Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/17DD0894877211F08B8BA7D2DAE4EC9C.roa
File: 17DD0894877211F08B8BA7D2DAE4EC9C.roa (raw, json)
Hash identifier: whOLduQqVVvaNHj/zrflF8U3oey5iDbkzbCNZuEmZJ4=
Subject key identifier: EB:09:ED:EB:1E:57:5C:0B:C4:3E:F9:C9:D8:FE:BA:0C:33:F0:AD:09
Certificate issuer: /CN=F366FE6CAF/serialNumber=4A1FE76B4DFB0173B6F31B7F36A5A982E08D9C19
Certificate serial: 0767
Authority key identifier: 4A:1F:E7:6B:4D:FB:01:73:B6:F3:1B:7F:36:A5:A9:82:E0:8D:9C:19
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Sh_na037AXO28xt_NqWpguCNnBk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/17DD0894877211F08B8BA7D2DAE4EC9C.roa
Signing time: Mon 01 Sep 2025 20:27:35 +0000
ROA not before: Mon 01 Sep 2025 20:27:30 +0000
ROA not after: Sat 01 Sep 2035 20:27:30 +0000
asID: 328748
IP address blocks: 2c0f:e9f0:a000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/Sh_na037AXO28xt_NqWpguCNnBk.crl
rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/Sh_na037AXO28xt_NqWpguCNnBk.mft
rsync://rpki.afrinic.net/repository/afrinic/Sh_na037AXO28xt_NqWpguCNnBk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 20 Sep 2025 00:06:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1895 (0x767)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F366FE6CAF, serialNumber=4A1FE76B4DFB0173B6F31B7F36A5A982E08D9C19
Validity
Not Before: Sep 1 20:27:30 2025 GMT
Not After : Sep 1 20:27:30 2035 GMT
Subject: CN=68b601b7-374d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1a:b9:dc:a4:99:7d:c0:4e:b3:9c:00:d5:4c:
5e:0e:c8:97:70:e5:25:3b:19:a1:28:54:37:54:45:
ee:e9:03:50:18:0a:6f:14:8f:23:cd:f4:0d:8b:29:
91:5d:c5:4b:b3:b4:8a:58:be:ef:a7:ec:ad:fd:df:
8f:13:ca:ca:c9:cc:05:ba:9c:16:26:9c:c8:63:73:
5c:ba:ee:f7:43:6d:9a:cb:fb:fa:9f:e3:9b:d0:42:
0d:cc:77:25:fc:da:a7:62:e1:95:08:88:a9:e9:08:
fd:7f:15:8e:3b:a4:d5:b2:b3:06:06:d2:48:60:2a:
b8:25:da:7a:6b:a0:ad:68:ca:89:05:02:aa:47:09:
51:40:c7:9c:c4:e1:94:43:82:57:c2:62:e9:8a:cb:
61:29:78:04:d5:4c:03:ce:82:d2:33:ee:84:70:9a:
fd:0f:ca:3a:b7:18:1c:4e:54:ce:eb:df:21:58:82:
48:c4:58:bd:9e:30:bc:5c:a1:c1:23:16:26:4a:72:
54:21:5b:07:e2:ed:e2:5c:17:0d:b8:b7:ea:d8:cc:
f3:7f:29:13:fa:5a:99:5a:9e:b5:95:0b:15:ed:ca:
8b:82:d3:9c:e1:37:08:48:ab:56:07:20:dd:d9:17:
4e:b5:3f:4f:15:9f:e6:ec:57:84:5a:69:93:e7:2b:
b9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:09:ED:EB:1E:57:5C:0B:C4:3E:F9:C9:D8:FE:BA:0C:33:F0:AD:09
X509v3 Authority Key Identifier:
keyid:4A:1F:E7:6B:4D:FB:01:73:B6:F3:1B:7F:36:A5:A9:82:E0:8D:9C:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/Sh_na037AXO28xt_NqWpguCNnBk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Sh_na037AXO28xt_NqWpguCNnBk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/17DD0894877211F08B8BA7D2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:e9f0:a000::/40
Signature Algorithm: sha256WithRSAEncryption
97:6f:32:06:a5:b3:70:e1:50:bb:06:3e:38:fc:bb:fd:89:29:
d0:08:54:a2:51:c0:60:70:4f:be:45:67:28:3e:a4:5c:98:e6:
28:f0:93:9f:de:c8:9e:37:30:81:51:52:05:38:f4:09:2e:92:
cc:e1:1f:68:ff:d3:71:17:32:cc:38:cd:67:81:91:81:42:4c:
9b:2f:bb:62:09:7e:ec:13:a8:5f:fc:45:84:4f:9d:01:4e:f3:
71:ea:7c:e1:1f:fd:7c:7d:69:a4:f8:91:1c:f7:64:8a:3c:04:
e5:00:19:04:93:4c:ee:06:c1:13:cb:24:d6:53:8d:c6:53:51:
ea:f7:0e:4e:2d:bb:36:da:32:50:8b:d3:ca:c2:e5:00:28:eb:
ee:fd:ba:27:df:c7:9b:c8:94:b5:59:4e:dd:d8:77:c2:b8:0e:
ea:e3:9a:de:09:bf:b4:ad:32:02:71:67:ba:6c:72:e6:8f:98:
5a:9c:a8:89:fd:dc:5f:c7:85:0b:fa:60:dd:bd:91:b2:db:20:
f5:7d:14:08:80:91:d9:43:57:07:d7:f3:e1:a8:ce:1c:a8:a1:
fc:42:e5:c9:57:85:62:46:25:99:87:a6:3a:ba:9c:92:0a:fe:
99:95:6c:ae:a3:d7:40:59:7b:e0:95:ee:64:a4:a2:d2:99:11:
b8:4f:5e:17
-----BEGIN CERTIFICATE-----
MIIFhTCCBG2gAwIBAgICB2cwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NkZFNkNBRjExMC8GA1UEBRMoNEExRkU3NkI0REZCMDE3M0I2RjMxQjdGMzZBNUE5
ODJFMDhEOUMxOTAeFw0yNTA5MDEyMDI3MzBaFw0zNTA5MDEyMDI3MzBaMBgxFjAU
BgNVBAMTDTY4YjYwMWI3LTM3NGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCyGrncpJl9wE6znADVTF4OyJdw5SU7GaEoVDdURe7pA1AYCm8UjyPN9A2L
KZFdxUuztIpYvu+n7K39348TysrJzAW6nBYmnMhjc1y67vdDbZrL+/qf45vQQg3M
dyX82qdi4ZUIiKnpCP1/FY47pNWyswYG0khgKrgl2nproK1oyokFAqpHCVFAx5zE
4ZRDglfCYumKy2EpeATVTAPOgtIz7oRwmv0Pyjq3GBxOVM7r3yFYgkjEWL2eMLxc
ocEjFiZKclQhWwfi7eJcFw24t+rYzPN/KRP6WplanrWVCxXtyouC05zhNwhIq1YH
IN3ZF061P08Vn+bsV4RaaZPnK7lzAgMBAAGjggKnMIICozAdBgNVHQ4EFgQU6wnt
6x5XXAvEPvnJ2P66DDPwrQkwHwYDVR0jBBgwFoAUSh/na037AXO28xt/NqWpguCN
nBkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjZGRTZDL0IzMzc0NDI0MTMxQjExRUJBNDEyMUEzOUY4QUVBMjI4L1NoX25h
MDM3QVhPMjh4dF9OcVdwZ3VDTm5Cay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NoX25hMDM3QVhPMjh4dF9OcVdwZ3VDTm5Cay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjZGRTZDL0IzMzc0NDI0MTMxQjExRUJBNDEyMUEzOUY4
QUVBMjI4LzE3REQwODk0ODc3MjExRjA4QjhCQTdEMkRBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAsD+nwoDANBgkqhkiG9w0B
AQsFAAOCAQEAl28yBqWzcOFQuwY+OPy7/Ykp0AhUolHAYHBPvkVnKD6kXJjmKPCT
n97InjcwgVFSBTj0CS6SzOEfaP/TcRcyzDjNZ4GRgUJMmy+7Ygl+7BOoX/xFhE+d
AU7zcep84R/9fH1ppPiRHPdkijwE5QAZBJNM7gbBE8sk1lONxlNR6vcOTi27Ntoy
UIvTysLlACjr7v26J9/Hm8iUtVlO3dh3wrgO6uOa3gm/tK0yAnFnumxy5o+YWpyo
if3cX8eFC/pg3b2Rstsg9X0UCICR2UNXB9fz4ajOHKih/ELlyVeFYkYlmYemOrqc
kgr+mZVsrqPXQFl74JXuZKSi0pkRuE9eFw==
-----END CERTIFICATE-----
Generated at Thu Sep 18 09:25:30 2025 by rpki-client