Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/F9141722877111F0858E99D2DAE4EC9C.roa
File: F9141722877111F0858E99D2DAE4EC9C.roa (raw, json)
Hash identifier: Y+12zI5R5Z7kAuY1RuQtOSmt2tT8o0fgCSk0gO8Ktlw=
Subject key identifier: 5D:1F:28:EA:40:BC:B5:44:52:46:B2:4A:94:E2:5B:98:6A:85:94:7A
Certificate issuer: /CN=F366FE6CAF/serialNumber=4A1FE76B4DFB0173B6F31B7F36A5A982E08D9C19
Certificate serial: 0765
Authority key identifier: 4A:1F:E7:6B:4D:FB:01:73:B6:F3:1B:7F:36:A5:A9:82:E0:8D:9C:19
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Sh_na037AXO28xt_NqWpguCNnBk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/F9141722877111F0858E99D2DAE4EC9C.roa
Signing time: Mon 01 Sep 2025 20:26:43 +0000
ROA not before: Mon 01 Sep 2025 20:26:39 +0000
ROA not after: Sat 01 Sep 2035 20:26:39 +0000
asID: 328748
IP address blocks: 2c0f:e9f0:9700::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/Sh_na037AXO28xt_NqWpguCNnBk.crl
rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/Sh_na037AXO28xt_NqWpguCNnBk.mft
rsync://rpki.afrinic.net/repository/afrinic/Sh_na037AXO28xt_NqWpguCNnBk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 20 Sep 2025 00:06:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1893 (0x765)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F366FE6CAF, serialNumber=4A1FE76B4DFB0173B6F31B7F36A5A982E08D9C19
Validity
Not Before: Sep 1 20:26:39 2025 GMT
Not After : Sep 1 20:26:39 2035 GMT
Subject: CN=68b60183-7c66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3f:05:48:93:38:57:39:cb:77:89:45:66:36:
4c:c1:e0:da:c9:99:b3:f6:35:84:dd:eb:0e:ae:81:
c9:1b:00:56:78:4b:41:09:f0:90:14:6d:d6:4f:ae:
db:62:9f:05:de:0b:c9:49:14:9d:32:35:f7:c0:56:
2b:b7:ca:5b:28:c1:b0:8c:36:96:4e:39:11:6e:62:
a9:1f:f9:24:fd:48:b7:b6:92:a2:df:5b:8a:1a:d4:
96:c4:d0:b8:cd:bc:85:32:ab:e3:f4:64:27:8c:2b:
cc:94:cd:88:c9:5d:e6:3e:2a:1a:27:1c:59:0a:e3:
a7:a8:9b:b8:75:d2:b5:33:5a:f2:ad:ff:14:7e:db:
ea:e3:65:10:bf:d1:c2:9b:41:eb:90:49:43:18:cd:
cf:e0:a7:3d:1c:61:4b:a4:e4:02:49:cd:da:61:c4:
f6:cc:28:be:9e:a9:4f:0e:23:96:2e:65:a1:ec:f5:
de:53:3a:ca:a9:d2:eb:7b:38:81:66:48:60:dd:9a:
dc:95:c2:06:07:80:bb:07:e6:a2:dd:41:df:c4:91:
27:3b:90:b9:79:e0:19:06:8b:32:ca:a0:c2:c9:f2:
d7:8d:43:03:79:f5:48:2d:51:d9:b3:25:7b:3e:6a:
f8:76:15:07:06:2b:8a:c4:b9:7c:89:42:d1:8c:fa:
28:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:1F:28:EA:40:BC:B5:44:52:46:B2:4A:94:E2:5B:98:6A:85:94:7A
X509v3 Authority Key Identifier:
keyid:4A:1F:E7:6B:4D:FB:01:73:B6:F3:1B:7F:36:A5:A9:82:E0:8D:9C:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/Sh_na037AXO28xt_NqWpguCNnBk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Sh_na037AXO28xt_NqWpguCNnBk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/F9141722877111F0858E99D2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:e9f0:9700::/40
Signature Algorithm: sha256WithRSAEncryption
a2:62:89:ef:6f:f8:70:09:4f:90:40:f8:ff:74:47:b1:d8:fe:
4d:38:10:f2:e1:4c:c4:e0:62:7b:5f:b4:7a:c0:22:56:fc:60:
37:41:a6:f2:fc:3c:96:c2:ba:f3:52:09:1c:8f:0f:47:2c:fe:
d4:e5:8a:40:94:6d:ff:3b:52:41:2e:6e:87:3b:fe:0f:15:7e:
6f:82:a2:bb:0c:08:da:3e:56:7d:ed:37:ad:8c:92:06:cd:97:
ce:10:f1:17:c1:a3:da:b9:fb:7b:8d:30:9c:09:38:d9:f7:e2:
bd:99:4d:d6:0b:5a:2e:7a:30:45:84:cd:df:07:97:dd:5d:d1:
34:37:19:bb:40:86:c3:b3:d0:dd:1b:bc:25:75:27:3d:8e:d5:
f6:b3:bb:be:e5:e5:86:59:16:cc:f8:34:20:d0:80:42:ad:7e:
0c:e4:72:2f:4a:a0:a9:57:b9:e6:1c:e6:53:c2:82:f7:98:a4:
8d:30:e4:15:18:29:8d:9a:13:6b:42:a9:df:23:78:5f:ec:f6:
82:24:c9:ac:db:83:94:5d:b7:fe:ad:47:23:bb:87:49:89:33:
24:f9:23:4e:97:98:e9:e1:62:01:db:51:92:bd:9a:5d:d2:62:
88:57:7e:5a:cb:dd:2f:3d:87:5d:91:25:d5:63:17:34:d9:67:
e3:15:52:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 11:04:55 2025 by rpki-client