Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/88A2141457EF11F0A48D2AC4DAE4EC9C.roa
File: 88A2141457EF11F0A48D2AC4DAE4EC9C.roa (raw, json)
Hash identifier: jwxUZ7nPgwu7fA4ugBBwspQYrmkSwfz/KGPZiiShxok=
Subject key identifier: D7:C6:39:1D:2F:E5:D3:49:C1:9C:87:24:69:A3:96:34:FF:95:97:1A
Certificate issuer: /CN=F36DB492AF/serialNumber=F43E0668EF72BD87FA5368BE2B6815C0BCB40149
Certificate serial: 0448
Authority key identifier: F4:3E:06:68:EF:72:BD:87:FA:53:68:BE:2B:68:15:C0:BC:B4:01:49
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/88A2141457EF11F0A48D2AC4DAE4EC9C.roa
Signing time: Thu 03 Jul 2025 09:24:35 +0000
ROA not before: Thu 03 Jul 2025 09:24:31 +0000
ROA not after: Fri 07 Jul 2028 09:24:31 +0000
asID: 23764
IP address blocks: 2c0f:f7a8:9011::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft
rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1096 (0x448)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DB492AF, serialNumber=F43E0668EF72BD87FA5368BE2B6815C0BCB40149
Validity
Not Before: Jul 3 09:24:31 2025 GMT
Not After : Jul 7 09:24:31 2028 GMT
Subject: CN=68664c53-4bfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:99:aa:e6:07:ac:5e:11:33:7c:9a:f9:75:2b:
f6:6a:4d:bc:d2:9b:7d:9b:83:30:65:21:71:bf:34:
4d:18:1c:56:cc:af:18:b0:bc:7b:ad:bc:81:f0:ce:
8d:60:7d:9c:89:31:9d:e2:42:6f:51:84:6f:42:e9:
9d:50:4b:11:65:0c:ad:8e:5f:67:53:51:cf:c9:35:
97:66:75:bd:49:b5:f9:01:8d:09:9f:1b:84:be:cf:
0b:3c:4b:e7:c1:e8:d9:d6:62:ef:3b:8b:b3:04:55:
4d:8c:0e:5f:38:59:0b:6d:84:86:59:43:cf:89:db:
3b:67:35:8e:9a:59:df:b0:ec:41:4a:53:80:6d:ec:
5b:a2:a6:83:8c:99:03:0b:52:9d:1f:8c:a2:6e:f3:
32:b5:66:ff:e4:34:1f:69:86:12:c6:32:d3:25:f5:
e6:6d:3b:77:6a:9d:79:58:ae:63:1b:76:64:1b:cf:
b4:9c:f4:1b:68:d7:ed:7d:14:a7:57:7a:14:87:b4:
31:2a:77:47:0e:a1:86:08:39:d2:3a:64:b2:f1:02:
c9:cf:06:54:8f:c2:91:ed:b1:2c:86:75:10:ef:92:
be:d6:9a:df:4e:11:89:58:2d:d0:6b:15:13:ec:ac:
d1:ac:9a:49:74:bb:88:2a:b4:f2:c7:b0:9d:c8:36:
6e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:C6:39:1D:2F:E5:D3:49:C1:9C:87:24:69:A3:96:34:FF:95:97:1A
X509v3 Authority Key Identifier:
keyid:F4:3E:06:68:EF:72:BD:87:FA:53:68:BE:2B:68:15:C0:BC:B4:01:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/88A2141457EF11F0A48D2AC4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:f7a8:9011::/48
Signature Algorithm: sha256WithRSAEncryption
cc:b4:91:1a:03:07:00:51:44:b6:45:57:8c:80:33:63:bc:c7:
14:ea:9d:38:d0:6d:94:96:96:1a:a3:4c:a6:ac:1e:bd:c6:04:
71:c3:15:80:5e:fe:e3:0b:92:c7:81:cd:b6:a1:03:c4:4c:5c:
d0:6a:06:b2:3f:9c:2c:38:68:ec:3f:1e:45:8b:4c:9d:03:25:
00:62:4f:14:83:a6:12:09:8f:ff:81:4c:78:68:10:2b:3a:f1:
b0:7a:fc:59:85:23:bd:c0:b3:06:93:39:af:86:1e:5f:e5:b0:
f1:65:4d:76:ec:46:48:3b:d4:de:40:e0:54:23:c9:cb:4f:af:
db:40:49:c9:a5:e2:d5:1b:e5:36:57:1a:c1:32:88:9d:f5:8a:
4e:f8:68:56:16:7c:98:cf:2d:98:13:84:e1:39:37:a4:d1:27:
1c:24:21:ea:ab:08:55:60:7b:5a:9a:84:12:7e:3a:08:9a:19:
1e:7f:2e:ef:9a:a1:1c:d0:6a:a8:3d:3f:85:96:36:d9:68:44:
2e:93:32:d3:57:3d:7a:77:48:d9:fb:5f:6d:86:06:bf:01:5a:
39:70:f9:c5:4c:9b:ac:8c:97:e9:81:ec:7f:1e:dd:e7:71:db:
91:5c:76:45:39:49:d3:2f:5b:a7:45:1a:55:05:dd:1f:42:c6:
1e:20:d1:22
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgICBEgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
REI0OTJBRjExMC8GA1UEBRMoRjQzRTA2NjhFRjcyQkQ4N0ZBNTM2OEJFMkI2ODE1
QzBCQ0I0MDE0OTAeFw0yNTA3MDMwOTI0MzFaFw0yODA3MDcwOTI0MzFaMBgxFjAU
BgNVBAMTDTY4NjY0YzUzLTRiZmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCtmarmB6xeETN8mvl1K/ZqTbzSm32bgzBlIXG/NE0YHFbMrxiwvHutvIHw
zo1gfZyJMZ3iQm9RhG9C6Z1QSxFlDK2OX2dTUc/JNZdmdb1JtfkBjQmfG4S+zws8
S+fB6NnWYu87i7MEVU2MDl84WQtthIZZQ8+J2ztnNY6aWd+w7EFKU4Bt7FuipoOM
mQMLUp0fjKJu8zK1Zv/kNB9phhLGMtMl9eZtO3dqnXlYrmMbdmQbz7Sc9Bto1+19
FKdXehSHtDEqd0cOoYYIOdI6ZLLxAsnPBlSPwpHtsSyGdRDvkr7Wmt9OEYlYLdBr
FRPsrNGsmkl0u4gqtPLHsJ3INm6VAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU18Y5
HS/l00nBnIckaaOWNP+VlxowHwYDVR0jBBgwFoAU9D4GaO9yvYf6U2i+K2gVwLy0
AUkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkRCNDkyLzEwREE5OTc2NEEwMzExRUQ4RjU5RDg5RUYxMjIyNDY4LzlENEdh
Tzl5dllmNlUyaS1LMmdWd0x5MEFVay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzlENEdhTzl5dllmNlUyaS1LMmdWd0x5MEFVay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkRCNDkyLzEwREE5OTc2NEEwMzExRUQ4RjU5RDg5RUYx
MjIyNDY4Lzg4QTIxNDE0NTdFRjExRjBBNDhEMkFDNERBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAsD/eokBEwDQYJKoZIhvcN
AQELBQADggEBAMy0kRoDBwBRRLZFV4yAM2O8xxTqnTjQbZSWlhqjTKasHr3GBHHD
FYBe/uMLkseBzbahA8RMXNBqBrI/nCw4aOw/HkWLTJ0DJQBiTxSDphIJj/+BTHho
ECs68bB6/FmFI73AswaTOa+GHl/lsPFlTXbsRkg71N5A4FQjyctPr9tAScml4tUb
5TZXGsEyiJ31ik74aFYWfJjPLZgThOE5N6TRJxwkIeqrCFVge1qahBJ+OgiaGR5/
Lu+aoRzQaqg9P4WWNtloRC6TMtNXPXp3SNn7X22GBr8BWjlw+cVMm6yMl+mB7H8e
3edx25FcdkU5SdMvW6dFGlUF3R9Cxh4g0SI=
-----END CERTIFICATE-----
Generated at Sun Jul 20 21:50:09 2025 by rpki-client