Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/0C4804664F3C11F093596BB4DAE4EC9C.roa
File: 0C4804664F3C11F093596BB4DAE4EC9C.roa (raw, json)
Hash identifier: Jbv/j0sC+74FTPIIeSGmxgnN52K2D8I93N2ASJJ+h+k=
Subject key identifier: 37:31:B5:C3:63:61:39:6C:BB:D3:D4:91:30:29:D2:35:F7:2A:4C:C7
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1514
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/0C4804664F3C11F093596BB4DAE4EC9C.roa
Signing time: Sun 22 Jun 2025 07:39:37 +0000
ROA not before: Sun 22 Jun 2025 07:39:32 +0000
ROA not after: Sat 19 Jun 2027 07:39:32 +0000
asID: 211484
IP address blocks: 102.165.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 01 Jul 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5396 (0x1514)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jun 22 07:39:32 2025 GMT
Not After : Jun 19 07:39:32 2027 GMT
Subject: CN=6857b339-7fda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b6:b1:d9:7e:1d:e2:92:ae:77:bd:d0:25:65:
6f:29:5a:bd:57:b9:fc:a9:fc:9b:af:83:15:52:13:
52:cc:9c:de:4c:08:5a:c0:ef:fb:f4:89:11:2d:3e:
8b:eb:ef:32:29:0d:ed:a9:e5:70:e2:34:95:9b:a5:
80:81:99:44:4b:c4:51:63:08:55:bf:85:81:a3:83:
02:2a:cf:9d:1e:82:00:47:f4:3e:2f:ac:de:73:94:
53:df:5a:25:09:fd:3f:63:8d:20:50:4c:d0:31:29:
c6:e0:94:42:59:72:ac:bf:75:d9:79:87:2a:eb:6e:
29:4f:04:2d:c4:74:92:7a:31:43:a0:e7:28:ea:df:
2f:71:72:25:dd:2d:66:9f:13:25:4a:0c:14:dc:de:
56:16:7b:e0:37:11:12:89:76:12:19:6b:78:a2:e0:
05:6c:4d:0e:c3:42:fc:ae:a6:2c:3b:1f:cf:d3:91:
8a:6d:89:80:94:9c:23:00:46:88:e1:e8:3c:86:8f:
46:d8:6e:4a:c9:bc:ee:1e:78:93:1b:86:d0:91:ce:
6a:26:b9:12:b9:fd:4d:68:ea:f8:1e:88:ae:4a:db:
1b:34:bc:03:d2:ac:45:07:fa:5d:f7:4b:b8:64:2c:
a3:96:44:38:80:7f:cd:f6:4f:51:f5:d6:3e:00:02:
94:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:31:B5:C3:63:61:39:6C:BB:D3:D4:91:30:29:D2:35:F7:2A:4C:C7
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/0C4804664F3C11F093596BB4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.23.0/24
Signature Algorithm: sha256WithRSAEncryption
04:1f:ca:0e:22:76:fd:b6:5a:98:49:2e:71:a0:01:f0:81:d4:
9e:38:65:78:55:d5:9c:83:43:bd:6f:ba:0d:6f:20:fa:bf:85:
0d:5d:3f:ed:26:4e:c3:46:3f:9a:f1:ce:09:12:bf:1e:00:0e:
9f:46:1c:fd:1f:37:e2:96:5e:92:2f:c5:4b:60:8c:df:1c:0d:
c9:43:3f:03:0b:31:cc:b3:b8:ad:98:fb:90:3b:e3:fb:40:3b:
21:e0:4c:36:c1:8d:6c:f5:2d:4f:7b:c9:b3:32:27:9f:21:16:
2b:9d:50:6d:a2:bf:2f:53:58:4c:96:20:44:1d:2c:6a:28:67:
8e:9d:7a:5f:48:87:83:64:69:9c:54:8b:7c:ba:93:3b:54:00:
89:f0:97:f0:06:df:89:ac:91:66:8a:29:7f:4e:a4:e0:ba:f4:
09:87:cd:01:4a:80:a6:40:23:d0:07:7d:b9:5f:52:d7:fb:68:
7a:b8:83:75:c0:54:fc:c3:20:83:ff:f6:d2:93:64:d6:6a:22:
4e:97:58:03:7d:08:37:5b:02:69:d0:36:a6:3b:87:e6:d3:87:
c2:ae:1c:82:5e:f7:a1:8c:ae:f5:e0:8c:97:31:c1:36:e2:1b:
1c:10:60:e2:2d:e4:8c:8c:9c:1e:c5:22:d4:b1:66:95:77:09:
75:91:23:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:13:11 2025 by rpki-client