Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/B0B04848877111F082E051D0DAE4EC9C.roa
File: B0B04848877111F082E051D0DAE4EC9C.roa (raw, json)
Hash identifier: 74qQsA+Ms/dUW8F7lYzjX4TOcPR5wk7mYH0t6ff8jWs=
Subject key identifier: 7F:1A:B1:03:15:29:AF:38:81:1E:59:99:82:B2:58:9B:80:5E:1F:45
Certificate issuer: /CN=F366FE6CAF/serialNumber=4A1FE76B4DFB0173B6F31B7F36A5A982E08D9C19
Certificate serial: 0761
Authority key identifier: 4A:1F:E7:6B:4D:FB:01:73:B6:F3:1B:7F:36:A5:A9:82:E0:8D:9C:19
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Sh_na037AXO28xt_NqWpguCNnBk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/B0B04848877111F082E051D0DAE4EC9C.roa
Signing time: Mon 01 Sep 2025 20:24:42 +0000
ROA not before: Mon 01 Sep 2025 20:24:36 +0000
ROA not after: Sat 01 Sep 2035 20:24:36 +0000
asID: 328748
IP address blocks: 2c0f:e9f0:9800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/Sh_na037AXO28xt_NqWpguCNnBk.crl
rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/Sh_na037AXO28xt_NqWpguCNnBk.mft
rsync://rpki.afrinic.net/repository/afrinic/Sh_na037AXO28xt_NqWpguCNnBk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 20 Sep 2025 00:06:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1889 (0x761)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F366FE6CAF, serialNumber=4A1FE76B4DFB0173B6F31B7F36A5A982E08D9C19
Validity
Not Before: Sep 1 20:24:36 2025 GMT
Not After : Sep 1 20:24:36 2035 GMT
Subject: CN=68b6010a-3ce6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:fe:a3:66:ef:1f:70:8d:c4:1d:8b:a0:79:29:
38:99:32:8e:8f:2a:a5:90:ee:f7:cc:30:cc:0b:8f:
df:36:2b:6e:71:a0:37:36:7b:b8:c3:cc:75:b0:b9:
6d:98:e2:4b:54:1b:0b:1a:96:d1:40:67:81:45:e8:
0a:e2:61:b5:b8:ef:b6:8a:e7:83:76:b7:b7:00:4b:
6e:37:54:e1:fb:bb:3e:ef:e6:ca:39:94:ff:0b:af:
ff:1b:27:7e:13:80:a7:da:05:2a:d1:31:03:9c:b4:
fc:d6:52:b8:14:e8:ef:8e:c9:a6:ec:48:b5:ce:59:
8c:6f:72:56:8d:5c:aa:f4:3c:64:4b:f3:e5:d3:1b:
b5:84:d6:df:3c:cb:23:bb:bc:db:f3:68:a6:5a:03:
b4:e8:a3:86:29:35:0c:c8:b9:18:ba:6f:6d:94:ea:
38:8e:6b:51:cd:6b:3b:3a:b2:6f:da:74:a4:1b:f3:
ba:64:8d:5d:63:24:dc:c8:a9:64:1a:d9:06:31:a4:
6d:5c:a0:36:9d:24:e8:9f:d3:49:42:f8:c1:7a:07:
cf:ca:c8:6e:5c:3f:b9:ae:76:22:35:07:e0:7a:58:
00:df:7f:9f:4e:6c:6e:ff:c4:9d:a9:4f:cf:2e:e5:
79:24:db:1d:98:d8:b1:40:ac:4f:61:b6:c6:da:8c:
59:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:1A:B1:03:15:29:AF:38:81:1E:59:99:82:B2:58:9B:80:5E:1F:45
X509v3 Authority Key Identifier:
keyid:4A:1F:E7:6B:4D:FB:01:73:B6:F3:1B:7F:36:A5:A9:82:E0:8D:9C:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/Sh_na037AXO28xt_NqWpguCNnBk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Sh_na037AXO28xt_NqWpguCNnBk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/B0B04848877111F082E051D0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:e9f0:9800::/40
Signature Algorithm: sha256WithRSAEncryption
86:86:3a:dd:bf:d5:68:5c:43:a1:19:6d:45:49:28:6a:dd:fa:
b5:a9:2a:95:11:f0:43:73:e0:91:12:d3:de:30:af:31:41:a1:
42:1f:b6:42:31:d7:b7:b9:36:26:83:54:a0:13:70:da:bb:fc:
5d:6d:f2:1f:8d:c6:f0:82:2d:71:f3:3b:97:c6:b4:45:9d:07:
ac:41:8f:cc:ae:85:c7:81:e0:45:40:f6:c1:10:2a:44:b1:d8:
a5:e1:a5:71:76:14:5c:29:a8:02:56:09:c9:10:9f:be:76:49:
6b:34:9e:03:3a:49:eb:cc:7a:c8:3f:1a:16:33:ae:20:3b:a7:
17:93:61:6d:62:43:bb:ea:bf:d7:4d:88:e3:e6:58:11:0e:1a:
82:7c:87:2e:f8:66:44:fb:ed:3e:0e:ab:ea:52:89:52:87:a8:
c8:75:9b:87:db:92:3a:03:e4:b2:ca:2f:bb:fd:c8:48:a4:35:
28:c6:4a:12:41:77:b1:bd:23:54:bc:50:34:ac:35:34:6e:c2:
6d:b3:11:cf:d5:12:66:22:f8:a1:f9:b5:04:62:77:65:d4:28:
48:f6:8c:18:e8:1b:20:7d:3c:d0:a0:3b:f4:38:a8:c5:fa:14:
d7:c8:67:fe:a5:30:88:5b:6c:55:a7:15:17:41:05:49:e2:1b:
d2:1c:68:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 11:04:49 2025 by rpki-client