:fa:5a:0a:57:92:f8:db:
1d:38:7a:06:ab:4d:85:0c:80:0c:b1:b3:92:2a:12:80:27:a5:
e3:ae:52:60:01:09:4c:0b:d7:4f:a4:d1:7c:33:cc:f5:e8:fa:
0c:da:23:77:13:cd:6b:73:58:9e:17:74:b9:06:76:45:2a:3e:
18:b2:4a:65:46:71:6a:b4:6e:68:cd:4a:e8:10:67:61:8b:7e:
05:8b:7a:51:98:88:b8:97:02:a0:00:65:f8:d3:bb:da:c8:50:
12:9b:3a:00:78:1d:3d:4d:ea:8d:e8:d5:f9:6b:d5:3f:54:7f:
a4:49:bf:a2:b8:75:44:ef:83:ac:bc:cb:f5:f3:b1:83:f4:c7:
1a:de:7e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:06:18 2025 by rpki-client