Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/3B737E5C563D11F0848AA4C1DAE4EC9C.roa
File: 3B737E5C563D11F0848AA4C1DAE4EC9C.roa (raw, json)
Hash identifier: NiND2ww5GwmROeFp43ZVNb2H4gqjxRIDpGQc9BaFFvs=
Subject key identifier: F9:0E:D7:93:31:18:96:8A:8B:C2:E2:4B:0D:4F:E5:5D:F3:AE:52:35
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1532
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/3B737E5C563D11F0848AA4C1DAE4EC9C.roa
Signing time: Tue 01 Jul 2025 05:35:44 +0000
ROA not before: Tue 01 Jul 2025 05:35:40 +0000
ROA not after: Thu 01 Jul 2027 05:35:40 +0000
asID: 62390
IP address blocks: 102.129.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 11:30:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5426 (0x1532)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jul 1 05:35:40 2025 GMT
Not After : Jul 1 05:35:40 2027 GMT
Subject: CN=686373b0-4ca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:32:a7:5d:8a:50:99:09:f5:b5:c9:94:6f:6e:
c3:64:46:af:a9:e5:ac:f5:da:3b:e0:c7:b3:ec:32:
28:9c:6e:20:34:cb:a2:30:df:1d:aa:2a:7a:34:fb:
ab:36:be:e6:d7:1d:d8:ee:b2:da:7f:c7:3a:44:f8:
c7:99:60:d7:1d:d8:e1:57:8c:82:d1:70:14:27:8e:
f5:0b:12:30:54:a7:fd:02:e7:6d:fa:f5:70:53:7b:
72:5b:eb:0c:e3:1c:f4:c0:af:27:8d:6a:04:4a:ed:
1a:a4:e2:69:6f:bb:6a:6d:0d:4f:f0:03:05:12:1d:
8f:79:6f:2b:98:57:34:5e:84:df:1b:0b:e8:77:15:
ea:a1:bf:3a:f9:49:3b:f3:ba:8e:eb:3e:8b:ce:30:
a9:bb:b2:ad:6d:cf:93:85:ba:eb:f1:ca:84:58:fd:
e0:27:b1:37:27:8a:f0:54:5b:c6:55:c3:e5:1a:03:
03:3c:a5:8e:63:d7:4e:98:f4:81:26:42:ef:9b:38:
37:e8:10:d3:72:42:0e:21:43:51:2c:88:fc:d7:9b:
c5:48:84:8e:de:e9:f0:17:8d:22:7b:f8:35:a8:09:
86:6f:d1:1c:f5:fe:8b:89:f7:de:92:0d:5d:ff:b8:
0c:ce:98:1c:6d:06:a6:76:48:04:9a:b2:81:54:c0:
8b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:0E:D7:93:31:18:96:8A:8B:C2:E2:4B:0D:4F:E5:5D:F3:AE:52:35
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/3B737E5C563D11F0848AA4C1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.189.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:af:a4:63:02:56:3e:7e:17:e9:48:c9:a7:da:75:59:6d:e5:
7b:cd:ac:2b:8b:6d:27:b4:a1:72:6c:c1:00:8d:f4:21:ae:00:
ca:9e:8c:b2:86:c7:45:36:bc:36:c8:1b:ba:5f:09:5d:67:e6:
f5:1b:14:36:2c:f3:f9:c6:59:d3:4b:d5:08:67:c9:90:03:c5:
dc:b4:79:0d:5b:b7:b3:52:a9:5a:90:7b:49:4a:00:53:6e:74:
6a:51:e8:4d:cc:91:b2:6c:ee:c5:a5:9a:72:82:1a:90:4f:a2:
a2:62:9f:72:e0:75:bd:b9:e8:6e:3f:9d:98:b2:48:52:d9:e3:
03:70:db:f5:23:ae:ad:0d:ad:00:88:6e:14:24:5a:a7:da:eb:
a2:94:8a:d5:95:28:13:b4:75:52:6d:0f:96:aa:8c:6b:4e:13:
9c:3e:91:f8:70:78:5e:7e:3b:46:29:ec:5f:14:d4:b9:ba:dc:
08:9b:55:9e:fb:e0:36:c1:e1:df:34:f2:2a:8c:74:83:04:ec:
2f:3c:07:d1:ac:e3:a3:ce:c7:52:31:4f:d4:1e:89:74:7f:e5:
bc:51:0e:7a:fd:3b:6b:a4:8d:0d:1f:b7:7f:27:56:1c:98:c5:
67:f2:18:5a:cb:bf:4d:da:f1:5f:79:94:4f:15:fd:de:b9:d5:
4b:21:de:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 04:22:50 2025 by rpki-client