Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364379D/67C6AD4CBF3D11EDA6BF88F1F1222468/F6AE29B646C911F0A3352A9CDAE4EC9C.roa
File: F6AE29B646C911F0A3352A9CDAE4EC9C.roa (raw, json)
Hash identifier: xJc4bxraTn4VMWGp4tujLjr4NYvnFKt/PaHncXl4bO8=
Subject key identifier: F3:DE:EC:4A:99:A1:37:EF:FF:00:9B:1F:C2:44:23:66:03:19:EB:AB
Certificate issuer: /CN=F364379DAF/serialNumber=100CBD464A905A5B568F7ADCEF1F9D20BC752331
Certificate serial: 035A
Authority key identifier: 10:0C:BD:46:4A:90:5A:5B:56:8F:7A:DC:EF:1F:9D:20:BC:75:23:31
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/EAy9RkqQWltWj3rc7x-dILx1IzE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364379D/67C6AD4CBF3D11EDA6BF88F1F1222468/F6AE29B646C911F0A3352A9CDAE4EC9C.roa
Signing time: Wed 11 Jun 2025 13:42:49 +0000
ROA not before: Wed 11 Jun 2025 13:42:44 +0000
ROA not after: Sat 17 Mar 2035 13:42:44 +0000
asID: 37014
IP address blocks: 41.223.72.0/24 maxlen: 32
41.223.73.0/24 maxlen: 32
41.223.74.0/24 maxlen: 32
41.223.75.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364379D/67C6AD4CBF3D11EDA6BF88F1F1222468/EAy9RkqQWltWj3rc7x-dILx1IzE.crl
rsync://rpki.afrinic.net/repository/member_repository/F364379D/67C6AD4CBF3D11EDA6BF88F1F1222468/EAy9RkqQWltWj3rc7x-dILx1IzE.mft
rsync://rpki.afrinic.net/repository/afrinic/EAy9RkqQWltWj3rc7x-dILx1IzE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Jul 2025 03:35:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 858 (0x35a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364379DAF, serialNumber=100CBD464A905A5B568F7ADCEF1F9D20BC752331
Validity
Not Before: Jun 11 13:42:44 2025 GMT
Not After : Mar 17 13:42:44 2035 GMT
Subject: CN=684987d9-ec9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:db:e8:ce:b0:a4:1f:30:f1:be:c9:22:02:35:
3a:49:0c:d6:e5:5c:ef:58:df:75:03:ca:f3:12:d8:
de:98:89:9f:ef:b4:89:51:e6:8d:b0:fb:01:14:6f:
6b:71:a4:dc:1b:00:b3:10:3b:5b:bc:67:e7:09:56:
97:ed:3c:18:54:43:50:91:73:55:89:14:43:d8:bb:
2e:20:6f:06:c8:a7:5f:64:a8:0b:9f:5a:ec:9a:92:
1a:d1:f2:e6:e2:0c:69:ab:d6:ba:ad:17:02:43:9c:
c0:27:aa:98:d4:19:b8:35:22:1b:5e:f3:31:ad:51:
26:d5:16:9b:60:80:dc:0c:95:ee:14:d4:ee:4f:ea:
8c:2b:11:e0:aa:7b:8e:ba:53:60:6a:44:95:cf:88:
d1:97:73:e6:57:92:56:e3:0f:ec:da:e9:fc:38:73:
f0:83:c6:90:f8:49:55:2d:f9:1c:ab:e8:94:c3:2d:
c8:83:f7:dd:d6:64:a9:9b:c4:56:c5:1a:07:10:41:
7f:49:65:79:e1:00:e2:9a:20:d5:9f:ef:9c:e5:28:
e9:16:b1:ca:9d:6c:77:28:f5:bb:08:61:99:2b:84:
30:a7:0d:c9:ef:5c:16:cb:39:ec:ba:29:ca:d5:59:
11:ba:7e:e0:c1:d0:bf:8a:71:8c:47:e9:e9:96:7b:
e1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:DE:EC:4A:99:A1:37:EF:FF:00:9B:1F:C2:44:23:66:03:19:EB:AB
X509v3 Authority Key Identifier:
keyid:10:0C:BD:46:4A:90:5A:5B:56:8F:7A:DC:EF:1F:9D:20:BC:75:23:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364379D/67C6AD4CBF3D11EDA6BF88F1F1222468/EAy9RkqQWltWj3rc7x-dILx1IzE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/EAy9RkqQWltWj3rc7x-dILx1IzE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364379D/67C6AD4CBF3D11EDA6BF88F1F1222468/F6AE29B646C911F0A3352A9CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.223.72.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:fb:ca:e2:01:0f:cd:b8:a8:a8:46:63:d4:12:c3:84:93:88:
30:ed:e5:e6:05:57:a8:75:93:03:91:fc:a4:ec:1e:f6:4a:68:
64:9e:c1:de:dc:7b:6b:9d:5c:45:22:38:07:4b:e3:3d:e3:f2:
e5:9e:f4:78:9c:f5:16:75:1d:58:aa:e4:71:d1:09:ef:c0:33:
f5:4a:20:98:39:a0:94:3d:9e:c3:ac:bf:11:7b:c2:5c:ea:82:
0b:8f:ca:af:21:c8:c5:3f:1b:d2:bd:66:78:31:9c:ee:aa:00:
8d:31:03:51:8e:3f:91:cb:22:b8:b2:0a:78:42:d2:7e:b9:9f:
81:65:3b:e2:5f:20:99:b5:29:6d:3a:a2:b0:91:f1:c1:d5:da:
1b:9a:92:08:6c:2d:6a:d1:4f:ee:5c:59:d8:9b:9e:a1:c5:be:
6b:11:ce:57:79:21:dd:8e:42:85:d2:9b:c6:34:e0:60:a6:d1:
1c:53:15:c9:1c:d2:28:f2:cd:6a:d8:6c:f7:84:ca:c3:58:c1:
74:9e:65:2a:2c:57:6a:62:da:85:fd:02:70:27:e0:43:5b:b2:
1d:9a:1b:65:8a:cf:58:80:14:ed:48:9b:ec:09:ac:73:a9:1a:
e3:c2:a3:90:7a:ff:cd:1b:cc:6b:48:71:05:82:e6:7a:06:a4:
bf:fb:1d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 17:59:06 2025 by rpki-client