
Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/310F138C6C8A11F0ACBCADD2DAE4EC9C.roa
File: 310F138C6C8A11F0ACBCADD2DAE4EC9C.roa (raw, json)
Hash identifier: fxcGhzAzBhwkL0hLIjKC/TcmxYTGRd7y46X+u6xfxdY=
Subject key identifier: CB:16:D0:78:FA:85:93:EC:CE:EA:7B:DC:87:D1:79:A0:96:89:A6:3A
Certificate issuer: /CN=F36A1CEFAF/serialNumber=82F1C6611A3A1467DB3D78A4A5FED50A08A57B13
Certificate serial: 064C
Authority key identifier: 82:F1:C6:61:1A:3A:14:67:DB:3D:78:A4:A5:FE:D5:0A:08:A5:7B:13
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/310F138C6C8A11F0ACBCADD2DAE4EC9C.roa
Signing time: Tue 29 Jul 2025 14:42:04 +0000
ROA not before: Tue 29 Jul 2025 14:41:59 +0000
ROA not after: Sun 29 Jul 2035 14:41:59 +0000
asID: 37645
IP address blocks: 2c0f:f280:a00::/39 maxlen: 39
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.mft
rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 08 Aug 2025 00:06:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1612 (0x64c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A1CEFAF, serialNumber=82F1C6611A3A1467DB3D78A4A5FED50A08A57B13
Validity
Not Before: Jul 29 14:41:59 2025 GMT
Not After : Jul 29 14:41:59 2035 GMT
Subject: CN=6888ddbb-65a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:94:3f:93:98:49:7b:ab:7d:e5:2a:5b:36:d1:
55:14:ed:72:5d:94:95:0e:2c:ac:a7:40:0a:ac:0f:
62:72:9f:e4:4c:82:4a:dd:de:b1:b1:0b:4c:51:b7:
9e:e5:8a:91:97:6e:b1:5b:1c:7c:9f:87:65:fb:2b:
2a:4d:ca:c1:bc:76:87:20:2c:95:9c:e1:75:2d:3a:
54:3c:c4:93:d8:ca:32:d6:18:75:ef:7c:8b:e3:a6:
c6:3a:8c:b6:b4:a3:c0:84:bc:c1:7e:cd:95:28:1b:
51:c6:67:c4:71:81:28:9f:4f:8f:6a:86:c9:41:82:
5f:98:53:1a:61:be:1c:98:6b:f1:e5:74:44:08:2f:
a6:b7:10:93:fd:a8:58:14:16:17:09:c8:e3:01:8d:
dd:f1:4e:51:a6:7d:28:fd:de:06:67:52:a1:b9:da:
8f:fc:30:76:e5:f8:1e:cb:a0:d6:35:c6:ac:b4:cd:
b3:f6:33:3b:65:07:82:51:79:c8:4f:85:72:48:59:
d6:09:3b:e5:31:c1:2f:ba:4b:55:db:88:79:ed:a8:
9f:20:29:76:b8:f7:83:a8:91:ab:ff:56:41:25:08:
8e:99:a9:59:8e:56:1a:1d:fd:19:eb:65:6f:3a:34:
29:78:3f:0e:0f:3f:72:a9:46:f6:4f:10:8f:69:69:
65:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:16:D0:78:FA:85:93:EC:CE:EA:7B:DC:87:D1:79:A0:96:89:A6:3A
X509v3 Authority Key Identifier:
keyid:82:F1:C6:61:1A:3A:14:67:DB:3D:78:A4:A5:FE:D5:0A:08:A5:7B:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/310F138C6C8A11F0ACBCADD2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:f280:a00::/39
Signature Algorithm: sha256WithRSAEncryption
9f:06:59:f8:8f:1e:1c:f4:dc:29:ec:12:39:0e:39:8e:24:ef:
a2:93:9c:9e:7b:08:a7:6d:de:40:4f:37:3a:2a:81:f3:f5:7d:
f9:d1:85:f9:49:28:43:e8:73:cb:79:69:a4:6a:fc:e5:cd:f9:
f8:1e:10:ce:7e:c7:22:24:bd:7a:6c:a0:0d:55:7d:c8:c0:4a:
ef:5f:ac:b0:75:1b:1b:e7:ba:69:ec:39:2a:98:a6:11:2a:f9:
aa:f5:17:52:f1:aa:f0:9b:c4:5d:e7:0c:ef:72:1f:13:66:d2:
70:90:a4:aa:a4:05:b5:f1:2e:b7:7e:f6:9d:6e:75:2f:dc:40:
1b:f0:be:11:a1:3e:26:88:27:94:7c:d6:f7:1a:13:55:75:19:
6b:2a:93:48:71:3a:71:f3:1a:9e:f7:1b:de:d6:e4:55:30:64:
bc:59:98:86:9d:9a:b2:1f:69:2d:cc:41:91:3e:4a:7b:31:2f:
07:b2:7c:2b:cd:3e:cc:8f:61:b8:c3:99:e6:f2:d5:bf:1e:34:
da:20:db:f0:d8:3e:a2:3c:d9:ba:11:b6:f1:21:06:de:de:b4:
15:06:28:58:26:41:52:6d:b0:83:f7:ff:9b:76:8c:29:c2:9f:
3d:a8:58:2b:95:2a:52:13:79:88:8b:82:60:43:5b:61:5e:13:
2c:dc:0c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:12:46 2025 by rpki-client