Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/C07457B08A3711F0A002C2E7DAE4EC9C.roa
File: C07457B08A3711F0A002C2E7DAE4EC9C.roa (raw, json)
Hash identifier: Pe7GZmcC+gV4uLFF5b8V8YgWqeJmXfjZci1uqWUJRZA=
Subject key identifier: 48:A0:80:D9:A3:CE:D8:79:B3:1D:E8:67:4C:DF:C5:2E:64:A5:CA:31
Certificate issuer: /CN=F3668CFEAF/serialNumber=A8EF960514E336444D3CDE37B24B66DC39D43D1B
Certificate serial: 0338
Authority key identifier: A8:EF:96:05:14:E3:36:44:4D:3C:DE:37:B2:4B:66:DC:39:D4:3D:1B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/qO-WBRTjNkRNPN43sktm3DnUPRs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/C07457B08A3711F0A002C2E7DAE4EC9C.roa
Signing time: Fri 05 Sep 2025 09:07:31 +0000
ROA not before: Fri 05 Sep 2025 09:07:26 +0000
ROA not after: Mon 31 Dec 2035 09:07:26 +0000
asID: 328962
IP address blocks: 2c0f:eb00:400::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.crl
rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.mft
rsync://rpki.afrinic.net/repository/afrinic/qO-WBRTjNkRNPN43sktm3DnUPRs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 18 Sep 2025 03:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 824 (0x338)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3668CFEAF, serialNumber=A8EF960514E336444D3CDE37B24B66DC39D43D1B
Validity
Not Before: Sep 5 09:07:26 2025 GMT
Not After : Dec 31 09:07:26 2035 GMT
Subject: CN=68baa853-126d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:24:14:1b:36:d0:37:7b:fd:5f:09:b6:eb:81:
c9:ed:0e:ed:4e:c1:e2:ea:00:2c:6c:09:e8:87:00:
9a:2b:cf:5f:55:97:78:3b:df:69:92:65:51:61:ed:
b5:bc:e5:9a:4d:ce:af:81:94:86:b8:94:2e:4b:65:
75:45:8f:68:1e:b9:0d:cf:87:10:af:b6:28:3a:91:
8d:2d:c7:fa:40:8d:1a:3d:dd:78:68:2f:51:a1:e8:
aa:e2:95:68:a6:01:48:a0:48:c0:54:2e:97:85:aa:
6d:fd:19:e1:56:c4:e0:35:4b:cc:48:b7:73:30:aa:
3a:44:bf:c9:eb:3b:4b:5f:31:54:5a:95:02:10:dd:
26:85:dd:78:16:c0:9b:13:ea:ff:e1:91:ec:99:f6:
42:3f:67:14:87:05:c9:5c:11:4c:a1:d8:e2:d2:52:
53:92:36:a4:be:8e:09:fe:f7:cb:60:23:42:6c:a8:
c9:de:87:76:35:08:a2:57:da:4c:ab:0c:fc:c8:c9:
52:73:4a:af:2b:ff:74:f2:39:74:d0:ea:7a:aa:d2:
c1:cc:56:71:43:ed:90:ae:d9:71:a7:24:1c:de:5c:
f0:b4:29:36:e6:f7:ff:b7:9f:f2:cc:5e:e5:d4:61:
1f:fa:f8:50:46:da:14:ba:e5:d3:a3:71:18:5e:e2:
5a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A0:80:D9:A3:CE:D8:79:B3:1D:E8:67:4C:DF:C5:2E:64:A5:CA:31
X509v3 Authority Key Identifier:
keyid:A8:EF:96:05:14:E3:36:44:4D:3C:DE:37:B2:4B:66:DC:39:D4:3D:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qO-WBRTjNkRNPN43sktm3DnUPRs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/C07457B08A3711F0A002C2E7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:eb00:400::/40
Signature Algorithm: sha256WithRSAEncryption
11:67:24:f3:b9:19:e3:5b:5a:ff:df:9a:6f:97:37:51:4a:1a:
b4:f8:d3:97:51:57:83:f2:56:ed:90:30:59:70:1b:fa:41:54:
6c:8c:d6:5d:be:8a:44:cb:6f:b5:8c:98:88:dd:75:fb:70:25:
a0:8a:ff:77:11:d2:f2:84:f5:88:a8:1d:10:19:92:1a:9d:3c:
5e:9c:2c:9a:a8:94:d8:74:a9:87:aa:82:31:73:38:91:48:42:
f9:a9:b7:59:39:c6:0d:0b:f9:43:2d:0a:b4:8b:3d:fb:1a:3f:
67:7c:3b:6e:2e:ec:74:b8:bc:d6:19:fd:db:ff:bc:fd:36:fe:
51:12:5a:ec:97:7c:4b:f9:76:06:f8:8e:f3:f1:4d:8b:e0:52:
71:a8:93:73:a2:1c:f0:36:f7:6e:f2:29:d2:41:4d:53:af:78:
cb:19:72:48:7a:2b:a3:6d:72:c5:fa:fd:99:dd:48:7f:4f:a2:
96:bd:f9:f0:3a:fd:34:51:3b:35:27:37:a0:f4:cb:57:3a:43:
46:ff:1a:9c:df:24:60:62:42:bf:df:4f:a3:d9:5f:bb:f1:b6:
1c:3e:e2:d1:83:3e:d5:b4:c6:c8:48:1b:4b:08:28:11:bf:70:
fb:61:50:ba:96:f9:6a:7c:0e:2a:56:ff:b5:49:d6:f6:45:ce:
65:93:9d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 02:46:12 2025 by rpki-client