Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3676134/3362C1AA567E11F0B014F9DEDAE4EC9C/50FB913E629911F098850F7FDAE4EC9C.roa
File: 50FB913E629911F098850F7FDAE4EC9C.roa (raw, json)
Hash identifier: eDO1JULENP2DvOHSotlUtwQVGoJC7gZEaQKOXc6qaIw=
Subject key identifier: F6:62:32:D8:3F:A4:9E:9B:D9:A5:B2:18:30:09:6E:AC:E3:6F:37:01
Certificate issuer: /CN=F3676134AF/serialNumber=74B03B8FD8F53BEF4887B78698F9ECAB1B1F69B0
Certificate serial: 18
Authority key identifier: 74:B0:3B:8F:D8:F5:3B:EF:48:87:B7:86:98:F9:EC:AB:1B:1F:69:B0
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/dLA7j9j1O-9Ih7eGmPnsqxsfabA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3676134/3362C1AA567E11F0B014F9DEDAE4EC9C/50FB913E629911F098850F7FDAE4EC9C.roa
Signing time: Wed 16 Jul 2025 23:05:08 +0000
ROA not before: Thu 17 Jul 2025 23:05:03 +0000
ROA not after: Fri 31 Jul 2026 23:05:03 +0000
asID: 329532
IP address blocks: 2c0f:fc78:f000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3676134/3362C1AA567E11F0B014F9DEDAE4EC9C/dLA7j9j1O-9Ih7eGmPnsqxsfabA.crl
rsync://rpki.afrinic.net/repository/member_repository/F3676134/3362C1AA567E11F0B014F9DEDAE4EC9C/dLA7j9j1O-9Ih7eGmPnsqxsfabA.mft
rsync://rpki.afrinic.net/repository/afrinic/dLA7j9j1O-9Ih7eGmPnsqxsfabA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 12 Aug 2025 05:34:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24 (0x18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3676134AF, serialNumber=74B03B8FD8F53BEF4887B78698F9ECAB1B1F69B0
Validity
Not Before: Jul 17 23:05:03 2025 GMT
Not After : Jul 31 23:05:03 2026 GMT
Subject: CN=68783024-3dea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:5f:0b:0e:21:df:55:cc:99:41:3d:8c:4a:7b:
f4:ba:6e:6f:10:a6:a1:21:7b:8d:fb:97:2f:7f:16:
2b:e6:4b:f6:9d:87:cf:f6:58:1c:8f:d6:bc:9c:c9:
56:8f:50:90:27:11:5e:74:f7:67:27:8e:57:95:22:
9e:8f:de:f8:1d:30:93:c6:8e:84:a6:27:0b:d7:90:
18:96:9d:a8:88:12:be:2e:8f:7a:cc:b5:81:f1:9c:
0d:2c:97:2a:48:da:fc:45:68:1a:14:75:0f:67:e5:
0e:83:66:14:f0:84:10:e7:90:cc:d9:f1:ec:86:83:
b3:cd:a0:82:88:de:81:1b:76:15:82:77:88:bb:64:
1e:96:25:48:37:52:1c:eb:6c:ce:0a:05:f1:13:bc:
06:f1:58:38:d7:9b:24:45:34:62:9c:53:72:e7:e5:
75:89:43:9a:c6:c7:5f:78:18:8c:d7:db:ad:86:d7:
6c:b1:3f:c2:b7:30:4b:78:21:ab:ec:87:c7:bd:7e:
29:d4:2d:d7:89:62:be:9d:da:a9:54:67:f3:c9:bf:
2b:e5:a8:b9:8f:cf:28:10:33:72:ac:51:90:f6:bc:
2d:79:69:7e:f6:f0:55:6b:c9:82:01:4b:7f:a4:68:
d6:84:be:c3:8d:73:fd:7b:d6:db:eb:b5:71:ac:d7:
17:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:62:32:D8:3F:A4:9E:9B:D9:A5:B2:18:30:09:6E:AC:E3:6F:37:01
X509v3 Authority Key Identifier:
keyid:74:B0:3B:8F:D8:F5:3B:EF:48:87:B7:86:98:F9:EC:AB:1B:1F:69:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3676134/3362C1AA567E11F0B014F9DEDAE4EC9C/dLA7j9j1O-9Ih7eGmPnsqxsfabA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/dLA7j9j1O-9Ih7eGmPnsqxsfabA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3676134/3362C1AA567E11F0B014F9DEDAE4EC9C/50FB913E629911F098850F7FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:fc78:f000::/36
Signature Algorithm: sha256WithRSAEncryption
8e:99:ca:8f:a9:99:bb:9c:4d:30:1e:25:34:c0:22:2c:18:bc:
79:71:e9:af:3b:5c:86:01:5c:32:2c:79:55:2a:d3:13:95:e0:
5a:06:20:5a:fd:84:b6:6c:41:c5:55:ce:de:5a:71:de:06:2e:
e3:7d:82:e0:30:b5:b6:29:09:c0:19:60:45:80:23:0e:80:d9:
73:e5:0d:d2:22:11:98:54:5a:76:07:3b:60:2a:23:80:c0:ad:
12:02:5d:42:c4:25:c2:a6:46:50:6d:91:45:d7:cf:eb:30:a5:
6f:2c:55:d9:31:28:28:61:40:d4:9f:8f:16:f0:a9:ae:cc:49:
3a:9a:e5:55:11:e8:ed:fc:32:e9:aa:cc:d6:13:b2:2a:0a:19:
2a:50:ea:9d:4a:77:1d:01:a1:9e:ab:f0:6c:0e:0b:1f:4c:7e:
e1:fd:af:54:3f:4d:99:9e:33:71:05:00:af:5c:ce:28:28:1e:
c8:45:93:26:2d:36:56:5f:00:23:11:b5:88:d0:e8:e0:ed:df:
68:cd:52:4a:04:60:43:9c:6f:a5:e6:07:90:44:5b:7b:10:a3:
13:50:6d:1f:38:4e:f9:8d:b3:09:8c:44:05:ae:cb:28:fc:c2:
09:aa:af:77:a7:91:c3:b8:b3:41:fe:7c:7f:46:44:55:d0:12:
02:7d:7d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 06:15:07 2025 by rpki-client