Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A6479/AB9C3F72734611F09CF009B9DAE4EC9C/9C7116DC73A811F08531AFB0DAE4EC9C.roa
File: 9C7116DC73A811F08531AFB0DAE4EC9C.roa (raw, json)
Hash identifier: ANdsPHDpERRBS2N40a4jqwQXofv+X5MVrCEvGbwWGuo=
Subject key identifier: 95:C2:E4:22:BA:29:35:85:1F:BB:73:9A:86:EF:0C:13:03:0E:27:FB
Certificate issuer: /CN=F36A6479AF/serialNumber=7153C5AF5226196F3210CCF067BFB03979ABE16A
Certificate serial: 09
Authority key identifier: 71:53:C5:AF:52:26:19:6F:32:10:CC:F0:67:BF:B0:39:79:AB:E1:6A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/cVPFr1ImGW8yEMzwZ7-wOXmr4Wo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A6479/AB9C3F72734611F09CF009B9DAE4EC9C/9C7116DC73A811F08531AFB0DAE4EC9C.roa
Signing time: Thu 07 Aug 2025 16:07:27 +0000
ROA not before: Thu 07 Aug 2025 16:07:21 +0000
ROA not after: Mon 31 Aug 2026 16:07:21 +0000
asID: 214354
IP address blocks: 2c0f:2cc0::/40 maxlen: 41
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A6479/AB9C3F72734611F09CF009B9DAE4EC9C/cVPFr1ImGW8yEMzwZ7-wOXmr4Wo.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A6479/AB9C3F72734611F09CF009B9DAE4EC9C/cVPFr1ImGW8yEMzwZ7-wOXmr4Wo.mft
rsync://rpki.afrinic.net/repository/afrinic/cVPFr1ImGW8yEMzwZ7-wOXmr4Wo.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9 (0x9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A6479AF, serialNumber=7153C5AF5226196F3210CCF067BFB03979ABE16A
Validity
Not Before: Aug 7 16:07:21 2025 GMT
Not After : Aug 31 16:07:21 2026 GMT
Subject: CN=6894cf3f-7b1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2d:8f:03:0a:a0:c6:db:1c:35:b9:5b:2f:18:
d1:c9:6f:79:21:4c:5c:fc:b9:df:fa:b2:42:77:39:
5d:e3:f2:2c:21:09:e7:7a:57:e0:b6:dc:5c:89:be:
b0:e5:7c:b2:b8:68:c1:40:eb:3e:43:e8:f3:36:2c:
1c:90:a2:c9:99:d8:69:66:ad:a7:81:4b:dd:a9:42:
e7:1a:c6:e1:c0:fe:5e:07:b0:1e:de:a4:ef:8e:f0:
7e:da:77:38:c3:85:5c:5a:bb:25:6f:b5:75:cf:1f:
50:6f:bc:15:45:3f:bc:f3:67:7e:35:69:44:0d:fe:
95:b4:49:20:b1:d4:c3:25:2d:1e:c7:a7:c4:24:20:
18:fd:10:e8:d1:11:3c:0b:0a:09:c7:a0:87:e7:45:
c0:8e:6e:c0:aa:09:36:5f:ef:07:ac:ac:40:35:04:
bf:27:35:52:a6:4b:b9:c6:5d:78:c2:7d:70:e6:11:
1a:4d:b1:b6:7c:19:44:fe:9f:e5:f4:1a:0b:a2:9b:
dc:f5:4e:d0:6d:08:b0:79:45:ec:17:36:54:d7:49:
d4:e4:56:3f:6d:c5:12:0f:4a:96:b8:69:96:ae:44:
d5:c1:5c:1f:1a:df:66:72:8f:34:b5:51:a3:d7:3c:
89:c5:c1:1c:ef:99:99:01:f0:77:31:be:7f:d2:95:
fb:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:C2:E4:22:BA:29:35:85:1F:BB:73:9A:86:EF:0C:13:03:0E:27:FB
X509v3 Authority Key Identifier:
keyid:71:53:C5:AF:52:26:19:6F:32:10:CC:F0:67:BF:B0:39:79:AB:E1:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6479/AB9C3F72734611F09CF009B9DAE4EC9C/cVPFr1ImGW8yEMzwZ7-wOXmr4Wo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/cVPFr1ImGW8yEMzwZ7-wOXmr4Wo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6479/AB9C3F72734611F09CF009B9DAE4EC9C/9C7116DC73A811F08531AFB0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:2cc0::/40
Signature Algorithm: sha256WithRSAEncryption
7c:91:54:41:aa:42:62:dc:b4:e0:6c:d9:1f:87:0f:36:68:b2:
d9:3c:ef:05:64:f7:18:b2:b8:5e:ed:45:cb:bf:db:f8:5a:80:
e9:ce:f4:ec:b3:bb:2e:46:11:3c:16:7a:9a:f5:29:44:04:de:
79:c5:56:f2:0d:5e:14:7d:e7:ab:06:df:ae:82:58:4f:3e:a7:
76:44:49:24:10:32:94:b4:00:1f:85:a1:6b:b0:98:9c:bd:77:
3b:ac:f2:c6:6b:6c:b8:4f:e4:b1:a6:eb:d2:b9:bc:70:ed:a1:
d1:02:5d:a3:40:76:d2:80:1f:ed:28:47:75:22:88:63:d4:bd:
e9:09:3a:a2:ce:3e:03:dc:47:a7:96:4f:7a:e2:d1:b1:6b:c6:
12:76:e2:8f:15:84:71:9d:a8:2e:17:b7:d0:67:92:19:5b:4f:
97:99:37:71:f8:5d:de:ca:cc:ca:9c:f5:c0:57:d5:2a:aa:ad:
55:50:20:bf:ee:65:82:8e:88:01:e1:39:aa:4e:55:3b:bf:25:
d9:72:da:bf:fe:6c:58:80:c3:bd:1a:63:d5:b4:d2:5e:a6:55:
57:0a:fa:0e:d9:a1:70:5f:e4:40:6f:49:f5:9d:39:f6:9a:6f:
d3:85:bc:5e:89:20:37:d2:b9:da:0e:15:7b:f2:cc:06:5a:94:
c1:1d:f6:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:21:14 2025 by rpki-client