Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/CBF565BE5B3B11F08BFC88BCDAE4EC9C.roa
File: CBF565BE5B3B11F08BFC88BCDAE4EC9C.roa (raw, json)
Hash identifier: CbJPohRYMuWwMa2AJ9lcD9673rUrCFi9pH5tHUngHkQ=
Subject key identifier: 1A:B6:B1:F0:F2:7B:0A:0A:CC:AD:26:AC:8C:3D:C3:03:4F:5A:38:3C
Certificate issuer: /CN=F36E2B8CAF/serialNumber=872130E69B3FB8035B1B25D3F6FB974A2A078ECC
Certificate serial: 0353
Authority key identifier: 87:21:30:E6:9B:3F:B8:03:5B:1B:25:D3:F6:FB:97:4A:2A:07:8E:CC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/hyEw5ps_uANbGyXT9vuXSioHjsw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/CBF565BE5B3B11F08BFC88BCDAE4EC9C.roa
Signing time: Mon 07 Jul 2025 14:08:04 +0000
ROA not before: Mon 07 Jul 2025 14:07:58 +0000
ROA not after: Tue 01 Jan 2030 14:07:58 +0000
asID: 37684
IP address blocks: 2c0f:f408:3000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/hyEw5ps_uANbGyXT9vuXSioHjsw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/hyEw5ps_uANbGyXT9vuXSioHjsw.mft
rsync://rpki.afrinic.net/repository/afrinic/hyEw5ps_uANbGyXT9vuXSioHjsw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Jul 2025 00:06:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 851 (0x353)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E2B8CAF, serialNumber=872130E69B3FB8035B1B25D3F6FB974A2A078ECC
Validity
Not Before: Jul 7 14:07:58 2025 GMT
Not After : Jan 1 14:07:58 2030 GMT
Subject: CN=686bd4c3-9852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d6:22:b0:3d:0e:0a:2d:d5:ba:08:46:90:fb:
26:7e:68:24:98:77:ef:bd:81:11:f0:44:63:f1:00:
1c:b1:df:4f:9c:67:dd:b2:61:74:53:88:96:aa:05:
25:7a:aa:41:cb:c5:96:ea:89:39:5e:c7:fa:3a:0f:
12:23:ac:10:ab:b9:8f:00:54:48:01:8c:92:1a:2e:
23:b8:5b:b7:2a:ee:e9:df:0f:f0:f9:ef:59:44:8b:
3c:4a:bd:e3:5d:c5:f3:93:d9:1c:ff:e2:0f:a9:eb:
a9:f3:41:fa:94:9f:af:b6:fc:1b:59:6f:ee:cf:25:
95:99:8e:8b:6a:6e:58:11:91:ee:6f:4e:4f:b3:17:
03:7a:39:3c:3b:30:90:f4:92:59:10:f3:59:18:bb:
41:2e:1e:af:27:46:66:aa:ae:6f:7d:67:6b:57:dd:
de:ee:c9:af:e7:e5:c5:4f:dd:de:50:b5:98:db:15:
5e:23:3b:61:e9:c5:71:30:6e:ce:a1:b2:61:43:23:
10:f6:5d:99:c7:56:45:67:de:5e:ae:d1:09:95:57:
d1:e4:f0:b8:e2:67:93:58:55:64:38:7a:db:e7:33:
2d:df:40:25:36:73:02:87:b8:96:b2:c4:55:fd:a9:
0a:be:15:85:0f:2c:85:63:45:ed:3e:05:d5:1a:9b:
5b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:B6:B1:F0:F2:7B:0A:0A:CC:AD:26:AC:8C:3D:C3:03:4F:5A:38:3C
X509v3 Authority Key Identifier:
keyid:87:21:30:E6:9B:3F:B8:03:5B:1B:25:D3:F6:FB:97:4A:2A:07:8E:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/hyEw5ps_uANbGyXT9vuXSioHjsw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hyEw5ps_uANbGyXT9vuXSioHjsw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/CBF565BE5B3B11F08BFC88BCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:f408:3000::/40
Signature Algorithm: sha256WithRSAEncryption
28:10:4f:9a:2c:e2:c3:d1:5f:33:ff:00:a6:d7:aa:03:6f:56:
d3:67:b0:bb:0a:6e:70:e5:cf:53:99:e7:3d:e5:a2:12:96:1e:
66:db:65:2a:40:1d:1d:31:b8:22:86:ab:24:79:8e:fa:41:1b:
24:8b:ef:51:c4:91:d1:23:db:d0:2f:b9:78:3b:34:6e:e5:73:
6b:63:54:90:9c:4a:9d:35:21:27:31:f0:e1:ad:e1:87:05:3d:
41:77:ce:a7:02:6b:37:da:30:87:5f:df:a4:a4:c8:a8:5c:f1:
d9:58:f6:4c:53:21:0c:2e:49:27:dc:df:62:06:42:51:2f:77:
95:d7:ea:79:a8:5a:36:ac:34:28:ee:1a:76:c8:cf:63:d7:59:
5f:eb:f6:b7:7e:e2:ec:ed:3c:50:07:92:19:2a:60:be:1d:e1:
8b:5d:e3:b9:2c:be:bc:31:a9:4c:6a:7c:31:71:a7:e5:1c:8e:
b0:d8:f0:71:1c:fb:8f:26:ab:71:6f:8f:10:cb:06:fc:4c:0e:
a4:0c:1a:16:63:81:3f:de:73:b9:0f:18:0b:2f:75:0a:cd:b9:
41:89:5b:81:73:a0:c3:51:bd:6a:f0:fe:95:39:1a:ea:af:65:
25:e6:51:8e:ee:60:56:c5:72:64:4d:b6:60:2d:74:bb:80:3e:
96:50:c4:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:29:13 2025 by rpki-client