Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3612F3C/8EED16AA7BE111F0AB1C77C8DAE4EC9C/6CB2B7D07BEF11F0884557ADDAE4EC9C.roa
File: 6CB2B7D07BEF11F0884557ADDAE4EC9C.roa (raw, json)
Hash identifier: gRRdBI2/xy+JKVWvM72Wwdc+TXnKiRgcUDXWVr3Hppw=
Subject key identifier: 19:28:F4:5D:62:0E:62:F1:0D:D6:4F:D0:FE:C9:E3:96:17:12:AE:16
Certificate issuer: /CN=F3612F3CAF/serialNumber=0141E2033D409A720AE3AA3ED40FBA42D5FA5B98
Certificate serial: 0B
Authority key identifier: 01:41:E2:03:3D:40:9A:72:0A:E3:AA:3E:D4:0F:BA:42:D5:FA:5B:98
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/AUHiAz1AmnIK46o-1A-6QtX6W5g.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3612F3C/8EED16AA7BE111F0AB1C77C8DAE4EC9C/6CB2B7D07BEF11F0884557ADDAE4EC9C.roa
Signing time: Mon 18 Aug 2025 04:54:30 +0000
ROA not before: Mon 18 Aug 2025 04:54:21 +0000
ROA not after: Tue 30 Nov 2027 04:54:21 +0000
asID: 328303
IP address blocks: 154.65.16.0/21 maxlen: 21
154.65.16.0/21 maxlen: 24
2c0f:eeb8::/32 maxlen: 32
2c0f:eeb8::/32 maxlen: 36
2c0f:eeb8::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3612F3C/8EED16AA7BE111F0AB1C77C8DAE4EC9C/AUHiAz1AmnIK46o-1A-6QtX6W5g.crl
rsync://rpki.afrinic.net/repository/member_repository/F3612F3C/8EED16AA7BE111F0AB1C77C8DAE4EC9C/AUHiAz1AmnIK46o-1A-6QtX6W5g.mft
rsync://rpki.afrinic.net/repository/afrinic/AUHiAz1AmnIK46o-1A-6QtX6W5g.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11 (0xb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3612F3CAF, serialNumber=0141E2033D409A720AE3AA3ED40FBA42D5FA5B98
Validity
Not Before: Aug 18 04:54:21 2025 GMT
Not After : Nov 30 04:54:21 2027 GMT
Subject: CN=68a2b206-7d2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4b:e5:33:4c:e0:5e:96:73:f3:bc:98:1a:08:
df:12:5c:d2:bd:7d:9f:2c:8e:f4:71:ea:d9:51:38:
fc:68:9a:61:06:2c:88:d0:6b:4e:04:bb:85:e1:34:
64:53:f2:56:40:de:29:0f:5d:53:f3:82:81:f5:e4:
75:9c:e0:3f:7b:ca:ae:4c:82:6f:5b:59:08:8f:cb:
bd:01:cc:ce:9c:25:2a:96:77:3a:b8:99:75:e7:fd:
14:d5:7f:3c:43:0d:eb:ab:50:80:b4:73:db:80:58:
cc:37:8f:84:70:99:f6:60:1c:d1:d4:22:de:72:43:
8e:1a:05:ed:7f:a3:f3:4f:f1:87:22:da:51:34:7c:
26:a5:bb:81:9b:a5:4d:7d:cf:4d:e8:a2:fd:a3:f1:
72:37:63:34:0e:a9:56:c6:9f:71:07:be:fa:8b:64:
15:b5:a3:de:34:1f:33:6b:2d:2b:22:4d:66:d9:fa:
92:ea:f7:5c:e2:6a:7c:5d:ff:3d:5b:ac:24:24:3c:
8f:6a:cf:7f:b9:29:ff:52:39:49:35:89:66:12:bf:
fc:26:44:d9:8d:49:72:93:77:83:22:8e:1a:e9:9d:
a1:dd:28:44:6c:2e:07:6e:9c:57:58:b7:ec:f5:ce:
0d:28:2d:f4:f7:29:23:37:b5:a3:47:06:e3:7f:30:
2b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:28:F4:5D:62:0E:62:F1:0D:D6:4F:D0:FE:C9:E3:96:17:12:AE:16
X509v3 Authority Key Identifier:
keyid:01:41:E2:03:3D:40:9A:72:0A:E3:AA:3E:D4:0F:BA:42:D5:FA:5B:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3612F3C/8EED16AA7BE111F0AB1C77C8DAE4EC9C/AUHiAz1AmnIK46o-1A-6QtX6W5g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/AUHiAz1AmnIK46o-1A-6QtX6W5g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3612F3C/8EED16AA7BE111F0AB1C77C8DAE4EC9C/6CB2B7D07BEF11F0884557ADDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.65.16.0/21
IPv6:
2c0f:eeb8::/32
Signature Algorithm: sha256WithRSAEncryption
03:9d:e2:8f:ee:0f:5b:62:a4:52:8b:4f:d6:34:96:9c:cf:f3:
0d:77:2d:85:36:24:90:18:78:cb:2f:c3:ce:9a:3f:10:81:8e:
f2:26:67:70:84:bc:56:c8:5d:4c:f2:08:38:ea:77:b5:2a:fb:
48:78:32:da:ed:f1:4f:23:9c:07:4d:17:eb:26:a6:48:c8:61:
90:a4:4e:7a:67:fa:35:e7:76:a4:ff:42:bc:b6:59:52:fe:d2:
99:bd:94:85:a8:7d:75:d1:9c:1a:75:67:c0:8b:0d:e3:92:d5:
1d:04:50:9a:ff:cf:04:0e:f5:89:a2:ee:d1:a9:aa:c0:4f:95:
ef:de:67:f4:e1:3c:a9:a2:ae:a4:c5:35:6d:cd:ef:7d:8b:e9:
25:36:a5:2e:85:3d:17:41:27:b9:51:a0:9c:4d:1b:95:10:54:
dd:15:88:31:d1:d9:ad:fa:48:e8:c5:05:f8:10:1b:0e:2a:66:
bd:9d:3a:bb:c7:d4:06:5d:46:28:22:40:7f:4a:4a:5a:2e:a5:
6a:b3:53:cb:24:a1:a5:d7:fa:7a:05:9b:50:17:83:53:77:fa:
a4:fe:40:23:2a:97:b4:33:65:d4:60:6d:ae:8e:0f:52:8d:f1:
eb:bb:95:c0:b2:fb:14:c4:5c:16:8c:71:20:13:95:24:ea:07:
7d:1f:7f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:25:31 2025 by rpki-client