Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AD6A0/9EC9ADCC776D11F0BB2F2EC9DAE4EC9C/45A9EBAC776E11F0986637CDDAE4EC9C.roa
File: 45A9EBAC776E11F0986637CDDAE4EC9C.roa (raw, json)
Hash identifier: 5DzDp+6CZ7DSXgCRfb2nrU32DuFDeMShxoaruyg5+fI=
Subject key identifier: 9A:AA:30:6D:36:02:91:16:AE:C0:ED:A6:43:5B:77:B3:C5:BF:A8:90
Certificate issuer: /CN=F36AD6A0AF/serialNumber=8BECC034162A76E4D3FB765EECA7C590BFCF8875
Certificate serial: 04
Authority key identifier: 8B:EC:C0:34:16:2A:76:E4:D3:FB:76:5E:EC:A7:C5:90:BF:CF:88:75
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/i-zANBYqduTT-3Ze7KfFkL_PiHU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36AD6A0/9EC9ADCC776D11F0BB2F2EC9DAE4EC9C/45A9EBAC776E11F0986637CDDAE4EC9C.roa
Signing time: Tue 12 Aug 2025 11:19:55 +0000
ROA not before: Tue 12 Aug 2025 11:19:50 +0000
ROA not after: Tue 05 Jun 2035 11:19:50 +0000
asID: 36924
IP address blocks: 2c0f:6dc0::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36AD6A0/9EC9ADCC776D11F0BB2F2EC9DAE4EC9C/i-zANBYqduTT-3Ze7KfFkL_PiHU.crl
rsync://rpki.afrinic.net/repository/member_repository/F36AD6A0/9EC9ADCC776D11F0BB2F2EC9DAE4EC9C/i-zANBYqduTT-3Ze7KfFkL_PiHU.mft
rsync://rpki.afrinic.net/repository/afrinic/i-zANBYqduTT-3Ze7KfFkL_PiHU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36AD6A0AF, serialNumber=8BECC034162A76E4D3FB765EECA7C590BFCF8875
Validity
Not Before: Aug 12 11:19:50 2025 GMT
Not After : Jun 5 11:19:50 2035 GMT
Subject: CN=689b235b-a2d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4b:71:26:0a:e0:64:85:b6:81:95:c9:d2:1f:
7e:54:5f:64:91:91:94:90:c6:f5:4a:a2:cc:50:62:
dc:41:50:d9:81:49:ff:0e:5d:83:80:a1:0f:4d:a0:
4a:c5:2a:66:42:ee:18:d9:77:c0:cc:92:6b:ab:94:
52:48:f5:af:f0:55:c0:84:35:5b:92:cd:e7:de:e0:
1e:37:fc:cb:d5:4e:76:a9:28:ac:35:40:ab:b9:e5:
be:f5:29:6d:35:08:a1:86:b9:92:0c:29:6b:0d:3a:
d8:74:11:cd:3e:c3:6b:01:85:d9:40:a4:56:d0:45:
14:6a:a6:ee:4c:6b:f6:5a:7b:88:8e:8c:26:81:ef:
fd:8c:3e:12:a1:e2:99:11:56:ab:1d:ff:d9:69:e5:
f6:17:34:26:29:53:75:4a:9a:5b:66:7d:f2:b4:24:
10:52:fd:56:20:7b:70:d1:81:fe:59:56:06:eb:b8:
c3:48:56:a5:62:0b:dc:18:29:10:98:fb:d4:ad:45:
c3:18:91:62:d4:8f:be:d5:2d:8e:3c:e1:60:e4:3f:
51:dd:90:ff:17:cc:66:31:d5:a8:90:7d:c5:a6:34:
dc:d0:d6:3e:2a:2a:0c:4b:03:a6:c3:c1:d6:55:68:
9d:72:5f:7f:97:13:55:01:51:41:e4:42:d5:f2:6f:
c7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:AA:30:6D:36:02:91:16:AE:C0:ED:A6:43:5B:77:B3:C5:BF:A8:90
X509v3 Authority Key Identifier:
keyid:8B:EC:C0:34:16:2A:76:E4:D3:FB:76:5E:EC:A7:C5:90:BF:CF:88:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36AD6A0/9EC9ADCC776D11F0BB2F2EC9DAE4EC9C/i-zANBYqduTT-3Ze7KfFkL_PiHU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/i-zANBYqduTT-3Ze7KfFkL_PiHU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AD6A0/9EC9ADCC776D11F0BB2F2EC9DAE4EC9C/45A9EBAC776E11F0986637CDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:6dc0::/32
Signature Algorithm: sha256WithRSAEncryption
ab:73:38:88:35:b5:94:37:60:09:8c:f4:89:d1:87:df:55:62:
bb:91:3f:3c:1a:2d:59:37:1a:6b:b9:fd:38:08:36:3b:94:e9:
a8:b4:b0:98:07:a4:48:10:7a:55:ae:30:0d:c7:25:a8:a4:68:
c4:9a:43:f7:25:7b:6c:c4:3a:97:62:72:3d:19:fc:49:c4:11:
59:13:d0:01:50:69:21:e7:86:00:21:79:72:65:c2:43:cb:31:
f8:a9:d8:78:d0:af:6d:81:31:eb:91:ee:64:8e:7f:c0:6b:d8:
02:82:bf:0a:55:e0:c2:50:c4:4b:27:0b:6a:9c:50:cb:8c:94:
fc:c7:0e:bb:ba:ce:24:93:3c:55:3f:69:1f:8e:9f:15:9a:1a:
6a:db:94:7a:4d:c1:4d:c0:29:7e:0f:65:ca:6b:2b:24:00:00:
46:83:62:9a:00:ca:46:bf:9d:de:c5:93:4e:51:93:84:92:b7:
ea:24:f3:1b:80:83:e0:21:00:c1:a2:ec:22:d3:3d:cd:94:85:
d4:f4:56:29:30:5b:c7:32:1e:7f:ad:2c:55:20:ca:db:3d:86:
0e:a8:11:3b:b5:60:31:cd:54:27:d4:f9:a1:94:41:fb:74:a0:
c6:9b:fb:60:39:91:9d:b6:bb:95:d5:4e:07:5f:c2:aa:f8:49:
72:78:48:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:11:04 2025 by rpki-client