Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/A42FDE0E5E3011F0B6CA0CC4DAE4EC9C.roa
File: A42FDE0E5E3011F0B6CA0CC4DAE4EC9C.roa (raw, json)
Hash identifier: Ac2nu6upq7t1gl0xBIa3qrh3jUY/VotzPxg8MIknNhA=
Subject key identifier: B1:F3:E3:34:3C:C0:77:6F:43:C7:A9:A0:82:BF:9E:3A:70:D0:88:A1
Certificate issuer: /CN=F361ED63AF/serialNumber=3824AC5EE00439EEDA21A1A10109E8BF76E4FAB8
Certificate serial: 0605
Authority key identifier: 38:24:AC:5E:E0:04:39:EE:DA:21:A1:A1:01:09:E8:BF:76:E4:FA:B8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/OCSsXuAEOe7aIaGhAQnov3bk-rg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/A42FDE0E5E3011F0B6CA0CC4DAE4EC9C.roa
Signing time: Fri 11 Jul 2025 08:25:46 +0000
ROA not before: Fri 11 Jul 2025 08:25:40 +0000
ROA not after: Wed 10 Jul 2030 08:25:40 +0000
asID: 22355
IP address blocks: 2c0f:ffc8::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.crl
rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.mft
rsync://rpki.afrinic.net/repository/afrinic/OCSsXuAEOe7aIaGhAQnov3bk-rg.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 03 Aug 2025 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1541 (0x605)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F361ED63AF, serialNumber=3824AC5EE00439EEDA21A1A10109E8BF76E4FAB8
Validity
Not Before: Jul 11 08:25:40 2025 GMT
Not After : Jul 10 08:25:40 2030 GMT
Subject: CN=6870ca8a-a27e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e8:bc:d8:97:d4:50:5e:46:cd:82:37:d0:36:
56:28:2b:86:b5:d1:0b:c3:f8:64:79:27:0d:08:93:
71:39:d0:96:44:b0:d2:02:c4:84:96:05:cf:ef:ff:
82:73:29:92:e3:66:89:91:27:52:fe:10:fb:b5:8b:
5f:4d:16:64:60:3b:a1:46:86:2b:3e:3c:c2:c2:42:
1a:ca:32:a6:63:c8:63:1c:ec:9d:32:42:08:2f:58:
70:c7:64:8f:de:ce:b1:4c:82:ba:53:92:0d:46:b9:
a3:7d:93:4e:77:76:be:82:0f:76:f4:82:94:5c:2e:
51:f1:ff:1a:91:c3:c7:24:e9:92:a2:ba:4f:b4:27:
9f:e4:d5:70:ab:7d:b5:c1:de:80:ab:6d:33:d5:9e:
51:2c:17:0e:bd:77:29:db:12:31:a7:ed:c3:35:e2:
96:a3:8a:f0:9b:7c:6e:1c:4f:9b:b3:08:92:31:1a:
c9:f4:85:21:ce:4c:47:38:f8:c8:34:12:49:ea:97:
7e:a1:db:7b:52:49:04:ea:39:d6:4b:cf:66:dc:40:
8a:21:97:0d:d9:2f:9b:fd:ff:b4:39:92:d6:26:49:
5e:bf:71:4f:c8:4d:9f:e6:8f:fc:de:0d:d2:53:4e:
5d:f7:8f:f3:c1:8f:3a:2c:2f:85:a1:ed:9c:76:44:
cc:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:F3:E3:34:3C:C0:77:6F:43:C7:A9:A0:82:BF:9E:3A:70:D0:88:A1
X509v3 Authority Key Identifier:
keyid:38:24:AC:5E:E0:04:39:EE:DA:21:A1:A1:01:09:E8:BF:76:E4:FA:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OCSsXuAEOe7aIaGhAQnov3bk-rg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/A42FDE0E5E3011F0B6CA0CC4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:ffc8::/32
Signature Algorithm: sha256WithRSAEncryption
a3:a6:02:5f:bf:85:43:00:a8:20:e9:bd:73:4e:37:6f:9e:bc:
30:a3:7d:cc:df:d7:a1:d9:e9:47:27:d9:45:c0:fb:51:4b:dc:
a0:ad:e8:ec:3b:4a:9f:d0:5e:a1:94:d4:a4:c5:61:7f:86:a0:
9d:d3:c3:c5:56:4e:86:14:cf:e6:78:f5:2a:f2:56:e7:f8:86:
52:d3:4d:16:04:e5:b5:24:7d:8f:21:8f:b9:ce:04:f5:66:28:
22:af:bb:cb:d8:3d:c2:03:dd:b0:3e:f0:36:21:b9:3a:87:29:
42:62:9b:4f:6d:58:54:a8:c9:5d:ed:db:3e:7f:7d:75:a9:81:
11:67:6a:e0:8e:85:ad:26:6d:73:25:cf:62:5d:72:7e:18:1a:
eb:5c:71:48:35:76:96:81:89:93:54:82:14:98:f7:42:5e:40:
6e:e3:1e:ff:38:39:32:f7:1a:a0:25:bb:2f:20:38:76:70:23:
f2:f6:62:27:ae:1f:dc:49:d9:2c:18:ea:45:f5:99:3c:e1:17:
d8:c3:e0:5d:ac:3d:f0:aa:93:45:2c:95:fb:ef:ce:74:f6:cd:
16:ca:47:24:3b:b4:ae:3c:a6:54:b5:f3:b0:cc:80:d7:01:68:
4c:9a:92:de:07:46:c9:61:76:43:6f:c8:bf:73:2f:a3:53:06:
e6:67:cc:eb
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBgUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MUVENjNBRjExMC8GA1UEBRMoMzgyNEFDNUVFMDA0MzlFRURBMjFBMUExMDEwOUU4
QkY3NkU0RkFCODAeFw0yNTA3MTEwODI1NDBaFw0zMDA3MTAwODI1NDBaMBgxFjAU
BgNVBAMTDTY4NzBjYThhLWEyN2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDL6LzYl9RQXkbNgjfQNlYoK4a10QvD+GR5Jw0Ik3E50JZEsNICxISWBc/v
/4JzKZLjZomRJ1L+EPu1i19NFmRgO6FGhis+PMLCQhrKMqZjyGMc7J0yQggvWHDH
ZI/ezrFMgrpTkg1GuaN9k053dr6CD3b0gpRcLlHx/xqRw8ck6ZKiuk+0J5/k1XCr
fbXB3oCrbTPVnlEsFw69dynbEjGn7cM14pajivCbfG4cT5uzCJIxGsn0hSHOTEc4
+Mg0Eknql36h23tSSQTqOdZLz2bcQIohlw3ZL5v9/7Q5ktYmSV6/cU/ITZ/mj/ze
DdJTTl33j/PBjzosL4Wh7Zx2RMyBAgMBAAGjggKmMIICojAdBgNVHQ4EFgQUsfPj
NDzAd29Dx6mggr+eOnDQiKEwHwYDVR0jBBgwFoAUOCSsXuAEOe7aIaGhAQnov3bk
+rgwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjFFRDYzL0JDNzJENkI2Q0FBNDExRUI5QzJBNEE1MkY4QUVBMjI4L09DU3NY
dUFFT2U3YUlhR2hBUW5vdjNiay1yZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL09DU3NYdUFFT2U3YUlhR2hBUW5vdjNiay1yZy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjFFRDYzL0JDNzJENkI2Q0FBNDExRUI5QzJBNEE1MkY4
QUVBMjI4L0E0MkZERTBFNUUzMDExRjBCNkNBMENDNERBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAsD//IMA0GCSqGSIb3DQEB
CwUAA4IBAQCjpgJfv4VDAKgg6b1zTjdvnrwwo33M39eh2elHJ9lFwPtRS9ygrejs
O0qf0F6hlNSkxWF/hqCd08PFVk6GFM/mePUq8lbn+IZS000WBOW1JH2PIY+5zgT1
Zigir7vL2D3CA92wPvA2Ibk6hylCYptPbVhUqMld7ds+f311qYERZ2rgjoWtJm1z
Jc9iXXJ+GBrrXHFINXaWgYmTVIIUmPdCXkBu4x7/ODky9xqgJbsvIDh2cCPy9mIn
rh/cSdksGOpF9Zk84RfYw+BdrD3wqpNFLJX778509s0WykckO7SuPKZUtfOwzIDX
AWhMmpLeB0bJYXZDb8i/cy+jUwbmZ8zr
-----END CERTIFICATE-----
Generated at Fri Aug 1 18:09:37 2025 by rpki-client