Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/D281CD16877111F0896D7AD2DAE4EC9C.roa
File: D281CD16877111F0896D7AD2DAE4EC9C.roa (raw, json)
Hash identifier: cWLTUW9RzJIuddIOIavrO3/ylPwsJ44raIrYkxapM14=
Subject key identifier: 9D:F7:8A:92:3B:5A:5D:C0:29:19:C9:61:0F:AD:A5:98:4A:0A:B9:14
Certificate issuer: /CN=F366FE6CAF/serialNumber=4A1FE76B4DFB0173B6F31B7F36A5A982E08D9C19
Certificate serial: 0763
Authority key identifier: 4A:1F:E7:6B:4D:FB:01:73:B6:F3:1B:7F:36:A5:A9:82:E0:8D:9C:19
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Sh_na037AXO28xt_NqWpguCNnBk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/D281CD16877111F0896D7AD2DAE4EC9C.roa
Signing time: Mon 01 Sep 2025 20:25:38 +0000
ROA not before: Mon 01 Sep 2025 20:25:34 +0000
ROA not after: Sat 01 Sep 2035 20:25:34 +0000
asID: 328748
IP address blocks: 2c0f:e9f0:9600::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/Sh_na037AXO28xt_NqWpguCNnBk.crl
rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/Sh_na037AXO28xt_NqWpguCNnBk.mft
rsync://rpki.afrinic.net/repository/afrinic/Sh_na037AXO28xt_NqWpguCNnBk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 20 Sep 2025 00:06:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1891 (0x763)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F366FE6CAF, serialNumber=4A1FE76B4DFB0173B6F31B7F36A5A982E08D9C19
Validity
Not Before: Sep 1 20:25:34 2025 GMT
Not After : Sep 1 20:25:34 2035 GMT
Subject: CN=68b60142-8bf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f2:71:76:dd:2e:59:f4:de:c4:35:55:e6:a6:
23:e9:3e:b6:1f:19:6c:4c:66:52:66:a8:fc:5c:98:
5b:06:e1:b3:f1:61:7a:01:0d:8f:a6:f0:50:7f:92:
1c:2e:76:69:99:dd:af:f5:5c:5c:df:d0:9a:49:04:
6b:33:76:1a:9b:a7:2f:fc:2c:dc:8f:d0:4b:43:52:
ee:b2:fd:2b:d8:9f:1b:6a:d6:78:92:5e:3d:4c:02:
8b:db:a4:30:5c:17:51:79:73:fe:97:fe:4f:b4:4e:
62:50:55:4d:c5:44:bd:b0:ae:c0:fd:33:5f:5b:fb:
30:03:5f:76:92:53:56:4f:6d:7f:f1:11:5a:48:6f:
a2:25:93:d9:a3:87:c7:69:92:0b:9e:b8:14:10:1b:
31:63:a6:d2:f2:8b:eb:eb:9f:65:44:d7:ef:61:0f:
15:9d:2b:d6:2f:9a:d6:18:38:60:43:0e:46:ac:54:
aa:60:ea:be:e7:9e:c3:b0:4a:a5:ab:9e:67:0f:08:
90:60:22:c7:cf:d0:ed:d8:e2:f9:a3:9f:71:98:33:
5f:63:05:bc:98:72:ad:2a:27:4a:20:64:8f:a9:5b:
ef:45:9f:62:e3:a5:67:3f:31:45:1d:a5:89:4c:5c:
3f:97:d2:35:ab:3b:fe:84:f8:b5:b2:5c:cb:43:3a:
6f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:F7:8A:92:3B:5A:5D:C0:29:19:C9:61:0F:AD:A5:98:4A:0A:B9:14
X509v3 Authority Key Identifier:
keyid:4A:1F:E7:6B:4D:FB:01:73:B6:F3:1B:7F:36:A5:A9:82:E0:8D:9C:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/Sh_na037AXO28xt_NqWpguCNnBk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Sh_na037AXO28xt_NqWpguCNnBk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/D281CD16877111F0896D7AD2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:e9f0:9600::/40
Signature Algorithm: sha256WithRSAEncryption
17:f4:2d:ce:b0:4b:94:59:91:ca:e2:b4:95:ea:61:fd:fa:43:
e0:72:61:ea:1c:a0:34:79:0a:2f:a0:74:65:5c:94:c4:fd:c5:
15:3b:56:12:e7:6c:da:70:2f:54:9d:9e:ed:90:9a:67:c7:84:
66:2a:b5:cd:c3:4f:24:4d:ea:b6:2f:52:75:bf:59:42:ea:3d:
89:72:ae:d2:3c:6a:ad:fe:18:e7:fe:13:3f:21:e5:12:4a:a0:
5e:4b:47:0f:c8:ab:4f:da:88:3f:1c:28:7e:98:d9:ed:30:da:
20:b5:31:9f:df:ea:e3:37:e4:03:09:00:de:56:05:81:a6:b4:
80:5b:9b:ee:69:b4:92:69:5a:74:72:bf:e7:6d:b2:ce:66:ae:
08:f1:dd:17:2a:b4:1b:25:4e:c2:0f:a4:4c:3a:91:0e:d3:e2:
28:0f:e8:34:81:23:2c:3d:4b:4c:79:bf:1b:42:94:54:18:7c:
2c:86:42:37:94:14:35:58:6b:3c:85:b8:8e:98:cc:bf:bb:d0:
88:5e:39:36:d0:bc:97:29:3d:9e:1e:bd:f4:cd:4f:f6:1b:d7:
db:d1:79:e6:e9:73:e1:d6:63:81:20:c6:d5:1d:09:4b:ee:4e:
79:d5:f2:c5:58:e9:88:33:4a:b3:49:2c:03:c3:4f:0e:07:ef:
3f:2c:f8:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 10:51:56 2025 by rpki-client