Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/39FE2F2E831811F09D82DCF1DAE4EC9C.roa
File: 39FE2F2E831811F09D82DCF1DAE4EC9C.roa (raw, json)
Hash identifier: UZzjNNGJbyl+NtXQYWrgJLYfyDZNXxZB/9QQ1wIdJLE=
Subject key identifier: FA:5E:B1:58:2F:52:2F:F6:E4:FD:57:BC:9A:BC:7B:C5:BC:A0:1A:8D
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 0A73
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/39FE2F2E831811F09D82DCF1DAE4EC9C.roa
Signing time: Wed 27 Aug 2025 07:34:13 +0000
ROA not before: Wed 27 Aug 2025 07:34:08 +0000
ROA not after: Mon 27 Aug 2035 07:34:08 +0000
asID: 36916
IP address blocks: 41.180.108.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 20 Sep 2025 00:06:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2675 (0xa73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF, serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Aug 27 07:34:08 2025 GMT
Not After : Aug 27 07:34:08 2035 GMT
Subject: CN=68aeb4f5-d39f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4f:c6:80:ff:c5:b6:7c:6a:e9:85:04:bb:8e:
e7:5e:55:06:4d:dd:e6:8d:52:da:4b:ad:c5:bd:a4:
59:32:82:80:bf:59:7a:dc:65:0e:e3:21:97:9a:8d:
4e:11:13:5b:20:65:b4:a9:37:9d:05:5a:23:95:94:
c9:d6:11:34:ab:31:cd:57:5d:00:ae:37:55:47:87:
0e:52:33:5c:e4:a3:5a:0b:db:b5:5f:66:70:6c:f3:
fa:21:4e:ab:e0:d9:eb:8e:a1:0e:c8:f2:8a:70:80:
7c:98:54:7d:04:0c:77:77:4a:4b:22:c8:ef:33:0b:
d7:37:49:55:0e:04:c6:92:33:ac:a0:38:e0:04:6e:
6f:ba:41:8e:b2:f0:0d:85:3a:15:9c:32:9a:53:56:
db:f4:0f:1c:d1:4b:4b:2f:c2:88:73:1c:66:0e:c5:
66:60:b2:ff:6f:41:2b:5d:aa:71:a0:46:a1:6d:63:
42:62:6c:f4:92:bd:fd:9f:50:6c:aa:9f:fa:99:38:
d4:d3:b8:ec:05:b2:e5:af:59:4c:6d:5f:68:a6:c4:
b4:f1:cb:b9:87:ad:78:fe:f0:7f:4b:d1:46:fe:c9:
a0:79:93:20:31:80:89:04:26:f0:65:d5:3f:d8:77:
45:fd:cb:d2:2d:1c:b3:c1:24:b4:4a:b4:23:97:f0:
e8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:5E:B1:58:2F:52:2F:F6:E4:FD:57:BC:9A:BC:7B:C5:BC:A0:1A:8D
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/39FE2F2E831811F09D82DCF1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.180.108.0/23
Signature Algorithm: sha256WithRSAEncryption
56:84:e3:73:f3:4c:05:31:15:2e:34:78:87:80:ef:9f:26:17:
21:c4:13:c3:c7:10:e2:01:15:ac:d5:82:db:80:58:2c:1b:a7:
7c:db:ff:b3:5e:57:86:12:dd:66:2a:4e:be:34:7c:30:64:47:
1c:10:c2:13:d7:e7:b8:fb:a4:d4:47:a1:61:59:e3:8e:71:0c:
2a:0e:06:06:85:a1:f3:54:9d:f1:a9:a6:b5:db:d5:d7:b8:dc:
39:63:8d:ad:90:4f:80:ef:a4:fe:b2:a7:24:03:dd:73:a4:39:
d3:c0:e2:49:9d:99:11:c3:c9:4d:1f:5d:36:9e:ca:f1:f6:78:
96:af:76:04:fe:a4:78:b4:20:6e:fb:54:86:d2:4d:3e:73:cd:
3b:70:3d:3d:ef:ac:7f:e5:3e:2c:79:99:e5:d7:6e:4a:80:77:
85:e7:78:24:84:7b:d1:49:c7:6a:d6:b2:33:af:c6:ad:53:1b:
bd:01:ae:59:02:ae:10:c4:78:40:7d:dd:c4:b3:98:28:ce:25:
bb:7f:06:61:fe:5c:48:b8:4d:1f:3b:a7:11:4b:f9:e9:da:4c:
9d:8d:07:7d:da:84:66:82:f4:74:e6:ec:4c:ab:7d:d6:97:ba:
2f:dc:0a:64:56:01:d2:af:19:66:e6:25:32:a4:bd:80:44:1a:
df:32:8b:3b
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCnMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjlENkJBRjExMC8GA1UEBRMoOTU5NzMzREY1OUU4NkVBN0MyM0IyRkIzN0E2RTg0
NkRCQjE4ODI3QjAeFw0yNTA4MjcwNzM0MDhaFw0zNTA4MjcwNzM0MDhaMBgxFjAU
BgNVBAMTDTY4YWViNGY1LWQzOWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC9T8aA/8W2fGrphQS7judeVQZN3eaNUtpLrcW9pFkygoC/WXrcZQ7jIZea
jU4RE1sgZbSpN50FWiOVlMnWETSrMc1XXQCuN1VHhw5SM1zko1oL27VfZnBs8/oh
Tqvg2euOoQ7I8opwgHyYVH0EDHd3SksiyO8zC9c3SVUOBMaSM6ygOOAEbm+6QY6y
8A2FOhWcMppTVtv0DxzRS0svwohzHGYOxWZgsv9vQStdqnGgRqFtY0JibPSSvf2f
UGyqn/qZONTTuOwFsuWvWUxtX2imxLTxy7mHrXj+8H9L0Ub+yaB5kyAxgIkEJvBl
1T/Yd0X9y9ItHLPBJLRKtCOX8OhBAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU+l6x
WC9SL/bk/Ve8mrx7xbygGo0wHwYDVR0jBBgwFoAUlZcz31nobqfCOy+zem6EbbsY
gnswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY5RDZCL0JFRkI0NEVFODc5QTExRTk5RjM5MzM1MUY4QUVBMjI4L2xaY3oz
MW5vYnFmQ095LXplbTZFYmJzWWducy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2xaY3ozMW5vYnFmQ095LXplbTZFYmJzWWducy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjY5RDZCL0JFRkI0NEVFODc5QTExRTk5RjM5MzM1MUY4
QUVBMjI4LzM5RkUyRjJFODMxODExRjA5RDgyRENGMURBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAEptGwwDQYJKoZIhvcNAQEL
BQADggEBAFaE43PzTAUxFS40eIeA758mFyHEE8PHEOIBFazVgtuAWCwbp3zb/7Ne
V4YS3WYqTr40fDBkRxwQwhPX57j7pNRHoWFZ445xDCoOBgaFofNUnfGpprXb1de4
3Dljja2QT4DvpP6ypyQD3XOkOdPA4kmdmRHDyU0fXTaeyvH2eJavdgT+pHi0IG77
VIbSTT5zzTtwPT3vrH/lPix5meXXbkqAd4XneCSEe9FJx2rWsjOvxq1TG70BrlkC
rhDEeEB93cSzmCjOJbt/BmH+XEi4TR87pxFL+enaTJ2NB33ahGaC9HTm7EyrfdaX
ui/cCmRWAdKvGWbmJTKkvYBEGt8yizs=
-----END CERTIFICATE-----
Generated at Thu Sep 18 17:07:04 2025 by rpki-client