Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F731F/A187DF92379711EEA4C498314AD9E6FC/4B479B12743111F0A63B64B4DAE4EC9C.roa
File: 4B479B12743111F0A63B64B4DAE4EC9C.roa (raw, json)
Hash identifier: F8PB0Xl+VxolCksfnH9PLc4qAD+h/G6brzLlc4/i1tQ=
Subject key identifier: BD:ED:42:AF:20:60:AD:3C:C4:43:83:8E:A0:FD:26:14:EC:5A:BD:E1
Certificate issuer: /CN=F36F731FAF/serialNumber=F5C0B63BAA5E7AF7A4386B637FD1206A3682D0C3
Certificate serial: 0324
Authority key identifier: F5:C0:B6:3B:AA:5E:7A:F7:A4:38:6B:63:7F:D1:20:6A:36:82:D0:C3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/9cC2O6peevekOGtjf9EgajaC0MM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F731F/A187DF92379711EEA4C498314AD9E6FC/4B479B12743111F0A63B64B4DAE4EC9C.roa
Signing time: Fri 08 Aug 2025 08:25:52 +0000
ROA not before: Fri 08 Aug 2025 08:25:44 +0000
ROA not after: Thu 08 Aug 2030 08:25:44 +0000
asID: 29571
IP address blocks: 2001:42d8::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F731F/A187DF92379711EEA4C498314AD9E6FC/9cC2O6peevekOGtjf9EgajaC0MM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F731F/A187DF92379711EEA4C498314AD9E6FC/9cC2O6peevekOGtjf9EgajaC0MM.mft
rsync://rpki.afrinic.net/repository/afrinic/9cC2O6peevekOGtjf9EgajaC0MM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 804 (0x324)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F731FAF, serialNumber=F5C0B63BAA5E7AF7A4386B637FD1206A3682D0C3
Validity
Not Before: Aug 8 08:25:44 2025 GMT
Not After : Aug 8 08:25:44 2030 GMT
Subject: CN=6895b490-6e82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e5:ec:ea:7b:54:1b:ad:65:45:6f:89:9a:e0:
18:96:26:b1:94:59:98:66:b4:04:8c:1f:c5:ad:93:
4d:b9:04:36:a5:10:d5:a3:92:41:98:1f:ad:27:b8:
79:63:21:89:37:43:20:2b:c2:af:43:9f:a9:64:1d:
3b:4e:1f:81:84:c3:31:fb:9a:a0:e5:1f:52:81:1c:
65:71:08:76:d3:7b:1f:ce:48:3b:62:ce:1c:49:0d:
e6:95:37:b1:ea:4c:34:4f:b0:83:3a:24:f6:46:dd:
89:c8:c6:d4:70:d6:b1:35:2c:7b:cc:92:06:40:32:
bf:f9:8d:7d:f6:bb:8a:c5:c0:90:48:de:71:6b:c5:
fd:54:81:c3:0a:de:b9:c0:13:fd:31:f2:69:ec:bc:
0d:b7:20:88:11:3a:30:9d:90:13:62:26:53:39:72:
a0:36:8d:a5:5a:d7:e6:23:2a:06:15:4a:6b:6b:9f:
fb:bd:f4:b5:39:68:d3:8c:de:61:8c:d7:f0:c3:42:
ff:e5:40:d4:e1:4b:76:f0:f6:94:d6:e8:ef:0a:09:
22:c2:b3:32:5d:6f:34:89:1d:c8:73:6e:a8:d5:0d:
94:41:c5:41:f5:a8:d2:da:6d:8c:ed:3b:5d:fa:b4:
11:22:0c:2e:07:3c:38:94:82:a8:94:c2:28:0a:be:
a0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:ED:42:AF:20:60:AD:3C:C4:43:83:8E:A0:FD:26:14:EC:5A:BD:E1
X509v3 Authority Key Identifier:
keyid:F5:C0:B6:3B:AA:5E:7A:F7:A4:38:6B:63:7F:D1:20:6A:36:82:D0:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F731F/A187DF92379711EEA4C498314AD9E6FC/9cC2O6peevekOGtjf9EgajaC0MM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9cC2O6peevekOGtjf9EgajaC0MM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F731F/A187DF92379711EEA4C498314AD9E6FC/4B479B12743111F0A63B64B4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:42d8::/32
Signature Algorithm: sha256WithRSAEncryption
17:05:77:f1:3a:24:1a:ef:04:cf:68:22:6e:5b:a7:6d:87:ed:
ab:c0:05:27:17:93:cc:ee:c3:5f:cf:b6:60:01:9d:57:e9:41:
5b:cf:84:22:74:6e:49:bf:ec:e2:e7:13:e8:a4:0a:25:a2:14:
0c:dd:3d:df:cc:e0:08:46:75:0c:38:29:fe:2f:f4:0c:db:80:
30:9f:f5:c6:22:42:1b:71:41:1d:fd:cf:4e:9b:bc:18:dd:e0:
b1:f0:20:b8:02:f0:ae:2c:99:f1:db:78:c8:b7:cf:fb:2d:d7:
9e:86:d9:b7:db:b2:0c:f3:49:ab:24:78:03:e5:05:5e:d3:6f:
63:39:6c:b7:90:fd:2f:3b:cc:fa:30:db:72:b2:e3:81:51:92:
b5:7b:45:d3:f0:6b:db:88:d6:64:a2:d0:50:51:2e:5f:0e:cc:
fc:78:85:e8:6e:b3:52:3e:40:a5:0f:33:9c:76:cb:3a:dc:88:
1e:2f:80:f3:13:b4:61:10:e0:2b:56:34:22:db:e9:78:07:7f:
50:72:fc:b0:33:bb:95:a2:b3:74:13:17:a2:5e:05:95:27:26:
d4:44:f1:6b:80:26:02:e8:0b:a5:c1:c5:31:d3:b0:cf:ff:44:
4d:3c:90:11:d5:37:96:93:d3:7c:fc:be:1c:9f:9d:d5:21:43:
80:c6:b6:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:36:28 2025 by rpki-client