Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E3A59/29E748185D4E11F0AB0058C9DAE4EC9C/D7020A285D5411F0A19246F2DAE4EC9C.roa
File: D7020A285D5411F0A19246F2DAE4EC9C.roa (raw, json)
Hash identifier: uN0l59Tox4G2lWnbUbB4GpnAjc1D9Z8ciy/6RrH/ngM=
Subject key identifier: 39:DC:A1:E0:3E:08:09:BB:A2:21:67:50:9E:56:8E:73:0C:53:5B:C4
Certificate issuer: /CN=F36E3A59AF/serialNumber=0D9BE8A03CF4F921BEAE801209F0CDA9FA5C28A9
Certificate serial: 04
Authority key identifier: 0D:9B:E8:A0:3C:F4:F9:21:BE:AE:80:12:09:F0:CD:A9:FA:5C:28:A9
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/DZvooDz0-SG-roASCfDNqfpcKKk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E3A59/29E748185D4E11F0AB0058C9DAE4EC9C/D7020A285D5411F0A19246F2DAE4EC9C.roa
Signing time: Thu 10 Jul 2025 06:12:22 +0000
ROA not before: Thu 10 Jul 2025 06:12:17 +0000
ROA not after: Fri 31 Jul 2026 06:12:17 +0000
asID: 329546
IP address blocks: 2c0f:61c0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E3A59/29E748185D4E11F0AB0058C9DAE4EC9C/DZvooDz0-SG-roASCfDNqfpcKKk.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E3A59/29E748185D4E11F0AB0058C9DAE4EC9C/DZvooDz0-SG-roASCfDNqfpcKKk.mft
rsync://rpki.afrinic.net/repository/afrinic/DZvooDz0-SG-roASCfDNqfpcKKk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E3A59AF, serialNumber=0D9BE8A03CF4F921BEAE801209F0CDA9FA5C28A9
Validity
Not Before: Jul 10 06:12:17 2025 GMT
Not After : Jul 31 06:12:17 2026 GMT
Subject: CN=686f59c6-8b52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:78:56:05:12:62:f4:38:31:54:59:40:ad:ab:
36:fd:c2:a1:2f:e0:3c:72:e1:9b:8f:55:ec:9b:97:
cc:d9:7e:5f:ba:e0:03:67:2f:ee:b2:8c:ee:d6:67:
68:74:d1:d0:d2:c8:54:fe:7d:cc:1b:bf:8d:30:1c:
c0:63:27:17:f0:b2:f8:bb:31:ae:e9:fc:3e:cc:e9:
46:09:c7:ae:df:c8:0f:23:04:94:28:7e:ea:a1:8f:
6f:55:38:34:dc:01:1a:8c:88:30:82:5b:c6:ca:0a:
f5:88:eb:cb:63:ba:e8:9c:15:85:13:f1:99:57:1e:
1a:8a:00:f4:33:a8:6e:af:4a:c6:e6:0c:70:8c:6f:
3a:95:07:f5:ff:39:3f:46:bd:7f:43:28:b9:94:9d:
07:d6:60:03:e6:82:59:5e:72:ff:ea:42:b6:2b:4a:
fe:b2:9e:82:04:cb:84:6b:81:dd:ff:97:70:04:9f:
a4:2c:2c:ab:f3:75:32:ef:a4:d7:9f:9f:11:09:85:
cf:cb:58:2d:09:81:45:3d:15:1c:45:bb:72:ac:3b:
df:51:d2:8f:80:93:06:46:1b:d8:19:79:9d:54:fe:
3e:28:c3:59:37:52:f8:49:f8:08:73:6f:dd:7c:1b:
2e:c7:91:5c:ae:c1:89:70:20:66:36:21:5b:10:e9:
96:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:DC:A1:E0:3E:08:09:BB:A2:21:67:50:9E:56:8E:73:0C:53:5B:C4
X509v3 Authority Key Identifier:
keyid:0D:9B:E8:A0:3C:F4:F9:21:BE:AE:80:12:09:F0:CD:A9:FA:5C:28:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3A59/29E748185D4E11F0AB0058C9DAE4EC9C/DZvooDz0-SG-roASCfDNqfpcKKk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DZvooDz0-SG-roASCfDNqfpcKKk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3A59/29E748185D4E11F0AB0058C9DAE4EC9C/D7020A285D5411F0A19246F2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:61c0::/32
Signature Algorithm: sha256WithRSAEncryption
00:db:93:73:a1:3a:12:03:60:6e:e6:6e:9f:6a:5e:c2:d3:91:
3e:ae:14:b4:7b:da:9c:7f:e3:fa:d8:1c:17:6f:fa:78:d0:f5:
d2:95:5e:ee:9c:d8:e4:ae:69:85:ae:50:e8:ce:d6:e9:de:ab:
a4:58:06:ed:3c:5e:c8:46:0e:a0:1f:a8:8c:24:50:0c:35:8d:
24:42:d4:5c:c4:a4:1c:bd:ac:9c:bd:a7:39:30:cf:a0:f4:23:
b1:6b:df:b9:d8:7b:67:21:b3:60:08:2f:9a:f5:ef:ad:6b:e4:
bb:8a:6f:4b:1d:4e:01:82:e3:fe:6c:7f:dc:8b:07:53:53:3b:
03:d2:2e:fd:d8:34:f4:be:79:d2:7b:2b:55:c8:6f:83:1a:55:
f9:2d:0e:67:a1:7b:4f:4b:ea:d2:4f:4c:53:f6:ca:61:73:dd:
88:4e:93:34:5a:2d:8e:80:c3:5a:f7:5e:ed:a4:2b:f4:12:75:
61:fc:16:f7:06:81:e6:c2:44:fd:72:3d:7e:53:ff:f2:3a:7e:
41:79:77:35:b9:7f:7f:6c:7a:55:b6:69:f3:5a:cf:11:d4:44:
7b:dc:cf:ee:45:3c:21:45:6b:21:b4:76:3f:5f:89:6c:51:55:
ac:59:06:48:c6:53:66:5d:58:8b:bc:e3:bb:7d:fb:3d:8c:e9:
c3:1d:d5:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:15:39 2025 by rpki-client