Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/016C59AA582B11F0AEBD90C0DAE4EC9C.roa
File: 016C59AA582B11F0AEBD90C0DAE4EC9C.roa (raw, json)
Hash identifier: BQmO7rUNBXqX5CcwT82RJ6WRtMVErbG+OZzMCXemw38=
Subject key identifier: B7:CA:8A:D0:C6:B7:04:76:BA:18:76:2F:FD:87:B5:9C:3E:18:F8:20
Certificate issuer: /CN=F369591CAF/serialNumber=C1090D37DA9FFEEE1A9C229BAFF1190BD22E8934
Certificate serial: 03A1
Authority key identifier: C1:09:0D:37:DA:9F:FE:EE:1A:9C:22:9B:AF:F1:19:0B:D2:2E:89:34
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/016C59AA582B11F0AEBD90C0DAE4EC9C.roa
Signing time: Thu 03 Jul 2025 16:30:18 +0000
ROA not before: Thu 03 Jul 2025 16:30:14 +0000
ROA not after: Tue 31 Dec 2030 16:30:14 +0000
asID: 15964
IP address blocks: 154.72.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.mft
rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Jul 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 929 (0x3a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369591CAF, serialNumber=C1090D37DA9FFEEE1A9C229BAFF1190BD22E8934
Validity
Not Before: Jul 3 16:30:14 2025 GMT
Not After : Dec 31 16:30:14 2030 GMT
Subject: CN=6866b01a-9649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:73:ed:a4:30:83:76:61:52:43:e4:75:25:91:
22:33:57:bc:3f:0b:54:9a:3c:73:a2:7d:6c:25:b8:
68:5c:97:0a:4f:77:b5:98:ed:7c:61:bb:fb:bf:d7:
12:64:86:4d:a8:63:7f:9e:51:3e:66:81:82:cf:f1:
1c:0f:15:63:2c:5c:7f:1c:f6:f6:98:12:c6:6a:58:
91:24:69:0c:ed:33:91:e0:58:17:72:d5:b7:2f:4a:
69:e6:e8:79:b0:95:f6:d9:0b:54:af:b4:f7:3e:fa:
78:72:46:3f:28:9a:a5:7b:2b:00:9c:89:0c:93:72:
3e:0a:40:1b:34:b4:9e:8f:90:da:42:ec:74:b2:e5:
2d:bb:06:4f:0d:aa:44:4b:6a:b6:af:61:bf:b0:1d:
ac:4e:8b:b8:7f:7f:eb:97:ca:d6:62:54:dd:fb:b9:
2e:1f:44:74:e4:5d:06:e8:e2:e0:07:06:2e:d5:dc:
b6:3b:66:ed:e1:88:fc:eb:0c:46:62:f1:18:44:62:
a8:e3:a9:dd:e4:7b:84:a8:d8:5a:e5:48:e9:28:e7:
64:94:bc:96:9a:63:13:f4:2e:c0:40:57:f6:ac:a4:
98:d4:9f:72:1c:dc:7b:c5:37:55:cd:37:b5:20:31:
4e:6b:c9:0e:21:a3:4c:8d:1f:56:50:72:7a:07:e6:
af:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:CA:8A:D0:C6:B7:04:76:BA:18:76:2F:FD:87:B5:9C:3E:18:F8:20
X509v3 Authority Key Identifier:
keyid:C1:09:0D:37:DA:9F:FE:EE:1A:9C:22:9B:AF:F1:19:0B:D2:2E:89:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/016C59AA582B11F0AEBD90C0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.72.172.0/24
Signature Algorithm: sha256WithRSAEncryption
96:be:f8:99:30:a1:d1:b9:34:6f:93:b9:ba:60:82:59:35:01:
cc:99:40:a2:b5:bf:72:9c:82:3a:1c:e9:91:f0:f7:12:99:00:
1e:c5:ef:d2:8a:9a:bd:08:8b:88:01:39:77:9b:76:65:c4:76:
60:73:b5:7c:d1:e2:ad:5e:5b:a7:05:15:d4:3c:76:a2:e0:b0:
bf:3b:40:69:02:aa:22:9e:99:db:fd:75:32:e3:0c:a0:b0:57:
c4:db:cf:a6:3b:ec:bc:c5:52:02:93:fd:95:97:2a:00:1d:9c:
54:9f:cc:24:df:b1:10:6f:b5:5f:84:3c:64:a4:eb:35:1f:b2:
63:f0:17:78:96:82:b8:c6:61:24:2a:85:09:0f:0c:db:2a:09:
f6:74:af:05:ca:a8:59:a8:c4:9c:4c:40:8b:8e:c0:a8:03:24:
3f:fd:2a:ea:28:29:aa:1a:75:58:5c:a1:9a:e7:97:c0:7d:cd:
d1:c3:54:9e:b1:fb:2b:7b:7b:fd:95:af:3f:9d:b2:f9:ef:45:
50:21:db:f7:d9:69:92:94:ce:ff:6f:08:19:9a:e2:ce:76:27:
b1:35:e1:39:11:fd:64:0e:37:78:eb:91:b1:3e:03:b8:d1:2d:
13:1d:00:19:f9:6a:21:64:d6:62:1a:7a:1c:ec:2d:c0:80:93:
87:5d:54:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 06:01:56 2025 by rpki-client