Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FDDEE/214C5AECB49B11EAA3F61F0FF8AEA228/8CBEF34A4FAD11F093912788DAE4EC9C.roa
File: 8CBEF34A4FAD11F093912788DAE4EC9C.roa (raw, json)
Hash identifier: LYzjFbg1hC2pJNCyNVlFyFaCoTckxwNGPohEbA60zjQ=
Subject key identifier: E3:2F:5A:7B:48:E4:1E:1D:05:CB:51:AE:10:72:54:A1:4E:8F:8A:30
Certificate issuer: /CN=F36FDDEEAF/serialNumber=2CD31C3C251F5EDA183F938E7FCB3A4A1DBA89DD
Certificate serial: 076E
Authority key identifier: 2C:D3:1C:3C:25:1F:5E:DA:18:3F:93:8E:7F:CB:3A:4A:1D:BA:89:DD
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/LNMcPCUfXtoYP5OOf8s6Sh26id0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FDDEE/214C5AECB49B11EAA3F61F0FF8AEA228/8CBEF34A4FAD11F093912788DAE4EC9C.roa
Signing time: Sun 22 Jun 2025 21:12:06 +0000
ROA not before: Sun 22 Jun 2025 21:12:01 +0000
ROA not after: Sat 30 Jun 2040 21:12:01 +0000
asID: 29465
IP address blocks: 41.206.0.0/19 maxlen: 24
41.220.64.0/20 maxlen: 24
102.88.0.0/13 maxlen: 24
197.210.0.0/16 maxlen: 24
2c0f:f5c0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FDDEE/214C5AECB49B11EAA3F61F0FF8AEA228/LNMcPCUfXtoYP5OOf8s6Sh26id0.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FDDEE/214C5AECB49B11EAA3F61F0FF8AEA228/LNMcPCUfXtoYP5OOf8s6Sh26id0.mft
rsync://rpki.afrinic.net/repository/afrinic/LNMcPCUfXtoYP5OOf8s6Sh26id0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Jul 2025 01:58:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1902 (0x76e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FDDEEAF, serialNumber=2CD31C3C251F5EDA183F938E7FCB3A4A1DBA89DD
Validity
Not Before: Jun 22 21:12:01 2025 GMT
Not After : Jun 30 21:12:01 2040 GMT
Subject: CN=685871a6-b773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d5:54:5c:1b:5c:37:dd:2d:53:35:86:3b:0b:
b2:56:cf:59:97:36:b1:03:26:05:99:4b:59:14:39:
0e:17:5e:c4:c8:cb:2c:d5:a3:d6:86:9d:16:27:d7:
73:71:54:0c:c3:a4:f3:c5:c9:c7:7c:69:86:3d:90:
87:1a:90:f8:ed:63:20:3c:02:b8:79:dc:a1:d4:02:
38:c1:17:d7:d8:56:35:0f:ea:f1:29:d6:07:81:84:
d6:9e:ea:e3:3e:6c:3a:18:5b:e2:11:a4:cd:62:74:
46:ef:6c:21:51:01:af:0c:2f:66:06:c8:a9:de:e9:
e8:16:8e:57:ec:08:fa:8c:fc:6e:52:7d:a4:3a:66:
8c:43:c4:28:a4:e8:8b:7d:64:cb:a2:57:56:70:09:
05:1a:2d:c2:00:1c:b2:5b:04:a0:16:c3:8b:a5:ab:
9c:f7:c6:f0:dd:ab:c9:7c:43:03:9a:4f:ab:65:78:
00:d0:de:b9:eb:31:f7:3c:74:9c:74:e5:ff:92:87:
48:69:c3:20:b6:37:7c:03:76:50:76:87:2f:1f:09:
50:ff:c3:7c:3d:33:e9:ed:ba:80:8b:4e:6d:9e:29:
b9:9f:d0:d4:02:18:57:ae:e7:7e:b2:e0:22:c3:48:
1b:95:76:a0:58:a3:10:0f:e8:aa:44:4d:90:01:a4:
17:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:2F:5A:7B:48:E4:1E:1D:05:CB:51:AE:10:72:54:A1:4E:8F:8A:30
X509v3 Authority Key Identifier:
keyid:2C:D3:1C:3C:25:1F:5E:DA:18:3F:93:8E:7F:CB:3A:4A:1D:BA:89:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FDDEE/214C5AECB49B11EAA3F61F0FF8AEA228/LNMcPCUfXtoYP5OOf8s6Sh26id0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LNMcPCUfXtoYP5OOf8s6Sh26id0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FDDEE/214C5AECB49B11EAA3F61F0FF8AEA228/8CBEF34A4FAD11F093912788DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.206.0.0/19
41.220.64.0/20
102.88.0.0/13
197.210.0.0/16
IPv6:
2c0f:f5c0::/32
Signature Algorithm: sha256WithRSAEncryption
10:98:ea:e9:af:b6:9d:8a:b3:da:16:94:cc:c0:ed:9a:6a:90:
8c:32:20:c8:61:1c:3f:e1:8b:ac:64:33:66:50:b6:a3:00:30:
3f:43:34:c3:45:ea:c9:dc:d6:a8:10:36:63:02:fa:d0:38:98:
a7:89:f5:c2:79:a5:6d:ce:59:28:7a:bc:58:c3:16:56:d7:77:
e7:a1:53:8e:09:4d:d3:6d:b4:7d:a5:63:2f:38:38:6c:bd:68:
8b:39:3f:71:0b:0d:2d:07:f8:53:aa:2c:ab:36:1a:a8:11:3b:
a8:8a:cb:e1:fc:c2:b3:77:14:3e:60:5e:67:21:67:14:44:78:
25:97:c8:5c:f4:54:38:e4:e8:e9:ef:ea:41:d9:c2:42:7d:4d:
f6:37:9b:5a:c7:6a:fb:39:80:44:d1:a4:00:a2:8a:0e:31:86:
ab:62:aa:52:83:45:c1:02:92:99:f2:46:31:ba:61:0d:ad:a9:
da:06:30:61:a8:90:3b:d8:45:8c:5c:ac:00:3b:a4:69:06:87:
7c:43:5b:dc:7c:3c:98:f0:95:81:1e:df:fb:67:19:09:7b:8b:
85:de:42:e9:dd:bf:cf:b6:71:ed:35:d7:3c:43:74:7a:cf:7d:
b0:37:f0:03:8e:4f:dc:1d:1a:d6:9a:2a:52:66:be:b0:6a:fc:
ad:32:ca:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 13:55:33 2025 by rpki-client