Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/3FF210A8625711F08B604AD6DAE4EC9C.roa
File: 3FF210A8625711F08B604AD6DAE4EC9C.roa (raw, json)
Hash identifier: zNyQHQEUKkigM9g+wWCSuCKgDN1DQE+TD5fh7VtDwxw=
Subject key identifier: 00:75:BA:3F:30:92:32:D1:22:0C:80:2C:F3:BD:11:9E:27:40:18:6F
Certificate issuer: /CN=F36F387AAF/serialNumber=248CA48587693FF1CD5D8366224ACA0D2B97CA3B
Certificate serial: 0224
Authority key identifier: 24:8C:A4:85:87:69:3F:F1:CD:5D:83:66:22:4A:CA:0D:2B:97:CA:3B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JIykhYdpP_HNXYNmIkrKDSuXyjs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/3FF210A8625711F08B604AD6DAE4EC9C.roa
Signing time: Wed 16 Jul 2025 15:12:13 +0000
ROA not before: Wed 16 Jul 2025 15:12:08 +0000
ROA not after: Mon 16 Jul 2035 15:12:08 +0000
asID: 37410
IP address blocks: 41.57.80.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.mft
rsync://rpki.afrinic.net/repository/afrinic/JIykhYdpP_HNXYNmIkrKDSuXyjs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 03 Aug 2025 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 548 (0x224)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F387AAF, serialNumber=248CA48587693FF1CD5D8366224ACA0D2B97CA3B
Validity
Not Before: Jul 16 15:12:08 2025 GMT
Not After : Jul 16 15:12:08 2035 GMT
Subject: CN=6877c14d-cd4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:60:37:61:13:9b:d1:59:eb:b0:65:64:19:d3:
6a:1c:36:95:3f:a7:4a:97:fb:f9:68:57:9d:d7:e1:
11:7f:a8:20:e0:7d:85:d9:e6:7b:e1:d7:19:c4:22:
b1:89:e1:57:bd:2e:92:1f:9e:30:99:a4:9a:f3:82:
8b:57:79:ab:97:c7:ef:65:ee:21:e0:d0:4b:2e:37:
3c:fe:e9:c6:94:ca:47:1d:7b:1a:21:95:38:56:26:
e0:a9:19:56:70:b3:74:88:79:24:67:12:56:3e:0a:
ff:2a:7c:ff:b0:26:8d:0a:0a:6d:52:65:9c:2b:6a:
07:4e:5d:4f:b9:e3:b0:51:e0:7a:c3:d2:6b:61:56:
2f:d5:e2:fe:30:92:0e:8a:78:df:45:ff:36:4b:11:
8c:52:fd:a4:0a:f5:cc:3a:c3:72:e6:f2:a9:69:e2:
33:55:b1:22:04:e5:fb:b8:aa:ef:cc:64:b1:a7:9d:
4c:24:11:cd:ee:8d:bf:10:10:0e:7c:af:c8:fc:1b:
f3:6d:c7:db:d4:76:62:15:2e:c8:eb:fd:36:3f:1f:
b1:2e:7c:61:e5:5c:c6:13:f0:b3:9d:d1:ef:d5:e1:
3f:30:ed:1d:23:4e:36:91:41:a9:89:51:d4:2a:6a:
08:93:be:f4:0a:41:4b:56:ba:87:8f:74:97:8e:1c:
01:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:75:BA:3F:30:92:32:D1:22:0C:80:2C:F3:BD:11:9E:27:40:18:6F
X509v3 Authority Key Identifier:
keyid:24:8C:A4:85:87:69:3F:F1:CD:5D:83:66:22:4A:CA:0D:2B:97:CA:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JIykhYdpP_HNXYNmIkrKDSuXyjs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/3FF210A8625711F08B604AD6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.57.80.0/20
Signature Algorithm: sha256WithRSAEncryption
80:cb:d6:17:fd:8f:a4:87:82:4a:bd:02:09:b5:b3:a3:5a:1a:
e8:b0:88:88:77:74:12:6c:0a:40:1f:ff:d4:d5:57:55:5d:64:
65:f3:41:63:89:9b:f1:66:e5:09:f6:e3:1a:67:7c:1c:52:c0:
2b:b5:f3:0e:ae:92:6e:ab:79:09:86:cd:18:37:90:ff:e1:61:
02:16:66:b0:13:c2:28:ef:13:a2:b8:d0:35:24:c7:00:f6:ac:
25:97:53:6a:98:5a:7a:91:a3:e8:1e:3b:f3:2f:80:2a:aa:9c:
bb:ab:34:2a:94:e9:1f:f5:c1:e5:82:06:99:a0:d5:37:6a:4c:
1c:95:f5:a6:0b:7a:fb:bf:ae:f0:74:96:2e:c6:ca:a6:c6:de:
8f:ff:bb:d6:2b:e8:5d:81:37:2d:8a:d6:ac:b5:80:77:fb:ec:
b3:01:af:a4:cb:08:66:68:d0:ef:fa:01:9b:63:c3:76:8e:9e:
42:a9:d9:c0:c8:35:c1:c8:7a:df:25:ea:68:4e:de:a3:5d:25:
f4:ca:e1:be:df:a3:e1:8d:e4:0d:c3:1a:05:40:bc:66:c5:78:
53:91:54:ba:c4:66:6c:19:9a:13:08:97:60:56:41:3d:31:7d:
8e:1c:3f:c2:49:2a:e5:0d:d5:92:f7:c1:be:34:1d:a1:48:0f:
7b:98:e3:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 1 18:11:38 2025 by rpki-client