Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/7B89F0F65C1011F097764BA7DAE4EC9C.roa
File: 7B89F0F65C1011F097764BA7DAE4EC9C.roa (raw, json)
Hash identifier: eGy/v5dJ9Sg7LBFixJArYusJNOZkmFriL3Cy5EJmVsc=
Subject key identifier: 66:49:17:45:36:22:C2:2B:0B:44:1E:E2:34:37:5A:B4:3B:E6:D1:E1
Certificate issuer: /CN=F3681ED0AF/serialNumber=4A83F31B1B0604CA6D0B72A453DAA3EB587B4C82
Certificate serial: 0379
Authority key identifier: 4A:83:F3:1B:1B:06:04:CA:6D:0B:72:A4:53:DA:A3:EB:58:7B:4C:82
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SoPzGxsGBMptC3KkU9qj61h7TII.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/7B89F0F65C1011F097764BA7DAE4EC9C.roa
Signing time: Tue 08 Jul 2025 15:30:32 +0000
ROA not before: Tue 08 Jul 2025 15:30:26 +0000
ROA not after: Sun 08 Jul 2035 15:30:26 +0000
asID: 30986
IP address blocks: 2c0e:a000::/24 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.crl
rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.mft
rsync://rpki.afrinic.net/repository/afrinic/SoPzGxsGBMptC3KkU9qj61h7TII.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Jul 2025 00:06:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 889 (0x379)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3681ED0AF, serialNumber=4A83F31B1B0604CA6D0B72A453DAA3EB587B4C82
Validity
Not Before: Jul 8 15:30:26 2025 GMT
Not After : Jul 8 15:30:26 2035 GMT
Subject: CN=686d3997-f2dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b3:33:11:27:3b:fb:f8:60:f6:4b:29:88:b6:
ab:af:27:25:44:19:be:97:df:7e:02:0a:ac:43:3e:
a4:a1:bb:60:b4:f8:a1:17:82:0b:a5:51:a2:af:81:
dd:96:60:e4:fb:71:a1:9a:e5:5d:fd:b9:ab:c8:2a:
83:b3:11:79:41:f4:b1:15:2d:12:4b:98:51:84:c1:
87:dd:9d:09:f9:22:fa:02:46:e4:f1:8d:6e:e7:60:
b5:ba:db:e6:1d:ea:68:bd:25:de:a7:7b:e4:df:28:
8a:15:00:11:d6:4f:48:43:55:6d:7e:31:79:66:af:
19:db:8b:b6:27:cf:8a:87:71:d6:ef:8e:c9:8b:bc:
1d:f0:9e:bc:1a:8d:7b:a9:40:a2:e3:7c:6e:ed:85:
ee:1f:47:2a:95:76:bb:3b:86:ff:af:69:cb:c8:59:
4a:76:88:44:da:d3:20:33:2b:33:d3:44:d0:1c:dc:
c6:27:35:26:3f:a3:bf:bf:be:83:9f:09:64:1f:e0:
14:ea:23:46:41:31:59:00:c0:77:f2:35:f7:a1:ba:
df:05:48:f1:ca:b7:10:03:df:29:91:3c:86:64:ac:
a4:53:ce:3a:9c:16:3a:3c:91:f7:99:4e:a6:a2:fc:
a8:25:ad:7b:6d:28:11:4c:2b:2a:af:fe:5b:d8:58:
10:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:49:17:45:36:22:C2:2B:0B:44:1E:E2:34:37:5A:B4:3B:E6:D1:E1
X509v3 Authority Key Identifier:
keyid:4A:83:F3:1B:1B:06:04:CA:6D:0B:72:A4:53:DA:A3:EB:58:7B:4C:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SoPzGxsGBMptC3KkU9qj61h7TII.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/7B89F0F65C1011F097764BA7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0e:a000::/24
Signature Algorithm: sha256WithRSAEncryption
1a:33:3f:18:a3:80:ac:0e:a1:fa:d3:76:c5:fb:76:a1:51:72:
ec:2b:15:88:bc:62:c1:5c:02:03:f2:49:e5:2a:00:c6:33:5d:
f2:da:5a:24:f3:84:f9:8e:65:dc:61:48:c6:e4:23:84:58:ed:
d0:55:09:52:23:ea:83:1b:73:eb:98:64:4f:d1:ec:6a:dc:9d:
a3:c7:5c:26:05:75:c1:0f:10:09:e7:2f:a6:3e:5c:10:b2:34:
39:0a:43:fc:f1:7f:e5:0e:30:cc:7a:3d:35:8c:ec:1d:e6:b5:
ed:d0:a9:d6:0f:a0:14:24:01:29:29:c2:76:f7:4d:12:29:65:
99:97:c5:a2:2e:74:33:11:0d:9a:22:13:3e:44:4f:83:47:2e:
95:d2:19:47:d9:4c:34:43:7e:8b:95:5c:25:8d:5a:b4:7f:99:
b0:33:d0:61:ab:af:65:a9:bb:7a:a4:77:a6:cd:e9:67:00:3e:
15:30:78:3f:77:33:c4:43:fd:0a:96:f7:93:ca:ff:6c:02:18:
75:1d:08:26:ad:8f:84:aa:51:a2:85:18:47:aa:25:ac:3b:49:
32:a5:40:e2:a4:75:89:90:cf:9c:9a:df:20:62:c1:d3:c1:c5:
cd:6a:78:6b:9f:5c:8b:fc:a8:ff:56:2b:e7:07:13:90:7c:e6:
87:5a:5e:9f
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICA3kwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODFFRDBBRjExMC8GA1UEBRMoNEE4M0YzMUIxQjA2MDRDQTZEMEI3MkE0NTNEQUEz
RUI1ODdCNEM4MjAeFw0yNTA3MDgxNTMwMjZaFw0zNTA3MDgxNTMwMjZaMBgxFjAU
BgNVBAMTDTY4NmQzOTk3LWYyZGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC+szMRJzv7+GD2SymItquvJyVEGb6X334CCqxDPqShu2C0+KEXggulUaKv
gd2WYOT7caGa5V39uavIKoOzEXlB9LEVLRJLmFGEwYfdnQn5IvoCRuTxjW7nYLW6
2+Yd6mi9Jd6ne+TfKIoVABHWT0hDVW1+MXlmrxnbi7Ynz4qHcdbvjsmLvB3wnrwa
jXupQKLjfG7the4fRyqVdrs7hv+vacvIWUp2iETa0yAzKzPTRNAc3MYnNSY/o7+/
voOfCWQf4BTqI0ZBMVkAwHfyNfehut8FSPHKtxAD3ymRPIZkrKRTzjqcFjo8kfeZ
Tqai/KglrXttKBFMKyqv/lvYWBDNAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUZkkX
RTYiwisLRB7iNDdatDvm0eEwHwYDVR0jBBgwFoAUSoPzGxsGBMptC3KkU9qj61h7
TIIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgxRUQwLzUyNTFDMDc4Q0UyNDExRURBMDkyRDBBQ0YxMjIyNDY4L1NvUHpH
eHNHQk1wdEMzS2tVOXFqNjFoN1RJSS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NvUHpHeHNHQk1wdEMzS2tVOXFqNjFoN1RJSS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgxRUQwLzUyNTFDMDc4Q0UyNDExRURBMDkyRDBBQ0Yx
MjIyNDY4LzdCODlGMEY2NUMxMDExRjA5Nzc2NEJBN0RBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgACMAYDBAAsDqAwDQYJKoZIhvcNAQEL
BQADggEBABozPxijgKwOofrTdsX7dqFRcuwrFYi8YsFcAgPySeUqAMYzXfLaWiTz
hPmOZdxhSMbkI4RY7dBVCVIj6oMbc+uYZE/R7GrcnaPHXCYFdcEPEAnnL6Y+XBCy
NDkKQ/zxf+UOMMx6PTWM7B3mte3QqdYPoBQkASkpwnb3TRIpZZmXxaIudDMRDZoi
Ez5ET4NHLpXSGUfZTDRDfouVXCWNWrR/mbAz0GGrr2Wpu3qkd6bN6WcAPhUweD93
M8RD/QqW95PK/2wCGHUdCCatj4SqUaKFGEeqJaw7STKlQOKkdYmQz5ya3yBiwdPB
xc1qeGufXIv8qP9WK+cHE5B85odaXp8=
-----END CERTIFICATE-----
Generated at Sun Jul 27 07:49:29 2025 by rpki-client