Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368356F/D1DFA91C66E411F0B2126192DAE4EC9C/61967A0C923911F0857614F5DAE4EC9C.roa
File: 61967A0C923911F0857614F5DAE4EC9C.roa (raw, json)
Hash identifier: h6/xO+quTrTm7TNgBK9CG+HuCWB11SsyjPcjW6WV3ek=
Subject key identifier: 57:4A:5E:D3:A7:FF:C3:B5:8C:37:0F:3D:1E:6A:8C:C2:25:49:1D:35
Certificate issuer: /CN=F368356FAF/serialNumber=19E5BB02BA8803B2B13C888EC61A19E86DCD5A67
Certificate serial: 3E
Authority key identifier: 19:E5:BB:02:BA:88:03:B2:B1:3C:88:8E:C6:1A:19:E8:6D:CD:5A:67
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/GeW7ArqIA7KxPIiOxhoZ6G3NWmc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368356F/D1DFA91C66E411F0B2126192DAE4EC9C/61967A0C923911F0857614F5DAE4EC9C.roa
Signing time: Mon 15 Sep 2025 13:39:20 +0000
ROA not before: Mon 15 Sep 2025 13:39:05 +0000
ROA not after: Sat 15 Sep 2035 13:39:05 +0000
asID: 37282
IP address blocks: 2c0f:f8e8::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368356F/D1DFA91C66E411F0B2126192DAE4EC9C/GeW7ArqIA7KxPIiOxhoZ6G3NWmc.crl
rsync://rpki.afrinic.net/repository/member_repository/F368356F/D1DFA91C66E411F0B2126192DAE4EC9C/GeW7ArqIA7KxPIiOxhoZ6G3NWmc.mft
rsync://rpki.afrinic.net/repository/afrinic/GeW7ArqIA7KxPIiOxhoZ6G3NWmc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 18 Sep 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62 (0x3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368356FAF, serialNumber=19E5BB02BA8803B2B13C888EC61A19E86DCD5A67
Validity
Not Before: Sep 15 13:39:05 2025 GMT
Not After : Sep 15 13:39:05 2035 GMT
Subject: CN=68c81708-8c57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6a:7b:eb:da:31:6e:1a:7d:46:49:92:48:05:
7e:8d:4c:4d:c7:ba:47:12:d3:bb:4c:11:0a:82:56:
c5:ea:b9:7a:ce:9d:14:06:f6:5f:77:7a:ea:7c:b2:
5e:80:55:4f:d5:b8:4d:ae:de:fd:d2:50:4d:15:58:
dd:54:9d:39:2b:ee:b9:2c:0c:59:ed:e4:77:b8:42:
fa:7a:0c:22:55:1e:2c:24:8b:1d:7b:61:43:a0:e7:
f3:1f:f9:63:94:61:14:8e:a3:70:ed:f8:89:1a:c2:
2f:1c:e0:cb:4f:39:31:58:56:26:12:68:87:e5:c6:
7e:39:d5:f2:fc:14:23:a1:08:40:61:ff:4f:5f:bb:
a3:b4:0d:78:c2:ae:48:ea:b2:fc:ad:27:60:87:1e:
1c:40:7c:0d:dc:25:99:4e:6a:34:29:39:bf:0b:1c:
39:83:07:1a:db:3c:ea:1c:10:d3:8d:b5:21:ef:21:
96:20:06:c1:77:da:6d:3a:ee:1d:bd:33:93:c4:6c:
85:41:d2:d8:46:02:94:95:79:ef:48:e8:aa:56:28:
c1:46:9c:e0:87:25:a7:d8:82:75:5b:84:a2:7b:7d:
b5:ae:7c:d6:cf:c4:21:81:7b:dc:bf:89:78:7e:aa:
c5:69:f5:7d:e9:7e:cb:2a:97:f3:c4:fb:b3:e2:d2:
ea:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:4A:5E:D3:A7:FF:C3:B5:8C:37:0F:3D:1E:6A:8C:C2:25:49:1D:35
X509v3 Authority Key Identifier:
keyid:19:E5:BB:02:BA:88:03:B2:B1:3C:88:8E:C6:1A:19:E8:6D:CD:5A:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368356F/D1DFA91C66E411F0B2126192DAE4EC9C/GeW7ArqIA7KxPIiOxhoZ6G3NWmc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GeW7ArqIA7KxPIiOxhoZ6G3NWmc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368356F/D1DFA91C66E411F0B2126192DAE4EC9C/61967A0C923911F0857614F5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:f8e8::/32
Signature Algorithm: sha256WithRSAEncryption
06:ca:ec:33:e9:aa:e3:14:0d:1e:b8:b8:eb:d2:ef:23:37:1c:
0a:a9:cd:83:2a:b0:9a:a9:79:2b:4e:eb:4e:66:c0:f6:d9:d8:
24:4a:e9:6b:fe:e9:74:a8:99:93:0b:36:5b:6f:6b:da:9e:f8:
72:de:59:de:9d:4c:bd:c7:51:5f:29:80:db:29:c2:40:4b:3c:
a8:d1:2d:7d:89:9f:9d:dd:c7:a9:4a:49:91:4a:02:26:a8:06:
50:e5:19:2c:b5:a2:f7:7d:e1:37:7a:34:37:44:2a:be:fa:a1:
01:10:27:c9:68:bb:b6:a9:bd:8f:f0:5d:0d:43:3a:bc:64:ef:
29:a4:ad:69:2f:a9:ce:ab:62:c3:45:7f:d1:ec:ed:2d:46:b7:
2f:31:69:bf:25:f0:0e:66:ef:f7:73:8f:a5:09:6c:5c:f3:74:
34:10:3a:13:c8:90:e5:28:9f:fa:fc:e3:c3:5d:a2:e4:92:d4:
f1:ff:55:ea:61:80:73:f1:b0:1c:c4:93:8e:5f:50:bc:e9:c8:
de:b7:2d:f4:07:b3:cd:64:fe:ae:e3:b2:81:c4:aa:c8:84:81:
78:59:1f:0a:15:c6:bc:bc:3d:9b:f9:c8:5d:b2:29:92:f5:8b:
31:4a:12:a5:04:83:01:bb:f9:40:9e:3b:fe:09:8f:31:a9:b8:
c4:1b:1c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 22:55:49 2025 by rpki-client