Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365BA89/38C9CA227F3B11F0B19C74C8DAE4EC9C/BCC19C20802A11F08F97F0E7DAE4EC9C.roa
File: BCC19C20802A11F08F97F0E7DAE4EC9C.roa (raw, json)
Hash identifier: oc0j3RlYEgdI4U0HFrR3Y7CfmN04fsE2aq4oX+gpdNQ=
Subject key identifier: 71:D9:83:F2:E6:FE:C4:FF:51:F4:5F:2E:1A:7E:DA:39:5A:43:1A:E5
Certificate issuer: /CN=F365BA89AF/serialNumber=0C6E7BD35B42614FCF8D224DD88EB7B0F7EFC182
Certificate serial: 25
Authority key identifier: 0C:6E:7B:D3:5B:42:61:4F:CF:8D:22:4D:D8:8E:B7:B0:F7:EF:C1:82
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/DG5701tCYU_PjSJN2I63sPfvwYI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F365BA89/38C9CA227F3B11F0B19C74C8DAE4EC9C/BCC19C20802A11F08F97F0E7DAE4EC9C.roa
Signing time: Sat 23 Aug 2025 14:09:10 +0000
ROA not before: Sat 23 Aug 2025 14:09:05 +0000
ROA not after: Thu 31 Aug 2045 14:09:05 +0000
asID: 329535
IP address blocks: 102.205.236.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F365BA89/38C9CA227F3B11F0B19C74C8DAE4EC9C/DG5701tCYU_PjSJN2I63sPfvwYI.crl
rsync://rpki.afrinic.net/repository/member_repository/F365BA89/38C9CA227F3B11F0B19C74C8DAE4EC9C/DG5701tCYU_PjSJN2I63sPfvwYI.mft
rsync://rpki.afrinic.net/repository/afrinic/DG5701tCYU_PjSJN2I63sPfvwYI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 14:09:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37 (0x25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F365BA89AF, serialNumber=0C6E7BD35B42614FCF8D224DD88EB7B0F7EFC182
Validity
Not Before: Aug 23 14:09:05 2025 GMT
Not After : Aug 31 14:09:05 2045 GMT
Subject: CN=68a9cb85-177f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3e:12:12:ac:1e:c1:2b:3a:20:ab:a3:fc:9f:
d6:5a:d2:f9:b3:c7:b9:c6:ad:42:4d:6e:9a:d1:f7:
3f:23:b4:25:2e:75:0b:9d:36:ab:81:94:b9:aa:e2:
95:ac:5c:47:70:8c:cd:7b:86:2a:d4:f9:53:39:53:
14:16:fa:85:45:ca:e0:bb:b4:fb:a4:4f:35:95:e3:
63:74:e8:43:5e:16:89:f5:e3:fd:54:5d:fb:a2:32:
a0:e3:a0:02:5a:22:63:12:25:f0:34:7c:33:14:58:
b9:a1:10:40:9c:66:b3:4f:3b:e2:c1:52:72:9c:47:
9f:d4:c4:0b:c2:00:98:81:19:d7:0b:53:86:eb:d7:
44:55:1a:79:3f:e8:51:ed:0f:c5:b2:25:39:35:69:
9d:d4:85:89:82:d2:6c:38:11:fd:88:f5:50:7e:0a:
a0:77:6e:6e:ef:79:5e:d4:1d:b5:ba:71:f5:2c:ad:
df:1a:79:d1:50:5d:b2:c5:b0:24:2d:d2:57:88:48:
54:6e:16:ac:c1:dc:81:95:ff:9d:34:b7:f2:7f:25:
ac:1c:9d:e8:2c:35:8e:bc:90:e3:f7:fe:0d:76:a3:
5e:35:4a:80:19:58:74:1f:e9:5f:42:9c:90:58:21:
4a:a5:bd:16:cb:64:7c:d2:7d:b3:ef:e4:35:fa:94:
4d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:D9:83:F2:E6:FE:C4:FF:51:F4:5F:2E:1A:7E:DA:39:5A:43:1A:E5
X509v3 Authority Key Identifier:
keyid:0C:6E:7B:D3:5B:42:61:4F:CF:8D:22:4D:D8:8E:B7:B0:F7:EF:C1:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F365BA89/38C9CA227F3B11F0B19C74C8DAE4EC9C/DG5701tCYU_PjSJN2I63sPfvwYI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DG5701tCYU_PjSJN2I63sPfvwYI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365BA89/38C9CA227F3B11F0B19C74C8DAE4EC9C/BCC19C20802A11F08F97F0E7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.205.236.0/22
Signature Algorithm: sha256WithRSAEncryption
d5:54:66:0e:8a:e3:db:bc:e1:25:8a:70:41:74:94:de:ff:87:
90:26:c8:74:52:08:38:ba:de:6e:3b:13:ba:03:a5:e2:7e:eb:
c3:ad:20:8c:ad:85:56:a5:07:1e:3e:46:1d:fc:58:63:9f:50:
cd:94:17:46:ce:70:e5:56:c5:a8:1f:a3:ef:5e:33:0f:bd:a5:
0e:38:6c:25:e5:d1:01:96:5f:3c:d7:2d:17:94:4e:7a:54:a5:
45:4e:f3:37:1b:8d:60:c1:c2:17:87:79:f3:3b:b7:37:06:34:
2c:33:21:5f:2b:66:ef:73:9c:a3:0a:28:8c:95:c8:40:64:af:
9d:40:94:62:a1:29:c5:dc:6a:32:ce:90:bd:08:13:a6:57:76:
9d:0b:45:98:7c:74:90:99:23:07:bd:b3:6d:1a:d9:44:f2:07:
15:24:fb:f4:e9:1d:96:f9:56:53:39:e9:21:12:ab:c6:91:16:
b5:de:ad:c6:75:3c:1c:fd:0c:12:c3:48:74:3f:69:0a:05:12:
37:74:d1:fc:37:9d:bc:09:63:22:a2:20:aa:7c:70:e6:60:03:
ee:79:6a:23:a2:ef:3b:24:68:94:07:3e:2b:97:c0:1c:8f:55:
74:64:17:70:b3:76:ce:7d:8d:33:b4:b4:7e:51:7d:58:9e:62:
c8:89:e6:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:54:16 2025 by rpki-client