Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365BA89/38C9CA227F3B11F0B19C74C8DAE4EC9C/B3B9441AB4AB11F0AB1503F2DAE4EC9C.roa
File: B3B9441AB4AB11F0AB1503F2DAE4EC9C.roa (raw, json)
Hash identifier: RwHD+Trhxws3zYvrFRwgdKof2CblxIDy9QFXW4Tleeg=
Subject key identifier: F3:C9:A0:81:1B:A6:B3:8E:D5:74:19:DC:AD:85:1F:3E:7C:BA:72:DE
Certificate issuer: /CN=F365BA89AF/serialNumber=0C6E7BD35B42614FCF8D224DD88EB7B0F7EFC182
Certificate serial: 6B
Authority key identifier: 0C:6E:7B:D3:5B:42:61:4F:CF:8D:22:4D:D8:8E:B7:B0:F7:EF:C1:82
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/DG5701tCYU_PjSJN2I63sPfvwYI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F365BA89/38C9CA227F3B11F0B19C74C8DAE4EC9C/B3B9441AB4AB11F0AB1503F2DAE4EC9C.roa
Signing time: Wed 29 Oct 2025 09:43:20 +0000
ROA not before: Wed 29 Oct 2025 09:43:15 +0000
ROA not after: Sat 31 Oct 2026 09:43:15 +0000
asID: 329535
IP address blocks: 2c0f:1ec0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F365BA89/38C9CA227F3B11F0B19C74C8DAE4EC9C/DG5701tCYU_PjSJN2I63sPfvwYI.crl
rsync://rpki.afrinic.net/repository/member_repository/F365BA89/38C9CA227F3B11F0B19C74C8DAE4EC9C/DG5701tCYU_PjSJN2I63sPfvwYI.mft
rsync://rpki.afrinic.net/repository/afrinic/DG5701tCYU_PjSJN2I63sPfvwYI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107 (0x6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F365BA89AF, serialNumber=0C6E7BD35B42614FCF8D224DD88EB7B0F7EFC182
Validity
Not Before: Oct 29 09:43:15 2025 GMT
Not After : Oct 31 09:43:15 2026 GMT
Subject: CN=6901e1b8-d31e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:49:a1:b6:53:5d:f4:7e:8c:1f:8b:0d:b1:87:
25:16:03:d4:1b:66:5e:69:2a:08:a9:1f:b7:5b:61:
7f:73:3f:93:aa:ae:f6:56:34:71:c2:b8:08:14:82:
63:76:f2:09:78:95:06:ba:39:56:1f:a4:42:65:eb:
02:c2:11:e7:68:1c:22:6c:42:da:a6:9f:b2:5e:4a:
b6:55:f2:60:84:d2:1a:88:7c:09:54:43:55:7c:32:
76:e6:77:1d:d7:75:2b:a7:e4:3c:1d:b5:26:ca:50:
00:0a:31:c6:66:85:7b:08:1c:f6:cb:de:33:6d:b8:
d9:8d:de:e3:42:01:7e:57:89:7f:e5:be:4d:78:64:
e4:ff:01:45:f6:2b:ef:24:1a:71:f3:89:8f:6e:a8:
80:a6:10:8a:82:a2:e8:cf:54:c3:c9:91:a4:05:2a:
fa:35:44:a3:91:2e:d7:dd:71:8e:31:51:27:94:07:
88:ae:4c:23:ee:1b:27:be:0d:b1:d5:24:28:95:af:
a4:16:b0:c8:ab:21:6b:a0:f7:af:4a:f7:11:77:75:
85:4c:44:af:43:c1:e9:67:6f:57:f4:6e:2e:02:77:
7d:bf:54:0e:ac:21:1b:90:a2:f0:6a:82:d8:54:01:
25:90:b2:e6:83:8c:32:06:89:0d:21:2b:3b:1f:b7:
a0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C9:A0:81:1B:A6:B3:8E:D5:74:19:DC:AD:85:1F:3E:7C:BA:72:DE
X509v3 Authority Key Identifier:
keyid:0C:6E:7B:D3:5B:42:61:4F:CF:8D:22:4D:D8:8E:B7:B0:F7:EF:C1:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F365BA89/38C9CA227F3B11F0B19C74C8DAE4EC9C/DG5701tCYU_PjSJN2I63sPfvwYI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DG5701tCYU_PjSJN2I63sPfvwYI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365BA89/38C9CA227F3B11F0B19C74C8DAE4EC9C/B3B9441AB4AB11F0AB1503F2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:1ec0::/32
Signature Algorithm: sha256WithRSAEncryption
68:2f:e3:d5:ff:c0:af:12:24:0e:41:2e:3a:4c:5d:c7:41:78:
9a:45:b5:5e:2f:e4:07:8c:90:70:48:d4:76:29:70:35:97:a1:
5a:cd:79:23:d0:6b:69:26:4d:e5:05:f9:32:e8:d6:13:73:b5:
87:1f:fa:54:93:a2:d2:66:f1:ff:35:9f:3b:a5:ca:4f:94:76:
07:d6:53:a7:8f:38:98:be:76:b5:b6:f7:c1:c6:ee:9d:ec:7f:
ee:c6:b6:08:2e:65:9d:f2:cb:dc:00:bd:49:63:ba:9b:f2:fb:
07:ad:8b:ab:b0:ab:73:a0:66:0d:0f:8f:c0:18:d2:67:99:3e:
c1:73:b8:f7:62:fd:d8:0f:cb:60:c3:59:a6:54:81:80:04:1f:
72:a7:88:9d:1d:80:10:bf:d1:3e:67:54:46:b3:28:0a:ce:50:
2a:eb:e4:75:ec:4e:37:3a:a1:e4:46:3d:e8:b2:3d:1b:25:60:
46:63:99:9b:2e:f4:5c:12:32:9f:c1:95:4a:dd:ce:12:f4:be:
b8:8d:2d:b8:38:6f:46:ce:43:75:95:14:ec:b6:3b:e6:ab:af:
ab:ac:43:e6:f6:b9:2f:7b:02:74:75:35:15:9c:91:8e:67:34:
94:a0:ea:97:af:53:9e:35:49:96:b6:b0:41:63:90:c3:0e:80:
af:56:9d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:34:30 2025 by rpki-client