Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F144C/7C12AB22D2E511E98E28C968F8AEA228/FF4B07AC846711F0A270AC7BDAE4EC9C.roa
File: FF4B07AC846711F0A270AC7BDAE4EC9C.roa (raw, json)
Hash identifier: Q3K1cN6OB7yLaygtcJrb/JNZEt+1W3HC/PXLY3fzcBE=
Subject key identifier: 16:79:23:AB:2E:E0:F1:3D:71:46:57:93:36:BB:D5:77:D0:5C:68:4D
Certificate issuer: /CN=F36F144CAF/serialNumber=0F056DBB4B20183C7404AD3CEB697C96C62EBC81
Certificate serial: 08BA
Authority key identifier: 0F:05:6D:BB:4B:20:18:3C:74:04:AD:3C:EB:69:7C:96:C6:2E:BC:81
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/DwVtu0sgGDx0BK0862l8lsYuvIE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F144C/7C12AB22D2E511E98E28C968F8AEA228/FF4B07AC846711F0A270AC7BDAE4EC9C.roa
Signing time: Thu 28 Aug 2025 23:37:45 +0000
ROA not before: Fri 29 Aug 2025 23:37:38 +0000
ROA not after: Wed 29 Aug 2035 23:37:38 +0000
asID: 328209
IP address blocks: 2001:43f8:d20::/44 maxlen: 64
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F144C/7C12AB22D2E511E98E28C968F8AEA228/DwVtu0sgGDx0BK0862l8lsYuvIE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F144C/7C12AB22D2E511E98E28C968F8AEA228/DwVtu0sgGDx0BK0862l8lsYuvIE.mft
rsync://rpki.afrinic.net/repository/afrinic/DwVtu0sgGDx0BK0862l8lsYuvIE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Sep 2025 01:35:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2234 (0x8ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F144CAF, serialNumber=0F056DBB4B20183C7404AD3CEB697C96C62EBC81
Validity
Not Before: Aug 29 23:37:38 2025 GMT
Not After : Aug 29 23:37:38 2035 GMT
Subject: CN=68b0e849-ab8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:96:98:7f:9c:cf:e1:75:ea:00:e5:6b:10:50:
c4:6d:36:8d:93:56:2f:d7:d6:21:c9:ca:7e:89:12:
a2:7a:5f:af:2a:27:b1:72:15:96:bd:31:0e:b1:ba:
98:a6:cc:76:71:b4:c5:13:59:b9:aa:22:27:48:be:
8b:47:de:91:6e:2d:36:04:ac:15:b5:05:33:c7:74:
dd:17:70:b2:39:55:fc:47:be:ff:4b:3b:e0:da:67:
91:a7:5f:24:85:7e:04:ab:39:66:8c:50:ec:57:19:
e8:27:f2:cc:18:07:18:89:3f:86:b6:13:86:73:84:
03:9a:d5:31:81:fb:8b:1b:ab:0d:fe:8a:64:34:2a:
88:d4:3e:68:69:c5:e0:fc:a2:6d:b3:ba:47:3a:ca:
5d:16:3a:29:45:cd:e8:65:0e:a0:ec:49:0d:a9:29:
c6:e5:6a:e0:81:a3:c1:0e:61:51:85:14:1a:37:dd:
d4:c4:d3:0a:56:53:40:8f:af:1e:aa:df:68:71:3d:
94:7a:10:61:c2:6d:90:a6:4f:80:80:37:34:83:2c:
05:17:e5:50:b8:65:90:f6:81:62:98:38:82:c8:1e:
8e:5f:22:d5:03:51:8e:ac:82:00:f2:24:d1:45:d9:
72:b1:8b:1e:18:13:f8:94:a2:0f:ce:c6:53:e7:1c:
14:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:79:23:AB:2E:E0:F1:3D:71:46:57:93:36:BB:D5:77:D0:5C:68:4D
X509v3 Authority Key Identifier:
keyid:0F:05:6D:BB:4B:20:18:3C:74:04:AD:3C:EB:69:7C:96:C6:2E:BC:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F144C/7C12AB22D2E511E98E28C968F8AEA228/DwVtu0sgGDx0BK0862l8lsYuvIE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DwVtu0sgGDx0BK0862l8lsYuvIE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F144C/7C12AB22D2E511E98E28C968F8AEA228/FF4B07AC846711F0A270AC7BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:43f8:d20::/44
Signature Algorithm: sha256WithRSAEncryption
3f:22:16:b2:4e:b4:55:e1:8e:74:50:1b:00:c2:bb:2d:12:13:
71:af:af:e9:66:9f:6b:11:89:ff:11:f8:96:f2:0e:0b:67:d9:
3e:f4:8d:a1:38:f4:b7:3f:cc:7c:ee:72:dd:74:00:d7:28:47:
de:7b:ad:0e:7c:85:43:ab:3a:08:3f:7c:6e:ce:36:d0:c3:7f:
24:45:36:f8:dd:1f:ae:d3:89:c1:82:ef:db:eb:d2:c4:f0:1f:
82:f2:a3:6e:8b:c5:60:99:e4:c7:d6:a2:8d:ba:ed:21:69:f4:
91:b6:3b:cc:2f:84:ae:4e:83:c0:25:b8:5e:5d:58:f7:f5:f6:
0e:e9:2c:ad:db:27:a7:77:c5:31:ac:81:6f:b5:13:52:d0:8e:
2a:25:c0:7d:66:f3:07:98:17:4f:8e:d1:21:35:c5:35:ff:fc:
84:24:e4:5f:e2:cc:06:bd:4a:27:ca:fc:72:b8:89:30:42:f3:
7c:e5:3c:6d:85:a5:83:6b:53:9c:09:23:01:f3:5b:40:85:3c:
12:c8:f5:06:fc:4b:33:e6:fc:c4:c6:fa:4f:b2:94:bd:4c:22:
ef:52:89:ed:3c:74:60:44:05:ba:b8:e3:59:27:b7:66:06:b2:
78:b3:18:c7:d2:32:87:9a:b5:be:bd:87:4b:19:b0:4d:f4:d3:
a1:48:ba:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 14 01:09:10 2025 by rpki-client