Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36628D0/4F501028C73411EEB4A18965775412E6/1D9C2C128EE111F0A05232D6DAE4EC9C.roa
File: 1D9C2C128EE111F0A05232D6DAE4EC9C.roa (raw, json)
Hash identifier: 7/mPJegDzNGobxEPvcoOh9hmADeWp/7DZNVsknf5CfY=
Subject key identifier: 21:4D:34:EC:1E:8F:0C:46:37:EA:59:C0:2C:75:82:3F:B3:13:B9:44
Certificate issuer: /CN=F36628D0AF/serialNumber=CF3F4F9243A61D3BED933CC0F3533CA2BE093BDC
Certificate serial: 025B
Authority key identifier: CF:3F:4F:92:43:A6:1D:3B:ED:93:3C:C0:F3:53:3C:A2:BE:09:3B:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/zz9PkkOmHTvtkzzA81M8or4JO9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36628D0/4F501028C73411EEB4A18965775412E6/1D9C2C128EE111F0A05232D6DAE4EC9C.roa
Signing time: Thu 11 Sep 2025 07:29:57 +0000
ROA not before: Thu 11 Sep 2025 07:29:52 +0000
ROA not after: Tue 11 Sep 2035 07:29:52 +0000
asID: 329350
IP address blocks: 2c0f:6040:c000::/34 maxlen: 128
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36628D0/4F501028C73411EEB4A18965775412E6/zz9PkkOmHTvtkzzA81M8or4JO9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F36628D0/4F501028C73411EEB4A18965775412E6/zz9PkkOmHTvtkzzA81M8or4JO9w.mft
rsync://rpki.afrinic.net/repository/afrinic/zz9PkkOmHTvtkzzA81M8or4JO9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 19 Sep 2025 04:04:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 603 (0x25b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36628D0AF, serialNumber=CF3F4F9243A61D3BED933CC0F3533CA2BE093BDC
Validity
Not Before: Sep 11 07:29:52 2025 GMT
Not After : Sep 11 07:29:52 2035 GMT
Subject: CN=68c27a75-37be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:18:b5:3a:fa:2f:c1:0b:80:32:dc:ec:6d:3d:
48:ac:0a:87:74:f2:e3:55:7b:cf:4f:f0:95:8d:79:
0f:57:e1:60:3b:07:e3:2e:36:48:6b:69:a5:30:5c:
1d:f1:f8:31:72:f1:da:d7:6c:ae:5e:d1:50:37:9a:
56:19:6b:cf:1f:cd:4e:7e:f4:69:77:b5:0d:59:5b:
14:38:1d:8a:41:35:59:03:04:e9:9f:44:e3:89:d2:
e9:ee:fc:a9:a5:bd:57:ed:d3:39:04:24:e3:fe:ad:
03:02:07:9b:ad:6f:be:db:13:4c:ca:33:cb:fc:cf:
af:6f:12:f0:81:e3:f6:99:63:f8:f9:7c:99:92:b8:
26:69:23:1d:5f:2a:5b:80:1a:a7:62:dc:dc:ac:88:
86:4a:7b:d0:18:df:88:0a:5c:83:a0:50:27:41:2b:
df:3d:a5:24:ca:ee:06:1e:ee:4e:dd:d7:65:f3:b9:
5b:b9:8b:94:ed:99:25:d8:53:5d:bf:23:f9:90:c3:
b6:0f:cc:27:3c:60:80:69:c5:13:0a:cf:f8:92:fa:
79:be:72:79:53:72:03:8c:dd:ac:9d:bf:0a:d8:c0:
bc:4d:4a:d2:30:9b:d8:49:7c:d7:5f:7f:f3:a5:1a:
56:1e:ca:89:3b:b6:6b:87:c9:a4:04:aa:c1:4d:8d:
17:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:4D:34:EC:1E:8F:0C:46:37:EA:59:C0:2C:75:82:3F:B3:13:B9:44
X509v3 Authority Key Identifier:
keyid:CF:3F:4F:92:43:A6:1D:3B:ED:93:3C:C0:F3:53:3C:A2:BE:09:3B:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36628D0/4F501028C73411EEB4A18965775412E6/zz9PkkOmHTvtkzzA81M8or4JO9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zz9PkkOmHTvtkzzA81M8or4JO9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36628D0/4F501028C73411EEB4A18965775412E6/1D9C2C128EE111F0A05232D6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:6040:c000::/34
Signature Algorithm: sha256WithRSAEncryption
c0:e5:68:96:cc:62:40:d3:ec:e0:48:fe:dd:d4:d4:54:93:79:
83:b1:c9:15:0e:aa:1e:ea:8e:1c:d8:b9:de:08:16:cb:3f:f7:
d8:e1:6e:d0:b9:54:6a:01:93:ef:f2:7b:94:82:84:03:b1:d6:
3f:2b:2e:90:fc:84:a4:66:9c:ca:9b:81:df:58:fe:c3:c9:29:
ca:aa:de:68:6b:92:79:a3:41:7c:ad:b4:50:0f:ee:49:14:53:
76:df:a4:1e:53:39:a2:63:00:c9:5b:1d:5d:c5:bf:a2:7b:ef:
0e:2d:01:7e:06:32:7d:00:8e:da:6c:6b:cb:97:f3:2f:90:fd:
d8:02:d8:f4:d8:ba:bc:8e:74:2c:5d:26:32:e6:bb:a1:ea:5c:
88:4c:0d:a1:2f:46:ea:fa:81:7a:3d:27:f5:89:45:e3:d2:ee:
eb:3f:16:02:82:06:78:15:27:8f:9c:86:19:cb:17:2c:c0:b3:
f9:fe:9f:04:f4:d8:07:c4:a9:74:d4:87:fa:3f:3a:74:91:0d:
c1:80:be:9f:36:a7:a9:b2:51:48:4c:fe:87:e4:0d:e4:06:87:
89:59:a4:f4:30:f1:15:2f:a7:3b:58:41:08:ba:00:b7:e7:45:
ad:b2:0a:cf:74:46:ca:84:0f:22:5f:f2:1a:dc:06:61:99:d8:
51:08:45:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 03:55:22 2025 by rpki-client