Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/7BE3DA509ECB11F0B8ED66DCDAE4EC9C.roa
File: 7BE3DA509ECB11F0B8ED66DCDAE4EC9C.roa (raw, json)
Hash identifier: Yv9EYVsOa8ZtIz8yIrYaEcrbV+1DlYyUsMHPDQ29rmo=
Subject key identifier: F0:72:F1:3C:CE:B6:9E:D5:A3:97:EA:38:9D:35:53:F8:74:BC:E5:78
Certificate issuer: /CN=F369591CAF/serialNumber=C1090D37DA9FFEEE1A9C229BAFF1190BD22E8934
Certificate serial: 040E
Authority key identifier: C1:09:0D:37:DA:9F:FE:EE:1A:9C:22:9B:AF:F1:19:0B:D2:2E:89:34
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/7BE3DA509ECB11F0B8ED66DCDAE4EC9C.roa
Signing time: Wed 01 Oct 2025 13:35:25 +0000
ROA not before: Wed 01 Oct 2025 13:35:19 +0000
ROA not after: Tue 31 Dec 2030 13:35:19 +0000
asID: 15964
IP address blocks: 2001:4268::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.mft
rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1038 (0x40e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369591CAF, serialNumber=C1090D37DA9FFEEE1A9C229BAFF1190BD22E8934
Validity
Not Before: Oct 1 13:35:19 2025 GMT
Not After : Dec 31 13:35:19 2030 GMT
Subject: CN=68dd2e1c-6dc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e7:05:ef:44:10:30:bf:56:cc:55:be:b2:92:
12:ac:1d:97:82:ce:e5:18:6a:dc:de:bc:22:6d:91:
c3:97:37:69:9c:dd:fe:cc:88:b0:04:f0:ba:59:c4:
cc:44:68:be:b4:45:0f:e5:59:27:b0:9b:07:22:2a:
6f:23:b6:1b:4c:1a:13:b4:0a:ee:07:55:e3:6f:7f:
6b:2c:91:ca:a4:04:5e:51:b6:11:fb:f6:2a:7e:c4:
12:a0:4d:d7:1e:55:fa:d2:1e:15:a1:09:53:d3:d5:
5a:18:bd:2f:ef:25:01:dd:a2:1f:09:55:ce:8a:7a:
f6:f0:d5:68:6a:79:58:f7:85:d8:9b:dd:83:9c:0e:
13:13:f4:4c:72:e4:01:17:41:5f:dd:b4:8f:89:ac:
7e:91:13:f7:04:f6:dd:52:16:a0:4c:0b:d3:0f:d9:
49:d6:06:a3:f2:f4:52:27:77:35:b2:08:f2:a1:89:
a3:fc:bc:7b:41:17:ac:e8:00:fb:2f:e0:24:fc:8e:
85:4c:b8:a0:97:74:db:5d:8c:08:c0:42:3b:d9:60:
f4:31:eb:9f:9d:4f:00:7c:24:d8:2a:af:cf:3e:7f:
3b:4b:35:44:0c:b9:20:fe:f1:ad:ca:9f:d2:f9:b7:
5b:13:74:cb:82:aa:89:7e:7a:92:1d:ec:9c:42:85:
cf:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:72:F1:3C:CE:B6:9E:D5:A3:97:EA:38:9D:35:53:F8:74:BC:E5:78
X509v3 Authority Key Identifier:
keyid:C1:09:0D:37:DA:9F:FE:EE:1A:9C:22:9B:AF:F1:19:0B:D2:2E:89:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/7BE3DA509ECB11F0B8ED66DCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:4268::/32
Signature Algorithm: sha256WithRSAEncryption
0c:2c:a0:3c:62:f5:c3:76:4c:34:db:82:0d:4d:06:13:49:f5:
97:fe:96:32:f2:69:f1:7a:d4:67:e2:a1:d7:9b:5c:af:7b:d5:
61:00:8b:f5:20:59:0d:cd:2d:1f:35:20:44:51:50:eb:1f:16:
a6:65:1d:aa:c6:12:40:79:89:a0:7b:1d:d8:e6:26:a2:2c:85:
23:ba:62:f9:44:36:ea:cd:c2:7a:de:9f:ca:fa:47:e5:de:90:
54:58:74:33:56:3f:a9:eb:f3:83:20:ac:f7:8f:04:d6:fb:1a:
1a:6e:c8:15:65:42:11:be:d8:bc:d6:16:f9:62:f2:83:21:6c:
cc:42:6a:80:3c:05:46:73:ff:36:85:6b:73:c1:d1:02:81:74:
7a:52:b7:ce:a2:71:56:28:32:e9:b5:70:80:7c:98:5a:aa:31:
50:fb:2f:bd:05:2c:0a:c1:af:58:2f:73:9a:54:73:c9:62:72:
c6:73:0a:5b:c5:5d:63:6d:b3:18:12:4f:31:3e:43:44:59:e3:
aa:ab:fd:6a:5d:48:e8:57:39:3d:83:42:d7:8f:c5:ad:49:9d:
a7:21:b1:48:14:76:dc:a7:2f:23:39:4f:b5:83:69:b6:f0:d2:
be:96:94:91:f9:ff:5f:db:c1:53:74:ba:a2:53:9d:3b:01:0d:
a7:77:32:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:52:07 2025 by rpki-client