Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/CA5E35964D5D11F081F26F7DDAE4EC9C.roa
File: CA5E35964D5D11F081F26F7DDAE4EC9C.roa (raw, json)
Hash identifier: Us3q9+/9+/1NHCw+98NDB70+pRf/ME9h+nC4WOddXaw=
Subject key identifier: 3F:51:5A:62:2C:7E:39:EE:36:EA:A0:E7:16:DB:9C:99:30:D0:A6:AE
Certificate issuer: /CN=F369BF27AF/serialNumber=6057F489F5ADC4E9269C260D702C81AAB6AA2E6D
Certificate serial: 0900
Authority key identifier: 60:57:F4:89:F5:AD:C4:E9:26:9C:26:0D:70:2C:81:AA:B6:AA:2E:6D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YFf0ifWtxOkmnCYNcCyBqraqLm0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/CA5E35964D5D11F081F26F7DDAE4EC9C.roa
Signing time: Thu 19 Jun 2025 22:36:07 +0000
ROA not before: Fri 20 Jun 2025 22:36:03 +0000
ROA not after: Wed 20 Jun 2035 22:36:03 +0000
asID: 37049
IP address blocks: 41.222.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/YFf0ifWtxOkmnCYNcCyBqraqLm0.crl
rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/YFf0ifWtxOkmnCYNcCyBqraqLm0.mft
rsync://rpki.afrinic.net/repository/afrinic/YFf0ifWtxOkmnCYNcCyBqraqLm0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 01 Jul 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2304 (0x900)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369BF27AF, serialNumber=6057F489F5ADC4E9269C260D702C81AAB6AA2E6D
Validity
Not Before: Jun 20 22:36:03 2025 GMT
Not After : Jun 20 22:36:03 2035 GMT
Subject: CN=685490d7-6ab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:5a:95:ab:c7:c0:0d:a5:a9:0b:c6:00:60:9e:
58:9e:eb:1a:e0:79:4a:f5:08:63:ef:c2:42:e1:e7:
fe:a5:d2:5d:28:32:f0:e4:47:4e:27:5a:4e:77:11:
38:0b:9f:08:53:49:53:98:fe:49:63:09:e4:c7:0a:
42:01:2c:ef:1e:34:c2:c7:8a:f6:26:ad:84:26:62:
5b:a0:19:86:12:34:7c:f9:b8:a2:a1:1d:eb:40:f1:
3d:c8:38:58:85:97:84:e8:b5:97:30:f3:6b:c3:2b:
83:b1:36:96:ea:c5:5d:e4:ff:38:60:2a:e1:fc:47:
01:c4:80:76:7a:94:cb:91:51:aa:13:5d:fb:11:5b:
fa:03:d9:3e:02:37:b5:49:44:a4:c2:60:1f:92:cc:
b9:ea:77:c1:74:99:f0:c6:cf:8e:05:d4:33:5a:88:
1d:73:1b:a0:2d:cb:3c:fe:32:5e:44:12:e1:3c:46:
6e:24:15:68:b5:09:43:7a:a0:c7:de:8f:04:48:c7:
35:1d:a8:b1:bb:b2:a6:14:14:f2:7a:f7:5f:f1:b7:
3f:58:5f:49:15:e2:d6:0b:da:c9:3c:65:66:75:9a:
1b:a9:fc:0e:f4:73:ed:1e:64:73:37:b2:52:16:44:
f7:28:14:98:fb:d7:c8:84:6d:b7:8d:f2:03:21:74:
39:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:51:5A:62:2C:7E:39:EE:36:EA:A0:E7:16:DB:9C:99:30:D0:A6:AE
X509v3 Authority Key Identifier:
keyid:60:57:F4:89:F5:AD:C4:E9:26:9C:26:0D:70:2C:81:AA:B6:AA:2E:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/YFf0ifWtxOkmnCYNcCyBqraqLm0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YFf0ifWtxOkmnCYNcCyBqraqLm0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/CA5E35964D5D11F081F26F7DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.222.138.0/24
Signature Algorithm: sha256WithRSAEncryption
29:12:df:7f:16:7a:88:ac:60:1f:ce:24:0c:ca:7f:27:2c:bb:
56:30:1f:fd:e8:a6:b7:e0:61:5c:3b:08:ab:0e:18:b9:96:67:
2e:60:cf:d0:1b:19:55:fd:9c:38:20:22:2d:ea:fc:3d:3e:e4:
a2:29:23:68:f9:4e:fc:8c:c3:2c:22:46:f8:dc:6f:7d:35:d3:
ab:38:7b:5a:ee:e7:74:4f:f6:3d:4f:3f:87:7c:6e:6e:7e:24:
10:08:a7:86:bd:64:a7:f3:eb:26:32:58:9f:0a:dc:1b:b5:11:
bc:ca:9c:ef:7f:b3:b0:45:99:84:5d:28:2c:45:aa:84:86:c6:
46:c1:1b:ab:a0:6e:7e:4a:12:30:08:25:f6:24:23:c1:e0:81:
92:67:3f:30:c1:72:dd:88:e1:9e:be:0b:0a:22:ac:ad:a8:d4:
ab:c3:48:da:40:50:a6:64:07:d8:a0:0d:16:b5:32:ec:5d:34:
2e:b2:73:f0:4d:8c:ba:20:1e:cc:16:49:4b:01:6e:a6:e8:d9:
ed:5b:79:5a:ac:ff:81:f9:ed:b5:38:cb:8d:fb:75:91:a9:28:
86:c0:71:1c:1f:ed:61:81:89:3b:de:59:96:3a:67:3b:5c:19:
92:5c:d2:f5:9d:c8:16:b8:d0:d5:64:87:e4:6e:f2:b5:e3:8f:
3a:9e:b0:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 01:35:24 2025 by rpki-client