Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A6479/AB9C3F72734611F09CF009B9DAE4EC9C/F71FB0B0736811F083A21C9BDAE4EC9C.roa
File: F71FB0B0736811F083A21C9BDAE4EC9C.roa (raw, json)
Hash identifier: MKPBYXSXa2pckzjw1ygx82EY/SEZ1M2lEyE6SUv2h9k=
Subject key identifier: 21:8B:F6:3B:50:AB:94:DB:02:2B:52:69:2D:D9:F2:6E:A7:04:B5:FD
Certificate issuer: /CN=F36A6479AF/serialNumber=7153C5AF5226196F3210CCF067BFB03979ABE16A
Certificate serial: 07
Authority key identifier: 71:53:C5:AF:52:26:19:6F:32:10:CC:F0:67:BF:B0:39:79:AB:E1:6A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/cVPFr1ImGW8yEMzwZ7-wOXmr4Wo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A6479/AB9C3F72734611F09CF009B9DAE4EC9C/F71FB0B0736811F083A21C9BDAE4EC9C.roa
Signing time: Thu 07 Aug 2025 08:31:51 +0000
ROA not before: Thu 07 Aug 2025 08:31:44 +0000
ROA not after: Mon 31 Aug 2026 08:31:44 +0000
asID: 329592
IP address blocks: 2c0f:2cc0:aa::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A6479/AB9C3F72734611F09CF009B9DAE4EC9C/cVPFr1ImGW8yEMzwZ7-wOXmr4Wo.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A6479/AB9C3F72734611F09CF009B9DAE4EC9C/cVPFr1ImGW8yEMzwZ7-wOXmr4Wo.mft
rsync://rpki.afrinic.net/repository/afrinic/cVPFr1ImGW8yEMzwZ7-wOXmr4Wo.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A6479AF, serialNumber=7153C5AF5226196F3210CCF067BFB03979ABE16A
Validity
Not Before: Aug 7 08:31:44 2025 GMT
Not After : Aug 31 08:31:44 2026 GMT
Subject: CN=68946477-6ad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6f:fe:a9:e0:ba:38:7a:76:1d:1e:10:91:84:
57:77:75:40:c3:c3:23:eb:fe:24:d4:b3:d0:ad:77:
74:5c:4f:70:69:89:23:95:c5:6e:99:91:45:d7:28:
e6:95:e0:06:be:23:31:19:6e:49:b2:21:e2:54:9c:
08:d5:e4:3d:aa:d8:38:59:36:8b:4c:7a:ac:19:80:
3a:d1:78:32:cb:9f:99:a6:b2:5b:1c:0c:14:28:d6:
d5:1a:4f:1b:1e:fb:3a:e4:bf:29:b7:28:74:ee:22:
e4:5e:38:c5:ae:3e:3b:8c:ba:dc:f5:4a:2e:80:1a:
8d:51:06:8f:e3:b3:40:6c:ea:23:b6:ce:38:af:37:
50:02:e6:ff:0a:96:0d:a8:92:b4:81:40:4d:92:60:
dd:41:e4:b1:2a:f9:a9:39:81:3c:21:12:4c:e8:02:
b6:1f:cb:c3:8b:a6:3c:3c:0e:97:4e:bf:e5:ec:29:
72:8e:de:63:35:e0:78:9c:9a:05:47:16:ea:df:a7:
ad:7b:8c:4a:c1:ad:4b:3f:ae:ca:0d:9f:4a:60:0a:
00:1d:62:4e:b7:3c:98:c4:16:fe:50:45:b0:f9:b8:
44:e2:62:1d:7a:1c:a6:df:7f:b4:53:06:55:52:67:
a5:c3:e4:e2:c4:49:d4:f9:ba:88:95:38:75:c0:5e:
48:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:8B:F6:3B:50:AB:94:DB:02:2B:52:69:2D:D9:F2:6E:A7:04:B5:FD
X509v3 Authority Key Identifier:
keyid:71:53:C5:AF:52:26:19:6F:32:10:CC:F0:67:BF:B0:39:79:AB:E1:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6479/AB9C3F72734611F09CF009B9DAE4EC9C/cVPFr1ImGW8yEMzwZ7-wOXmr4Wo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/cVPFr1ImGW8yEMzwZ7-wOXmr4Wo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6479/AB9C3F72734611F09CF009B9DAE4EC9C/F71FB0B0736811F083A21C9BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:2cc0:aa::/48
Signature Algorithm: sha256WithRSAEncryption
98:34:24:37:1c:a9:6c:47:c7:af:30:5d:70:c0:eb:b5:67:06:
49:a5:56:29:1c:ed:d4:20:92:ac:7b:13:9b:d5:fb:3b:71:57:
9c:54:88:1d:cb:f7:5f:90:59:91:35:29:e4:2a:4c:09:49:12:
4f:b6:ff:a7:d4:f5:e2:5b:d5:f9:6f:49:84:e3:e5:6d:f9:96:
56:99:9f:5c:58:8d:97:88:7c:59:d8:21:1a:1c:3b:92:fb:d1:
97:23:17:b4:6f:9e:8a:8a:65:80:3b:52:30:75:cc:c8:33:3b:
41:5e:c4:79:69:b8:e1:f9:6a:68:b9:7f:a9:e5:fb:f1:a0:1e:
5d:8a:bb:77:83:99:85:27:60:2d:29:9a:96:d3:03:24:f3:a5:
d6:7c:c6:d5:57:b3:05:61:c1:5b:fd:96:fe:a9:94:88:8d:32:
1c:e7:83:61:ab:4e:40:5a:4c:a9:ff:91:da:09:99:45:76:a1:
10:83:4f:2d:84:f0:24:74:0e:4e:5a:91:64:24:83:67:90:43:
00:ad:17:1e:65:14:7c:75:b0:81:1d:ab:9a:d8:c4:59:ae:49:
8e:60:04:a4:38:33:e6:02:42:d6:be:68:23:bd:ea:d3:8d:7c:
c6:1a:38:33:31:fd:73:93:f3:86:fe:ea:99:70:b2:5e:84:9b:
44:85:ca:67
-----BEGIN CERTIFICATE-----
MIIFhTCCBG2gAwIBAgIBBzANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZB
NjQ3OUFGMTEwLwYDVQQFEyg3MTUzQzVBRjUyMjYxOTZGMzIxMENDRjA2N0JGQjAz
OTc5QUJFMTZBMB4XDTI1MDgwNzA4MzE0NFoXDTI2MDgzMTA4MzE0NFowGDEWMBQG
A1UEAxMNNjg5NDY0NzctNmFkNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMxv/qngujh6dh0eEJGEV3d1QMPDI+v+JNSz0K13dFxPcGmJI5XFbpmRRdco
5pXgBr4jMRluSbIh4lScCNXkParYOFk2i0x6rBmAOtF4MsufmaayWxwMFCjW1RpP
Gx77OuS/KbcodO4i5F44xa4+O4y63PVKLoAajVEGj+OzQGzqI7bOOK83UALm/wqW
DaiStIFATZJg3UHksSr5qTmBPCESTOgCth/Lw4umPDwOl06/5ewpco7eYzXgeJya
BUcW6t+nrXuMSsGtSz+uyg2fSmAKAB1iTrc8mMQW/lBFsPm4ROJiHXocpt9/tFMG
VVJnpcPk4sRJ1Pm6iJU4dcBeSPMCAwEAAaOCAqgwggKkMB0GA1UdDgQWBBQhi/Y7
UKuU2wIrUmkt2fJupwS1/TAfBgNVHSMEGDAWgBRxU8WvUiYZbzIQzPBnv7A5eavh
ajAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2QTY0NzkvQUI5QzNGNzI3MzQ2MTFGMDlDRjAwOUI5REFFNEVDOUMvY1ZQRnIx
SW1HVzh5RU16d1o3LXdPWG1yNFdvLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvY1ZQRnIxSW1HVzh5RU16d1o3LXdPWG1yNFdvLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QTY0NzkvQUI5QzNGNzI3MzQ2MTFGMDlDRjAwOUI5REFF
NEVDOUMvRjcxRkIwQjA3MzY4MTFGMDgzQTIxQzlCREFFNEVDOUMucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACwPLMAAqjANBgkqhkiG9w0B
AQsFAAOCAQEAmDQkNxypbEfHrzBdcMDrtWcGSaVWKRzt1CCSrHsTm9X7O3FXnFSI
Hcv3X5BZkTUp5CpMCUkST7b/p9T14lvV+W9JhOPlbfmWVpmfXFiNl4h8WdghGhw7
kvvRlyMXtG+eioplgDtSMHXMyDM7QV7EeWm44flqaLl/qeX78aAeXYq7d4OZhSdg
LSmaltMDJPOl1nzG1VezBWHBW/2W/qmUiI0yHOeDYatOQFpMqf+R2gmZRXahEINP
LYTwJHQOTlqRZCSDZ5BDAK0XHmUUfHWwgR2rmtjEWa5JjmAEpDgz5gJC1r5oI73q
0418xho4MzH9c5Pzhv7qmXCyXoSbRIXKZw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:21:20 2025 by rpki-client