Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368356F/D1DFA91C66E411F0B2126192DAE4EC9C/0CC81814923911F083357CF4DAE4EC9C.roa
File: 0CC81814923911F083357CF4DAE4EC9C.roa (raw, json)
Hash identifier: LITlLq2aIhVUihUn1BaRczfpAUpOW0iot4DV3wIc2Aw=
Subject key identifier: 99:04:D1:55:F2:F1:B3:DF:C3:09:0F:B7:E3:0B:17:37:9B:4F:AC:7B
Certificate issuer: /CN=F368356FAF/serialNumber=19E5BB02BA8803B2B13C888EC61A19E86DCD5A67
Certificate serial: 3B
Authority key identifier: 19:E5:BB:02:BA:88:03:B2:B1:3C:88:8E:C6:1A:19:E8:6D:CD:5A:67
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/GeW7ArqIA7KxPIiOxhoZ6G3NWmc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368356F/D1DFA91C66E411F0B2126192DAE4EC9C/0CC81814923911F083357CF4DAE4EC9C.roa
Signing time: Mon 15 Sep 2025 13:36:58 +0000
ROA not before: Mon 15 Sep 2025 13:36:53 +0000
ROA not after: Sat 15 Sep 2035 13:36:53 +0000
asID: 37282
IP address blocks: 41.207.252.0/22 maxlen: 22
2c0f:f8e8::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368356F/D1DFA91C66E411F0B2126192DAE4EC9C/GeW7ArqIA7KxPIiOxhoZ6G3NWmc.crl
rsync://rpki.afrinic.net/repository/member_repository/F368356F/D1DFA91C66E411F0B2126192DAE4EC9C/GeW7ArqIA7KxPIiOxhoZ6G3NWmc.mft
rsync://rpki.afrinic.net/repository/afrinic/GeW7ArqIA7KxPIiOxhoZ6G3NWmc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 18 Sep 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59 (0x3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368356FAF, serialNumber=19E5BB02BA8803B2B13C888EC61A19E86DCD5A67
Validity
Not Before: Sep 15 13:36:53 2025 GMT
Not After : Sep 15 13:36:53 2035 GMT
Subject: CN=68c8167a-182a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d2:eb:fc:6b:bc:98:f7:82:bc:ea:81:95:38:
93:4a:4a:0e:f9:61:ac:0b:e5:4f:90:b5:ec:ce:e0:
4b:88:3c:dc:2e:fb:da:7a:f9:7a:89:fb:62:0a:92:
13:90:2c:5f:04:fb:5d:1e:c2:d5:2e:c5:85:da:f6:
ca:c7:02:8f:19:ec:6f:4a:74:27:25:56:5c:ba:ec:
58:7a:eb:f1:36:bf:65:05:9c:39:14:a2:20:ca:59:
1a:66:45:81:20:75:f4:f4:03:27:a6:46:f2:31:3a:
fc:02:25:e2:d8:76:b3:fc:9d:19:ee:b5:b7:2d:0a:
7e:41:14:37:7a:d1:95:c2:98:96:50:4a:9a:7f:f5:
d1:6c:35:93:73:b3:ab:bc:b7:08:e8:ba:a4:3b:98:
37:4a:f4:f8:31:7d:ff:ff:24:b2:e9:06:80:8d:a8:
d2:5a:c2:0e:6c:57:72:8c:32:4c:96:26:ee:e1:b5:
39:d8:9d:a2:ea:ae:1d:6c:3d:79:5d:16:ef:34:19:
43:aa:91:79:77:48:50:33:a7:0e:bf:08:33:19:b0:
a9:e8:36:be:aa:88:09:0e:90:a3:c6:14:0e:21:62:
20:3d:ac:4c:ac:ab:21:8f:e8:b9:45:20:eb:b4:32:
f0:fa:68:1d:50:91:2e:9b:5e:02:e0:cb:9a:f5:48:
da:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:04:D1:55:F2:F1:B3:DF:C3:09:0F:B7:E3:0B:17:37:9B:4F:AC:7B
X509v3 Authority Key Identifier:
keyid:19:E5:BB:02:BA:88:03:B2:B1:3C:88:8E:C6:1A:19:E8:6D:CD:5A:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368356F/D1DFA91C66E411F0B2126192DAE4EC9C/GeW7ArqIA7KxPIiOxhoZ6G3NWmc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GeW7ArqIA7KxPIiOxhoZ6G3NWmc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368356F/D1DFA91C66E411F0B2126192DAE4EC9C/0CC81814923911F083357CF4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.207.252.0/22
IPv6:
2c0f:f8e8::/32
Signature Algorithm: sha256WithRSAEncryption
28:39:c8:85:94:8b:e3:87:89:15:85:63:cb:ae:6c:c3:48:53:
05:f1:ed:49:1f:7a:02:e4:27:fa:07:51:36:cd:d3:a9:09:27:
6d:43:29:a5:09:75:45:22:82:88:0a:f5:2c:e8:40:60:98:98:
c2:aa:a0:3e:c4:9f:00:da:f8:97:45:43:67:3a:c5:dd:b0:f3:
b1:9a:ba:6e:13:4a:a5:86:1b:99:a7:66:80:60:7a:23:7b:72:
91:48:ef:20:48:79:54:8c:5e:72:26:34:27:34:9c:68:fe:41:
ea:8a:36:67:ce:11:10:0b:5f:5c:30:d8:3c:5d:c5:d7:e0:3b:
7e:d9:0c:29:35:d9:35:e0:26:7a:7e:a4:c4:ce:e9:b6:81:36:
36:4f:36:69:11:c8:e8:5e:70:d7:4a:0d:f2:15:89:73:71:c2:
45:3d:09:e7:32:03:af:15:78:7f:8c:01:fc:14:38:5b:c1:bd:
fe:cf:fa:90:8b:14:63:a4:cf:e7:5f:c8:fd:d5:d6:6e:db:1f:
06:b7:09:0a:be:f4:bc:a1:6b:a0:cb:80:17:f4:33:58:b5:91:
be:74:3f:22:4a:87:80:5f:be:b0:4a:74:6f:01:98:5c:7d:28:
1d:0f:fc:bc:d7:ca:2d:b3:da:25:0c:83:a7:ce:d5:04:b9:c4:
5d:30:aa:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 22:52:57 2025 by rpki-client