Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F731F/A187DF92379711EEA4C498314AD9E6FC/AD23161472E111F08259CAA0DAE4EC9C.roa
File: AD23161472E111F08259CAA0DAE4EC9C.roa (raw, json)
Hash identifier: CXW28jJhcJI4pbvFp4dtjP/zrfIgrsyQ25MiQvCPSyE=
Subject key identifier: 12:02:C7:A5:5C:22:88:0D:14:97:99:4D:4B:43:90:21:45:F3:33:0B
Certificate issuer: /CN=F36F731FAF/serialNumber=F5C0B63BAA5E7AF7A4386B637FD1206A3682D0C3
Certificate serial: 030B
Authority key identifier: F5:C0:B6:3B:AA:5E:7A:F7:A4:38:6B:63:7F:D1:20:6A:36:82:D0:C3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/9cC2O6peevekOGtjf9EgajaC0MM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F731F/A187DF92379711EEA4C498314AD9E6FC/AD23161472E111F08259CAA0DAE4EC9C.roa
Signing time: Wed 06 Aug 2025 16:23:25 +0000
ROA not before: Wed 06 Aug 2025 16:23:20 +0000
ROA not after: Tue 06 Aug 2030 16:23:20 +0000
asID: 29571
IP address blocks: 41.207.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F731F/A187DF92379711EEA4C498314AD9E6FC/9cC2O6peevekOGtjf9EgajaC0MM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F731F/A187DF92379711EEA4C498314AD9E6FC/9cC2O6peevekOGtjf9EgajaC0MM.mft
rsync://rpki.afrinic.net/repository/afrinic/9cC2O6peevekOGtjf9EgajaC0MM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 779 (0x30b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F731FAF, serialNumber=F5C0B63BAA5E7AF7A4386B637FD1206A3682D0C3
Validity
Not Before: Aug 6 16:23:20 2025 GMT
Not After : Aug 6 16:23:20 2030 GMT
Subject: CN=6893817d-f640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e2:d9:fc:e4:88:48:ba:64:66:a7:1a:54:ee:
4f:97:68:8e:20:ac:b2:41:8d:43:f0:bf:3b:08:31:
de:9c:94:37:23:47:6f:d9:e2:c6:2b:f8:b3:e6:87:
33:a0:96:1f:aa:bd:4f:ee:7e:54:83:51:8d:e4:9d:
4e:10:cc:c4:b5:f9:fd:4d:08:b5:c1:2e:34:7a:16:
32:ed:33:2a:ae:45:f9:8c:6d:ca:0c:1a:ba:2f:50:
60:ab:bb:03:e4:c8:48:fb:79:a9:77:18:28:af:32:
c7:57:ad:88:fb:38:14:fa:67:88:93:fa:cb:0d:db:
a8:70:06:4e:93:3b:59:f7:0f:f6:c4:99:bd:f2:fb:
72:b7:81:b6:38:60:98:19:45:80:b7:ed:a2:30:1a:
bb:37:24:34:d9:7c:50:2d:e1:b0:d5:bc:2e:5c:6d:
e5:9e:61:74:4c:e6:16:37:d1:08:bf:d9:54:4e:45:
d9:c5:56:c9:cf:68:eb:5a:34:62:b0:35:bd:8f:de:
a8:4c:28:e6:80:aa:30:cc:54:37:cd:de:08:bd:e4:
8d:52:3f:25:88:c7:1b:a0:de:e6:0c:e7:97:36:f8:
25:bf:86:86:de:83:76:cf:fd:62:f0:53:0d:0e:79:
3d:57:d3:cd:70:d3:eb:94:f9:63:cf:dd:88:97:57:
77:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:02:C7:A5:5C:22:88:0D:14:97:99:4D:4B:43:90:21:45:F3:33:0B
X509v3 Authority Key Identifier:
keyid:F5:C0:B6:3B:AA:5E:7A:F7:A4:38:6B:63:7F:D1:20:6A:36:82:D0:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F731F/A187DF92379711EEA4C498314AD9E6FC/9cC2O6peevekOGtjf9EgajaC0MM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9cC2O6peevekOGtjf9EgajaC0MM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F731F/A187DF92379711EEA4C498314AD9E6FC/AD23161472E111F08259CAA0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.207.192.0/19
Signature Algorithm: sha256WithRSAEncryption
2d:70:1f:7b:e8:fb:5d:58:99:17:fc:bf:36:ad:b1:6d:33:60:
7e:0b:ec:9f:32:36:eb:85:db:4e:65:5c:d4:d0:82:47:07:a0:
62:77:f5:9b:71:90:99:60:e2:f1:70:43:f8:d7:c9:30:21:08:
e2:f2:d3:a4:1e:47:26:c6:0e:f2:5f:47:73:f3:ed:57:7c:59:
bb:de:e0:d0:8b:6b:29:8b:15:83:dc:77:52:dd:df:b5:9e:ab:
a1:97:23:19:75:cd:6d:4f:23:c4:0f:13:35:99:62:4e:cb:35:
4b:54:49:e6:63:d1:b1:ed:84:d8:91:5e:fd:d3:08:2f:7a:5c:
2f:8c:5a:db:77:5d:cd:e8:d8:02:45:24:ab:11:40:5f:a7:49:
42:8e:36:45:63:9b:1f:9f:a8:22:92:ec:df:54:2a:c5:08:7f:
40:04:56:f9:97:ab:ed:be:8d:38:32:93:74:4d:6f:aa:96:1a:
f1:7d:6a:04:bf:ce:2d:75:f2:b2:cc:19:8d:67:48:c3:78:e3:
e2:52:6b:73:e1:42:31:ea:58:81:f9:57:ab:22:f1:00:cd:e3:
d1:82:52:62:8a:cf:d3:a0:bb:df:c8:48:e2:93:c4:9b:d9:0f:
ef:51:e7:fb:f6:32:60:5d:38:d8:9a:03:66:a8:28:9f:27:fb:
f8:2d:98:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:20:01 2025 by rpki-client