Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/87292E6AA01A11F0B32F60DFDAE4EC9C.roa
File: 87292E6AA01A11F0B32F60DFDAE4EC9C.roa (raw, json)
Hash identifier: 4nhIZUohQE/GQcQXC4C3luqxwBzt+U4vIAe9MdQWT3w=
Subject key identifier: 30:78:DD:AE:E8:47:25:E4:9E:47:45:01:3D:9E:6E:60:2D:EB:8F:44
Certificate issuer: /CN=F3621C06AF/serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Certificate serial: 0691
Authority key identifier: 1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/87292E6AA01A11F0B32F60DFDAE4EC9C.roa
Signing time: Fri 03 Oct 2025 05:33:45 +0000
ROA not before: Fri 03 Oct 2025 05:33:40 +0000
ROA not after: Sun 31 Dec 2045 05:33:40 +0000
asID: 328327
IP address blocks: 2c0f:c00::/32 maxlen: 56
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl
rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.mft
rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1681 (0x691)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3621C06AF, serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Validity
Not Before: Oct 3 05:33:40 2025 GMT
Not After : Dec 31 05:33:40 2045 GMT
Subject: CN=68df6039-9c05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9b:6a:a8:ff:02:c1:a2:bd:7b:d3:d5:28:e9:
dc:d7:22:95:5f:d2:c6:90:4a:15:1b:26:bc:89:64:
8f:a9:41:c8:55:03:36:61:28:b2:85:0c:65:41:e1:
8f:15:8c:fe:1b:5b:5c:62:9c:ec:e7:89:99:49:34:
da:80:74:95:c6:ca:98:16:d3:3a:3a:5d:2b:ad:e9:
f0:1a:74:74:61:aa:7e:54:e9:ca:69:55:6a:65:62:
7c:45:6a:77:fe:ac:bf:24:8b:fd:9a:77:9b:c0:5f:
73:4b:d6:bd:59:80:59:a1:94:20:0f:06:f9:3e:2c:
cf:04:9d:de:b7:2a:83:d1:b8:f6:26:d9:31:db:d3:
08:85:4e:0d:ae:ae:18:f2:16:cf:5e:f3:70:68:1b:
b0:e4:2d:f9:46:12:1c:1a:5c:a4:f4:9d:e0:ac:62:
3f:1d:5f:5b:e7:59:5c:85:36:19:0b:26:d8:28:65:
0f:af:c1:3e:5c:f2:22:18:14:2b:1e:b5:4e:9e:4c:
c2:f4:af:0c:48:18:2c:bb:c9:57:aa:9d:17:6c:a1:
e3:50:c1:21:6c:f9:24:ff:01:a1:5f:ff:69:c6:7d:
78:fe:f6:70:59:41:74:55:4c:a0:fe:9c:22:e2:06:
e5:e5:58:4e:a9:73:1c:77:3c:84:6a:b7:7f:b6:37:
93:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:78:DD:AE:E8:47:25:E4:9E:47:45:01:3D:9E:6E:60:2D:EB:8F:44
X509v3 Authority Key Identifier:
keyid:1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/87292E6AA01A11F0B32F60DFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:c00::/32
Signature Algorithm: sha256WithRSAEncryption
9a:2b:7b:36:6b:12:f3:27:a7:ad:1a:40:d9:5e:51:62:35:d1:
72:de:e8:1f:26:aa:ee:aa:4b:44:da:0a:8a:e7:06:84:67:73:
56:9b:92:c7:26:86:bd:eb:35:11:44:a9:da:6d:c1:b4:7e:b7:
73:89:07:d3:aa:da:07:c1:02:b4:fd:08:4e:39:1d:49:8b:d6:
c8:85:a2:22:5c:1a:0b:cd:41:9c:0b:53:57:c0:a4:1a:f7:29:
99:0c:26:72:18:34:35:18:e7:5a:63:0c:58:b0:88:c3:f0:39:
39:d7:7e:24:5f:a9:d7:b3:bb:d7:e7:2e:4f:ca:4b:21:77:af:
3d:eb:ac:78:61:e3:60:94:ec:d6:dc:a7:45:4f:60:c4:b7:b7:
21:8a:58:58:f3:dc:96:47:4b:a3:c9:d8:b6:07:53:47:99:9e:
c3:47:70:a6:0b:75:45:2a:99:6c:71:92:82:f0:d4:09:d5:f8:
cb:d8:e2:02:43:d0:74:97:4d:dc:13:6c:30:05:6b:be:c9:3a:
d4:b8:d1:d6:b4:c6:a7:a1:e2:7c:6c:f1:a6:0f:37:7d:fe:9b:
92:4a:d9:49:b9:5b:d9:44:28:40:b0:64:04:37:1d:cf:7b:36:
a4:42:f9:c1:22:77:5a:52:cd:ee:96:c2:4f:2a:11:0c:6d:4c:
17:d4:81:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:22:35 2025 by rpki-client