Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363CC24/F12D22986CCF11ED858882A2F1222468/C77901BE410D11F0A96504DADAE4EC9C.roa
File: C77901BE410D11F0A96504DADAE4EC9C.roa (raw, json)
Hash identifier: h5Q5khYZzTnat8k7l8n6jpmEewInGfW9hyutxls28Qc=
Subject key identifier: 95:6D:B3:82:65:3A:62:59:81:37:44:34:7F:22:B4:83:2B:A4:31:84
Certificate issuer: /CN=F363CC24AF/serialNumber=22585A9073DBD8DC7A5504457FF9DC789729744E
Certificate serial: 03C3
Authority key identifier: 22:58:5A:90:73:DB:D8:DC:7A:55:04:45:7F:F9:DC:78:97:29:74:4E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/IlhakHPb2Nx6VQRFf_nceJcpdE4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363CC24/F12D22986CCF11ED858882A2F1222468/C77901BE410D11F0A96504DADAE4EC9C.roa
Signing time: Wed 04 Jun 2025 06:33:09 +0000
ROA not before: Wed 04 Jun 2025 06:33:04 +0000
ROA not after: Sun 31 Jan 2049 06:33:04 +0000
asID: 328029
IP address blocks: 102.207.20.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363CC24/F12D22986CCF11ED858882A2F1222468/IlhakHPb2Nx6VQRFf_nceJcpdE4.crl
rsync://rpki.afrinic.net/repository/member_repository/F363CC24/F12D22986CCF11ED858882A2F1222468/IlhakHPb2Nx6VQRFf_nceJcpdE4.mft
rsync://rpki.afrinic.net/repository/afrinic/IlhakHPb2Nx6VQRFf_nceJcpdE4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 03:22:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 963 (0x3c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363CC24AF, serialNumber=22585A9073DBD8DC7A5504457FF9DC789729744E
Validity
Not Before: Jun 4 06:33:04 2025 GMT
Not After : Jan 31 06:33:04 2049 GMT
Subject: CN=683fe8a5-11d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:eb:3d:48:0a:b4:ed:f9:7b:a4:59:0b:34:90:
0e:be:34:b4:bf:2c:e6:6a:1f:de:e3:3e:f9:29:5f:
f7:75:c6:38:ae:5f:0f:cd:86:2c:fe:14:59:ab:7a:
b9:ee:aa:22:56:ec:70:64:69:5e:0e:2e:84:2f:50:
ea:ac:4e:a3:b5:8c:e5:58:56:1c:88:0b:8b:b7:77:
e5:ac:4f:2b:7d:b1:1a:48:17:b8:83:e0:c2:bb:bb:
ab:29:6a:16:86:4b:a2:76:8c:26:bb:52:dc:12:ee:
73:ae:f9:1b:c1:b3:73:b3:de:25:e5:cd:5a:68:47:
c7:e6:39:4d:90:20:5a:68:97:38:ca:a6:e4:07:c8:
a2:d7:25:63:28:08:7b:d0:7a:09:c5:9d:69:87:29:
35:0c:ab:2f:36:d7:61:60:16:d1:c2:5d:26:12:a7:
32:81:03:de:ee:70:06:00:0d:e6:7a:bd:92:a5:e3:
31:c7:64:6a:ce:18:43:bc:0b:c6:e1:2f:c2:84:46:
a2:25:e1:4e:b6:7b:c8:42:32:96:29:38:2b:e3:0d:
0f:cd:e3:b5:9d:7f:40:d3:cc:e0:0b:13:b9:0e:24:
b5:41:2d:4c:be:40:51:e4:e3:01:82:0a:54:79:e3:
1e:79:e5:80:e5:b4:f9:a9:5f:b3:d4:05:a6:1c:8f:
5d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:6D:B3:82:65:3A:62:59:81:37:44:34:7F:22:B4:83:2B:A4:31:84
X509v3 Authority Key Identifier:
keyid:22:58:5A:90:73:DB:D8:DC:7A:55:04:45:7F:F9:DC:78:97:29:74:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363CC24/F12D22986CCF11ED858882A2F1222468/IlhakHPb2Nx6VQRFf_nceJcpdE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IlhakHPb2Nx6VQRFf_nceJcpdE4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363CC24/F12D22986CCF11ED858882A2F1222468/C77901BE410D11F0A96504DADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.207.20.0/22
Signature Algorithm: sha256WithRSAEncryption
c0:4f:9e:57:fe:ad:db:ac:76:71:bb:c6:03:38:e4:c9:a8:86:
6f:66:6e:9b:df:95:98:ad:c0:3b:5f:ba:81:f4:d5:82:30:4a:
5a:f3:4d:32:71:da:95:23:7e:38:4e:09:44:a4:81:9e:3d:f5:
a1:92:f2:69:f6:69:29:c3:57:30:3c:3c:a1:41:b2:c4:be:a4:
21:21:af:af:e7:44:34:bd:3f:a2:8d:e8:ee:3f:9e:61:12:a4:
3d:17:3c:ec:ae:0e:38:8e:a8:74:d1:70:5d:99:35:17:98:57:
f8:9a:95:42:d6:10:29:e4:9c:93:b5:16:04:f5:42:dd:ec:98:
c0:c1:3e:d3:68:fa:d8:f2:b4:66:c3:3f:bd:d6:70:a4:1f:a5:
8f:98:ee:bd:ae:c9:7f:36:04:76:9f:de:40:bb:f2:e2:7d:ad:
27:a7:45:4a:58:0d:84:b3:80:06:77:87:ec:e9:35:96:d1:d8:
e5:ff:0b:27:21:33:69:df:23:96:81:a5:e4:4f:d5:b8:a7:6e:
1f:eb:05:01:14:ae:a2:1e:35:81:7a:40:24:77:3d:0d:c0:e2:
94:f5:fe:5c:81:af:13:f4:34:b5:61:5d:78:41:3a:0c:45:e2:
89:b2:10:fe:49:86:8b:79:8c:6d:fe:9c:65:ce:54:1a:b9:ad:
ee:24:31:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 15:43:52 2025 by rpki-client