Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/530ADDA2563E11F0955959C8DAE4EC9C.roa
File: 530ADDA2563E11F0955959C8DAE4EC9C.roa (raw, json)
Hash identifier: 9CtAOerM0ocOahFQzdxf8n0pVvORlOG5bWJlVvoUAGU=
Subject key identifier: DD:8F:2C:41:6D:89:0F:B6:71:2A:3E:34:C4:E5:C1:B0:CC:72:7B:7F
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 153E
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/530ADDA2563E11F0955959C8DAE4EC9C.roa
Signing time: Tue 01 Jul 2025 05:43:33 +0000
ROA not before: Tue 01 Jul 2025 05:43:29 +0000
ROA not after: Thu 01 Jul 2027 05:43:29 +0000
asID: 212238
IP address blocks: 102.165.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 05:43:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5438 (0x153e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jul 1 05:43:29 2025 GMT
Not After : Jul 1 05:43:29 2027 GMT
Subject: CN=68637585-1d42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:db:4d:0b:f1:c0:b9:52:06:32:c8:1b:82:2a:
1f:f9:a4:dd:d7:74:c6:49:0a:c8:a8:43:62:c3:9e:
9c:fb:e6:fa:17:ee:6b:c7:d5:5f:9a:fa:e2:c3:29:
0e:10:3f:f7:b7:cf:45:d5:0b:cb:5c:dc:4e:ec:f6:
81:d0:46:3c:3e:68:c5:e9:6c:5a:be:d7:44:47:93:
44:21:98:5f:9c:24:68:24:3f:d9:35:68:34:f3:df:
9f:e3:dd:73:7b:4b:2f:f9:cf:64:30:aa:86:bb:d5:
d1:f8:0b:48:54:27:ad:25:b5:90:02:e1:ec:09:86:
41:a7:e6:af:8e:ea:ae:bc:97:01:d2:c0:e1:fe:5c:
e1:a2:8c:93:e5:2a:03:10:f5:7f:d3:d3:8b:69:74:
b5:37:b8:2b:52:b0:fb:03:86:b6:ba:d1:af:37:a1:
9f:01:ae:74:46:c8:c3:09:01:19:78:4a:e0:8d:a8:
f2:2d:66:0d:7d:a9:03:19:a0:8c:d4:66:c5:b9:be:
a6:65:85:6e:e4:2c:80:78:97:62:64:2d:e9:1a:47:
c3:d0:0e:9a:73:a8:93:94:63:ca:2f:a0:7f:ef:6b:
e3:29:65:98:cd:04:a4:ad:7b:38:bc:b3:27:b2:56:
7b:ca:7d:d6:b0:4f:74:b0:15:6d:e8:ed:d3:36:30:
08:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:8F:2C:41:6D:89:0F:B6:71:2A:3E:34:C4:E5:C1:B0:CC:72:7B:7F
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/530ADDA2563E11F0955959C8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.32.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:26:f6:25:92:d2:e8:e5:cf:ac:b5:e4:7b:b5:84:66:7e:9d:
4a:a3:cf:2e:0d:ae:42:66:47:de:da:dc:2a:67:18:5a:40:91:
9a:2b:2d:24:04:58:fb:cd:d5:ed:a0:e5:7d:f0:06:90:56:4d:
9c:59:fd:99:ad:7a:af:cb:18:48:da:6b:ad:c5:47:06:0c:5f:
b2:e8:89:40:b8:5b:71:15:d1:98:88:25:6f:62:94:7b:fe:0f:
f1:b8:56:84:b4:55:50:17:fa:93:d2:67:ed:fd:66:32:8a:97:
92:e8:9f:bd:d4:b6:9a:4f:bd:aa:f2:fc:5b:96:70:dc:3d:05:
65:e5:de:1a:26:42:e8:28:f0:54:a3:64:c6:37:92:f4:af:c6:
5e:97:ef:26:97:71:1e:75:84:f6:4b:f3:1d:61:78:ce:18:c5:
22:e9:05:ed:22:e1:54:0d:c0:be:de:64:8a:ae:44:4a:7d:b6:
08:49:ed:40:32:c8:5f:61:c9:96:62:b9:3b:95:21:dc:96:cf:
28:08:df:6f:c3:7b:37:2f:6c:41:4a:ee:2e:e9:03:77:7e:ab:
83:23:65:e0:c0:0b:99:ff:0f:59:f2:d8:9a:de:82:d1:2f:94:
46:d2:6d:99:49:fc:39:59:93:82:bd:ad:4a:bb:98:bb:df:2c:
b8:22:cc:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 23:26:01 2025 by rpki-client