Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/11B79A8857ED11F0BB37DCB6DAE4EC9C.roa
File: 11B79A8857ED11F0BB37DCB6DAE4EC9C.roa (raw, json)
Hash identifier: LGj0TGBQ9PlzMfbB8gss/Pg+nTIpWMAk3qHnGrpm+ig=
Subject key identifier: D7:01:C2:AD:C5:A2:57:65:F7:20:EF:21:E2:8A:3E:02:79:19:BD:D0
Certificate issuer: /CN=F369591CAF/serialNumber=C1090D37DA9FFEEE1A9C229BAFF1190BD22E8934
Certificate serial: 0398
Authority key identifier: C1:09:0D:37:DA:9F:FE:EE:1A:9C:22:9B:AF:F1:19:0B:D2:2E:89:34
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/11B79A8857ED11F0BB37DCB6DAE4EC9C.roa
Signing time: Thu 03 Jul 2025 09:06:57 +0000
ROA not before: Thu 03 Jul 2025 09:06:52 +0000
ROA not after: Tue 31 Dec 2030 09:06:52 +0000
asID: 15964
IP address blocks: 41.204.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.mft
rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Jul 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 920 (0x398)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369591CAF, serialNumber=C1090D37DA9FFEEE1A9C229BAFF1190BD22E8934
Validity
Not Before: Jul 3 09:06:52 2025 GMT
Not After : Dec 31 09:06:52 2030 GMT
Subject: CN=68664831-3fe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:2c:8c:ba:bd:91:73:ef:1b:b7:1f:ed:d0:a5:
ec:a0:7f:7f:f1:ed:ba:f5:07:b9:7f:e6:cf:2c:59:
90:06:0b:22:b4:05:26:cd:5d:b3:a6:b5:ab:99:36:
6d:a7:07:33:3e:e0:e3:4d:c7:ff:8e:c2:ae:44:ca:
b8:b7:1b:82:7e:32:af:0c:2f:cc:10:19:f8:aa:3f:
c2:e5:9c:77:bc:a5:99:45:25:c8:d3:41:6e:f2:12:
49:90:a7:ec:1b:86:37:c2:d8:2a:0e:c1:c2:95:df:
ee:3a:58:9e:d6:fd:a4:93:b4:64:29:3c:8a:0e:0b:
d9:2e:a1:cc:38:88:cf:68:eb:0d:9e:a1:ea:4f:1f:
48:e3:2d:72:53:e4:74:2e:6d:f7:d3:31:f0:be:57:
f2:d0:ba:d5:95:8b:c9:76:fa:62:cc:8c:2a:83:5d:
13:43:e1:b0:6c:26:5b:20:2a:f1:64:ce:bb:d3:73:
42:52:a9:62:09:cd:78:23:dc:6e:dc:eb:af:57:e8:
bf:70:82:57:0d:28:e9:03:b7:70:83:c3:74:ea:f5:
4f:e4:f8:ff:d6:89:49:ec:4d:0e:3c:23:a4:b2:54:
42:1a:11:45:cf:31:73:c9:b0:7f:c4:ae:9d:c1:c4:
ab:12:b8:4d:e5:06:76:2b:a9:db:01:9b:a8:43:bf:
29:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:01:C2:AD:C5:A2:57:65:F7:20:EF:21:E2:8A:3E:02:79:19:BD:D0
X509v3 Authority Key Identifier:
keyid:C1:09:0D:37:DA:9F:FE:EE:1A:9C:22:9B:AF:F1:19:0B:D2:2E:89:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/11B79A8857ED11F0BB37DCB6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.204.93.0/24
Signature Algorithm: sha256WithRSAEncryption
74:d0:70:74:22:bf:c1:b3:ca:d7:13:8b:7a:be:9e:94:a1:3f:
5e:54:7c:6f:54:49:69:61:7b:e6:40:31:6d:74:7c:7d:2c:0d:
fe:3a:88:52:26:4e:da:5f:c8:e9:70:34:b4:97:7d:45:6e:cc:
7e:32:93:03:28:4e:23:5c:68:3d:93:af:64:5c:01:f5:c8:0c:
51:77:c5:15:54:2b:e3:0c:70:89:eb:2d:52:d4:7f:11:ee:80:
7e:8a:ba:fa:2e:1c:37:a0:1c:2c:c5:3d:bd:ca:56:e1:9c:76:
89:b0:8e:3e:c7:39:bb:5e:59:ff:1e:c9:13:d1:8a:a0:a5:89:
d0:40:af:96:87:48:f7:c1:fb:d2:63:3d:94:8f:a7:b8:0a:2e:
a6:cb:64:39:18:06:3e:e1:1e:cc:90:10:63:d2:13:92:f6:24:
76:3d:c6:c1:57:6b:7d:06:1d:b5:1a:23:e5:f6:27:0c:b6:95:
28:bd:b5:b2:a2:ca:dc:d9:8c:e9:b7:3b:5b:bf:07:ec:b2:5a:
c7:17:84:88:90:aa:45:47:38:88:20:3e:86:3c:05:3c:28:54:
2d:f0:2a:82:ed:c3:4b:79:39:99:c2:dd:b4:c1:f3:10:44:55:
3b:7a:87:d4:3c:47:1c:9d:b1:21:c5:f1:1c:56:5b:1d:50:58:
3b:15:f3:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 06:12:59 2025 by rpki-client