Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D5F5A/2173E83ADAA611ED8227D4C42F6D8C1D/74B5C16292FF11F0BA81327BDAE4EC9C.roa
File: 74B5C16292FF11F0BA81327BDAE4EC9C.roa (raw, json)
Hash identifier: X3y3ETyNfJkv+gNamJ5YAN6Cv+s3LQHP84dm6Z/93XY=
Subject key identifier: F6:AF:0E:8A:6A:B1:B7:87:F3:A1:E9:31:F1:FC:99:29:A7:06:04:32
Certificate issuer: /CN=F36D5F5AAF/serialNumber=28293436D4D6DA3A93A60ECA3FBEC77D8DC38F61
Certificate serial: 03A6
Authority key identifier: 28:29:34:36:D4:D6:DA:3A:93:A6:0E:CA:3F:BE:C7:7D:8D:C3:8F:61
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/KCk0NtTW2jqTpg7KP77HfY3Dj2E.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D5F5A/2173E83ADAA611ED8227D4C42F6D8C1D/74B5C16292FF11F0BA81327BDAE4EC9C.roa
Signing time: Tue 16 Sep 2025 13:17:12 +0000
ROA not before: Tue 16 Sep 2025 13:17:08 +0000
ROA not after: Wed 16 Sep 2026 13:17:08 +0000
asID: 37276
IP address blocks: 2c0f:2040::/32 maxlen: 49
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D5F5A/2173E83ADAA611ED8227D4C42F6D8C1D/KCk0NtTW2jqTpg7KP77HfY3Dj2E.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D5F5A/2173E83ADAA611ED8227D4C42F6D8C1D/KCk0NtTW2jqTpg7KP77HfY3Dj2E.mft
rsync://rpki.afrinic.net/repository/afrinic/KCk0NtTW2jqTpg7KP77HfY3Dj2E.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 18 Sep 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 934 (0x3a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D5F5AAF, serialNumber=28293436D4D6DA3A93A60ECA3FBEC77D8DC38F61
Validity
Not Before: Sep 16 13:17:08 2025 GMT
Not After : Sep 16 13:17:08 2026 GMT
Subject: CN=68c96358-62f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d2:55:3d:c3:7c:11:cf:a9:10:50:c2:a6:d9:
38:7b:8e:48:31:5a:0d:d8:e7:ce:a1:a3:1e:b7:2a:
3f:1d:7b:0a:ca:75:1c:f4:49:44:38:2c:54:6e:da:
36:56:0a:31:54:72:03:3f:d9:80:a8:07:95:61:42:
f4:d4:bd:e4:09:99:d1:1a:9b:25:4e:5f:ec:b8:d0:
31:11:0b:54:71:b6:7b:81:4a:68:dd:d4:ed:f2:10:
70:b5:f7:10:61:09:19:91:12:4c:f9:53:93:31:92:
38:f8:4e:d0:1c:e2:32:ae:50:4b:0e:05:9f:32:21:
35:a0:e0:84:65:c2:68:1f:36:e3:51:5a:07:fb:41:
44:da:0d:f1:32:c6:e6:c9:e7:95:99:51:11:7b:15:
ac:03:7c:1b:c0:de:b8:32:d3:04:25:d8:60:2c:71:
8c:d7:b1:d8:44:79:96:56:60:21:0b:1a:15:0c:72:
07:e3:d2:9d:a2:30:c1:04:19:55:3a:d6:7a:3e:ff:
15:65:06:9e:05:e8:8c:a4:fd:89:6b:b9:a4:71:00:
b3:11:07:e0:a2:06:5a:7c:ed:d0:62:78:7f:41:8a:
0a:cd:25:77:38:50:ed:9a:a9:95:e5:1c:6b:d9:76:
7b:a2:ac:45:33:f6:0d:14:56:d2:96:ca:83:31:7a:
d8:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:AF:0E:8A:6A:B1:B7:87:F3:A1:E9:31:F1:FC:99:29:A7:06:04:32
X509v3 Authority Key Identifier:
keyid:28:29:34:36:D4:D6:DA:3A:93:A6:0E:CA:3F:BE:C7:7D:8D:C3:8F:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D5F5A/2173E83ADAA611ED8227D4C42F6D8C1D/KCk0NtTW2jqTpg7KP77HfY3Dj2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KCk0NtTW2jqTpg7KP77HfY3Dj2E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D5F5A/2173E83ADAA611ED8227D4C42F6D8C1D/74B5C16292FF11F0BA81327BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:2040::/32
Signature Algorithm: sha256WithRSAEncryption
8c:93:d5:1e:92:80:55:d5:14:f5:02:2f:37:ce:19:88:a0:af:
74:97:d3:5a:35:4c:4d:f9:f3:fe:ed:ce:b4:87:21:83:20:65:
aa:bc:13:ec:1f:cf:56:35:bc:1f:cd:a5:ac:cd:af:2f:fd:71:
03:36:da:54:48:e5:3a:85:b3:e0:7d:10:c5:ab:3d:e1:ed:d4:
fa:31:c6:c1:c0:7e:d2:cd:4a:3b:78:16:25:6f:b5:1b:48:6f:
f0:b2:48:f7:36:c1:aa:a4:3c:7a:3c:87:56:29:c7:09:7c:87:
c7:f3:87:20:e3:40:90:b5:b1:6e:9d:08:27:cc:69:fa:87:73:
e6:8b:46:34:76:b2:2c:90:39:f2:eb:52:4e:f2:54:5a:98:8e:
34:21:2f:db:29:ef:e0:b1:bb:c3:f4:cf:d2:ac:58:37:e2:98:
6f:45:cd:02:bf:c5:38:16:17:a1:23:ae:eb:dd:71:e7:88:63:
c2:79:ed:57:11:7e:84:03:f2:a2:ce:3a:33:00:bc:17:d5:d0:
2a:1f:a4:b2:e4:b8:9d:f8:7b:63:b0:fd:16:e4:89:be:02:6c:
6c:76:27:af:cf:7d:cc:77:8f:28:61:8e:ac:d1:66:a9:90:71:
33:b4:8d:36:ff:97:f4:6d:fd:21:1a:d6:47:d1:f9:f7:d3:7b:
66:2b:26:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 23:08:39 2025 by rpki-client