Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F151E/F98CDB7C1A1911EC9393452DD8A014CE/20CA242CAE8811F08579A28EDAE4EC9C.roa
File: 20CA242CAE8811F08579A28EDAE4EC9C.roa (raw, json)
Hash identifier: fsxmXnslbAUwwYawnmsD45MhR7pqaGgeQtYlfmeLKUs=
Subject key identifier: 40:9F:44:AF:FC:94:DB:30:73:50:96:4A:90:D9:2B:7B:83:40:56:6C
Certificate issuer: /CN=F36F151EAF/serialNumber=EA95913551827BA6D653BA86AE93A4EE1F58CD5D
Certificate serial: 0610
Authority key identifier: EA:95:91:35:51:82:7B:A6:D6:53:BA:86:AE:93:A4:EE:1F:58:CD:5D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/6pWRNVGCe6bWU7qGrpOk7h9YzV0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F151E/F98CDB7C1A1911EC9393452DD8A014CE/20CA242CAE8811F08579A28EDAE4EC9C.roa
Signing time: Tue 21 Oct 2025 14:13:34 +0000
ROA not before: Tue 21 Oct 2025 14:13:29 +0000
ROA not after: Sat 20 Oct 2035 14:13:29 +0000
asID: 328585
IP address blocks: 2c0f:26c0::/28 maxlen: 28
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F151E/F98CDB7C1A1911EC9393452DD8A014CE/6pWRNVGCe6bWU7qGrpOk7h9YzV0.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F151E/F98CDB7C1A1911EC9393452DD8A014CE/6pWRNVGCe6bWU7qGrpOk7h9YzV0.mft
rsync://rpki.afrinic.net/repository/afrinic/6pWRNVGCe6bWU7qGrpOk7h9YzV0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1552 (0x610)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F151EAF, serialNumber=EA95913551827BA6D653BA86AE93A4EE1F58CD5D
Validity
Not Before: Oct 21 14:13:29 2025 GMT
Not After : Oct 20 14:13:29 2035 GMT
Subject: CN=68f7950e-b3d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e4:66:aa:08:42:1d:1b:6e:90:79:5b:d3:77:
1d:a1:c0:2f:81:45:a5:45:97:98:c2:e3:60:af:7f:
6a:c2:d5:a8:65:87:ed:88:17:fa:b9:e5:76:4e:f4:
10:f4:69:95:3a:6c:3c:fa:0c:d8:b1:3c:a9:ff:38:
4d:04:b2:9d:bb:2b:73:af:d7:a4:c8:38:d7:da:f9:
23:2a:fb:e3:f8:c3:25:2a:7d:3a:81:01:54:ce:b0:
44:57:7f:54:88:d7:fc:1b:c3:85:85:b7:1a:fe:21:
67:92:19:fc:0f:02:ee:40:2c:e2:a5:d5:62:48:3f:
0a:44:52:03:91:50:55:77:b7:5a:31:86:5e:01:e4:
bb:3b:ae:49:e3:1e:3f:d9:45:6b:bd:0c:bb:15:e6:
86:6d:26:95:0b:c5:22:1b:64:15:3d:13:d8:f7:83:
8f:74:7a:6d:59:91:13:2b:e5:ec:d7:46:f1:81:44:
aa:28:e1:f9:a9:a9:51:71:e8:eb:92:aa:8a:d0:fd:
2e:40:d5:5c:e0:98:56:56:29:c5:33:8e:41:c8:e7:
9a:3d:79:d9:27:aa:2b:36:4b:3e:3a:77:14:8b:14:
6d:d0:52:2a:7b:f3:77:71:63:51:08:0b:c9:ba:af:
3b:6f:34:eb:f3:37:96:f1:1b:93:49:0b:d1:b4:09:
dc:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:9F:44:AF:FC:94:DB:30:73:50:96:4A:90:D9:2B:7B:83:40:56:6C
X509v3 Authority Key Identifier:
keyid:EA:95:91:35:51:82:7B:A6:D6:53:BA:86:AE:93:A4:EE:1F:58:CD:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F151E/F98CDB7C1A1911EC9393452DD8A014CE/6pWRNVGCe6bWU7qGrpOk7h9YzV0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/6pWRNVGCe6bWU7qGrpOk7h9YzV0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F151E/F98CDB7C1A1911EC9393452DD8A014CE/20CA242CAE8811F08579A28EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:26c0::/28
Signature Algorithm: sha256WithRSAEncryption
51:07:7a:06:bc:e6:7e:e4:e6:38:54:08:24:f5:1c:c9:b0:1f:
21:ca:48:4c:89:f9:aa:59:eb:fd:6b:bc:68:74:d0:19:67:5c:
99:c8:5d:9a:0f:02:d5:1e:ac:71:25:2d:3c:c1:e5:ca:a9:35:
9c:b3:17:a7:57:ea:33:bc:91:b1:70:ff:27:cf:a9:20:98:a8:
64:77:d5:08:21:b2:b1:ae:56:c7:0c:c9:e6:ca:1e:9a:c9:ab:
c0:ff:46:eb:9f:1f:06:78:8c:75:97:92:b8:be:e0:b3:1e:ef:
12:60:0c:41:e3:04:df:9e:42:3a:5b:4a:eb:1a:eb:9c:be:e2:
81:d5:be:20:c9:21:9d:13:c3:4c:d4:6c:93:37:3b:58:0d:67:
20:ac:68:0c:2f:52:ad:65:04:71:41:c5:75:ae:1f:f4:cb:0e:
49:97:98:b5:96:6b:df:81:71:fb:fa:df:ba:73:6f:99:a4:7e:
57:42:15:bc:79:05:f2:7e:ef:fc:9c:5d:14:81:04:24:62:54:
9b:42:cb:5e:72:e3:c1:75:c3:1e:5c:c3:f0:47:7b:b8:35:0b:
0a:c3:bc:97:6e:07:95:ac:ca:fb:90:ad:d4:6b:27:c4:a4:5f:
66:4a:df:95:ed:4e:e6:e3:93:e7:79:57:b7:98:19:3d:0f:ab:
21:1a:f1:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:23:18 2025 by rpki-client