Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/0B91942C6C8A11F0B2D971D2DAE4EC9C.roa
File: 0B91942C6C8A11F0B2D971D2DAE4EC9C.roa (raw, json)
Hash identifier: FfrVTj7u/aE7jd8MJO5QLiNRD+99AEV+gaUWVjNEVDw=
Subject key identifier: 68:6E:33:70:08:F9:71:2D:33:9E:F4:57:6A:17:58:ED:15:B8:92:02
Certificate issuer: /CN=F36A1CEFAF/serialNumber=82F1C6611A3A1467DB3D78A4A5FED50A08A57B13
Certificate serial: 064A
Authority key identifier: 82:F1:C6:61:1A:3A:14:67:DB:3D:78:A4:A5:FE:D5:0A:08:A5:7B:13
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/0B91942C6C8A11F0B2D971D2DAE4EC9C.roa
Signing time: Tue 29 Jul 2025 14:41:01 +0000
ROA not before: Tue 29 Jul 2025 14:40:56 +0000
ROA not after: Sun 29 Jul 2035 14:40:56 +0000
asID: 37645
IP address blocks: 2c0f:f280::/39 maxlen: 39
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.mft
rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 08 Aug 2025 00:06:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1610 (0x64a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A1CEFAF, serialNumber=82F1C6611A3A1467DB3D78A4A5FED50A08A57B13
Validity
Not Before: Jul 29 14:40:56 2025 GMT
Not After : Jul 29 14:40:56 2035 GMT
Subject: CN=6888dd7d-7454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:99:95:54:c6:ac:e2:8c:78:25:19:ee:83:a8:
10:61:c0:02:18:0b:5c:93:29:2b:d7:f6:4c:47:ee:
d4:d5:13:bb:b8:f3:19:da:3d:f6:77:e1:b0:df:fd:
80:88:e2:42:7a:fe:ac:24:eb:4a:76:9c:5e:21:4c:
b7:c9:93:8d:b2:77:cc:fb:4c:0a:af:b2:3f:e1:65:
c0:15:b2:87:a7:20:7b:ad:d7:a1:ee:fa:d8:4e:e3:
fb:a6:fe:0e:21:5d:5c:b5:c0:51:7b:46:77:ed:5c:
b2:1f:71:5f:c9:f6:82:08:54:6d:f4:c9:68:62:08:
fa:2c:7d:21:5e:7d:33:ad:89:34:40:a0:09:0a:1c:
59:4d:82:cb:ee:85:f9:13:6f:b0:c4:2b:3c:56:e2:
a8:4c:33:4d:fb:a2:e5:bf:bc:f8:33:ba:58:1a:50:
68:7a:c6:97:87:dd:b8:27:e9:e9:3d:8d:86:51:57:
f5:f0:db:73:69:67:1b:5f:6a:1d:55:1f:58:d7:33:
24:50:b0:df:6a:34:0a:8b:ca:ac:f0:82:e2:6b:6c:
fa:57:c0:e0:0f:a5:81:60:dc:91:8e:7b:eb:55:a5:
e1:6d:bd:75:4d:ff:b0:aa:39:58:87:27:c7:16:e5:
9c:e3:25:8f:f3:12:5b:ac:a9:99:52:81:59:cc:ca:
05:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:6E:33:70:08:F9:71:2D:33:9E:F4:57:6A:17:58:ED:15:B8:92:02
X509v3 Authority Key Identifier:
keyid:82:F1:C6:61:1A:3A:14:67:DB:3D:78:A4:A5:FE:D5:0A:08:A5:7B:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/0B91942C6C8A11F0B2D971D2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:f280::/39
Signature Algorithm: sha256WithRSAEncryption
98:ae:c4:e9:65:a9:0a:16:8d:ed:a6:33:3c:bc:25:d9:bc:b0:
4f:82:0d:b7:ea:72:f8:b1:ba:a6:3c:21:90:1b:92:1d:09:bc:
b5:bf:ad:98:93:af:18:1e:92:f1:25:af:33:9b:f2:d0:8a:c3:
d1:2f:a8:a6:2d:6b:ba:bd:c2:95:d9:48:1d:a0:c2:0f:1c:05:
60:de:86:75:89:af:f6:73:22:19:f7:1a:ea:1c:78:4c:6b:24:
ef:4a:56:0a:33:29:b7:ec:3d:6b:a1:be:56:15:1f:92:ea:ca:
c2:44:2b:05:f2:42:db:ea:78:26:b3:70:bd:df:b2:60:79:c5:
bd:da:a0:a2:3b:bd:b9:8c:9a:17:be:95:bc:e2:d7:08:c3:02:
d6:0b:b7:bb:ce:d8:b3:63:7d:2d:f5:1e:9d:52:6f:db:58:6e:
79:3b:2b:5e:1c:86:8b:55:44:07:fa:b4:ed:8e:a0:00:18:12:
8e:a9:1a:6c:2d:a9:18:8d:c3:4b:2f:ac:35:01:08:76:6a:f2:
c3:86:09:b9:fa:14:5e:a8:15:97:af:3f:97:f0:fe:54:42:4f:
3f:47:07:b3:6e:f2:89:3c:db:2e:9e:52:2e:85:a5:d4:7b:07:
17:df:4a:76:aa:f9:4e:b3:d6:07:f4:33:8d:34:38:60:1f:82:
d4:17:1c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:17:23 2025 by rpki-client