Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/21D354BA576211F098BCD5A6DAE4EC9C.roa
File: 21D354BA576211F098BCD5A6DAE4EC9C.roa (raw, json)
Hash identifier: 4xF4q1aGLDqPWO/lN87jtt4mzGDncXf1cKquoSVh8Jo=
Subject key identifier: DD:3B:B5:43:9B:52:30:94:83:FD:D0:E7:C1:00:85:98:69:24:EF:6A
Certificate issuer: /CN=F369591CAF/serialNumber=C1090D37DA9FFEEE1A9C229BAFF1190BD22E8934
Certificate serial: 0393
Authority key identifier: C1:09:0D:37:DA:9F:FE:EE:1A:9C:22:9B:AF:F1:19:0B:D2:2E:89:34
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/21D354BA576211F098BCD5A6DAE4EC9C.roa
Signing time: Wed 02 Jul 2025 16:32:24 +0000
ROA not before: Wed 02 Jul 2025 16:32:19 +0000
ROA not after: Tue 31 Dec 2030 16:32:19 +0000
asID: 15964
IP address blocks: 41.204.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.mft
rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Jul 2025 09:07:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 915 (0x393)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369591CAF, serialNumber=C1090D37DA9FFEEE1A9C229BAFF1190BD22E8934
Validity
Not Before: Jul 2 16:32:19 2025 GMT
Not After : Dec 31 16:32:19 2030 GMT
Subject: CN=68655f18-88c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:74:d8:0c:b7:d9:92:18:16:07:01:3a:0b:85:
96:18:c9:d4:b8:f9:c1:18:84:e5:e0:b9:c2:cc:07:
65:2d:82:7b:e8:23:15:da:f6:0a:2b:bb:b5:c9:e7:
31:96:a7:a0:92:b4:0e:1d:a3:b9:00:3c:09:18:2c:
02:63:a9:1f:49:56:b1:07:20:31:43:22:8a:2d:46:
24:60:0f:67:18:43:16:75:8b:c9:98:70:cc:c9:1b:
19:39:50:9b:c9:18:75:5d:04:3f:11:45:6c:05:54:
5f:e0:35:ba:b9:37:ba:94:1d:39:72:73:8e:b5:45:
f2:8a:5f:d1:50:d6:8a:7c:1d:63:3b:37:10:18:db:
ef:6e:f1:70:db:a8:7f:3d:39:17:28:90:8a:05:a7:
e1:7b:6b:41:b8:20:72:78:2a:a3:cb:1f:2b:8b:be:
fe:03:8d:1d:4b:63:c2:43:c2:17:4a:86:cc:28:89:
55:a3:cf:4c:0c:1b:cb:6e:e6:d9:6e:32:e1:7a:50:
0e:51:4d:ec:a8:b4:a5:71:8e:fc:d7:57:e2:85:36:
22:fe:0b:33:98:60:b1:a3:fc:80:c6:8f:12:ff:c8:
4c:d3:7e:02:9c:d2:c1:b6:27:d2:14:53:d6:9f:f1:
e1:25:a0:e5:1a:61:5b:a6:7b:6b:7e:09:a1:f4:d8:
3a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:3B:B5:43:9B:52:30:94:83:FD:D0:E7:C1:00:85:98:69:24:EF:6A
X509v3 Authority Key Identifier:
keyid:C1:09:0D:37:DA:9F:FE:EE:1A:9C:22:9B:AF:F1:19:0B:D2:2E:89:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/21D354BA576211F098BCD5A6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.204.82.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:15:88:7f:fd:96:c7:67:d7:20:66:5c:95:a6:a8:1a:3c:c7:
8c:48:19:4f:a0:0e:9f:32:2a:27:01:e0:24:7c:39:e1:8e:15:
45:52:e4:51:09:01:64:08:ab:76:a6:e7:86:3d:f5:72:eb:9e:
cb:0f:10:c1:af:57:55:31:6c:4c:eb:37:a1:0e:0b:39:6f:f6:
6f:6f:ef:ed:03:aa:d0:05:e0:7b:4e:b9:2b:c8:dd:f8:96:2b:
62:93:46:a2:d0:c0:63:55:95:85:2d:14:cf:c6:0c:52:d1:96:
b5:74:0c:88:4a:88:60:01:1d:98:8c:1a:bb:c9:18:14:20:bd:
96:8e:2d:a5:24:f0:47:af:43:c6:c4:19:95:86:51:68:f8:99:
d6:98:45:c8:45:36:14:1a:06:e5:66:c8:1b:58:59:2b:97:8c:
41:54:9e:86:95:5b:7a:43:b8:53:47:0f:8e:2e:fd:b9:fd:88:
c3:11:f4:92:ae:0e:0d:08:3f:d3:7c:1a:29:dc:64:b6:b5:4d:
31:b2:78:83:28:08:26:84:f6:84:48:33:cc:4d:bf:cb:5f:df:
c9:f4:8e:cd:10:b0:96:87:1c:f2:4d:08:f9:b6:64:ca:d7:31:
30:76:49:96:fc:88:05:23:dd:cb:bd:f4:6b:e1:9a:56:63:68:
39:11:34:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 13:08:28 2025 by rpki-client