Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/73CC053C4EB611F0AE15C1C8DAE4EC9C.roa
File: 73CC053C4EB611F0AE15C1C8DAE4EC9C.roa (raw, json)
Hash identifier: SQV1YsdD1Ajwa0W56ES+0u6UJCxHEKEeYvpdGKFa0ZE=
Subject key identifier: D0:02:6B:A4:45:E5:11:9A:24:50:F0:43:A7:4B:18:94:F0:B8:A8:38
Certificate issuer: /CN=F36FE19EAF/serialNumber=C78CDC3B5D4B13675CB48AD3B63BE01EC5A807F8
Certificate serial: 042F
Authority key identifier: C7:8C:DC:3B:5D:4B:13:67:5C:B4:8A:D3:B6:3B:E0:1E:C5:A8:07:F8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/x4zcO11LE2dctIrTtjvgHsWoB_g.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/73CC053C4EB611F0AE15C1C8DAE4EC9C.roa
Signing time: Sat 21 Jun 2025 15:43:18 +0000
ROA not before: Sat 21 Jun 2025 15:43:14 +0000
ROA not after: Mon 31 Dec 2035 15:43:14 +0000
asID: 207113
IP address blocks: 102.206.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/x4zcO11LE2dctIrTtjvgHsWoB_g.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/x4zcO11LE2dctIrTtjvgHsWoB_g.mft
rsync://rpki.afrinic.net/repository/afrinic/x4zcO11LE2dctIrTtjvgHsWoB_g.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Jul 2025 00:06:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1071 (0x42f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FE19EAF, serialNumber=C78CDC3B5D4B13675CB48AD3B63BE01EC5A807F8
Validity
Not Before: Jun 21 15:43:14 2025 GMT
Not After : Dec 31 15:43:14 2035 GMT
Subject: CN=6856d316-b62a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d0:cd:94:2a:05:77:64:9f:5e:9d:44:35:0a:
58:a7:68:b5:03:d0:96:68:77:f6:ee:a8:eb:09:8c:
22:d0:23:ac:d3:55:59:8d:d8:a0:62:3e:71:df:ae:
1a:4f:04:dd:84:e6:d2:5a:0a:b6:3c:9c:75:a0:22:
b4:ce:66:3d:7e:43:68:98:8c:83:c3:2f:72:f4:71:
6d:7f:7d:b8:bb:6a:de:e9:01:35:5d:d3:3f:c4:2a:
50:cf:73:b0:68:a0:2c:69:cb:4a:aa:81:60:e7:18:
64:8c:6d:4c:7f:b9:99:2c:2f:48:d0:bb:dd:52:b3:
d5:a3:7b:c3:f7:96:e2:b6:01:2d:b8:2c:9d:9a:d7:
20:97:61:03:11:63:fd:8b:5d:30:bb:15:73:06:4a:
ab:50:f5:36:b0:ed:6b:81:6e:8c:45:57:05:f6:e8:
ad:39:b9:90:17:d5:91:16:1b:bc:d6:41:34:39:84:
75:e7:c3:d2:d9:18:7b:f2:c2:ac:d9:a9:2b:28:c3:
c6:bc:39:cb:0a:f2:72:55:e2:64:40:3b:4c:72:0d:
26:7e:18:59:de:39:b6:e4:4d:e8:db:00:28:73:f5:
dc:8f:1b:3f:d1:76:9c:39:88:c8:09:7f:b6:23:b4:
33:4b:70:56:e3:98:54:28:42:5b:fa:45:3a:cf:5c:
76:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:02:6B:A4:45:E5:11:9A:24:50:F0:43:A7:4B:18:94:F0:B8:A8:38
X509v3 Authority Key Identifier:
keyid:C7:8C:DC:3B:5D:4B:13:67:5C:B4:8A:D3:B6:3B:E0:1E:C5:A8:07:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/x4zcO11LE2dctIrTtjvgHsWoB_g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/x4zcO11LE2dctIrTtjvgHsWoB_g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/73CC053C4EB611F0AE15C1C8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.206.164.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:ac:dd:75:1f:8b:79:d8:bc:e9:35:b9:82:46:1b:bc:14:7a:
12:75:19:be:21:c5:bb:cb:93:9d:a1:50:d1:40:3c:00:13:ed:
d8:c9:7f:ea:85:23:9d:7b:9b:03:31:01:ac:45:b6:6b:e8:0f:
65:41:e5:9b:ea:a1:b3:6b:68:c2:a7:a2:80:4b:a9:8d:8e:5f:
c5:2c:18:4d:23:c4:5d:e3:24:ec:ee:62:a5:73:c5:bf:16:95:
1e:b0:b1:02:d3:63:dc:f0:b5:5b:52:53:cf:4b:c8:f1:20:50:
8d:ad:ac:21:0b:fb:48:04:db:64:40:aa:63:7f:9d:09:c9:1c:
4c:de:bb:8d:af:d8:71:94:ef:27:4a:cc:5d:a8:ad:38:7c:1e:
59:15:71:13:ee:ca:99:48:1b:23:b7:8c:44:f4:7e:a5:79:68:
c0:63:cf:da:72:99:a6:32:2f:da:28:9e:6a:95:72:72:43:87:
96:65:47:cf:7b:52:6c:52:3e:f8:17:35:d3:82:ec:ee:4a:4f:
30:c5:c0:72:d2:94:ab:a4:25:09:b4:08:e2:5b:9d:49:d4:75:
2a:0c:42:35:12:4f:85:d7:47:b9:30:39:bd:f0:36:ec:10:c8:
d0:22:0f:4d:64:48:1b:7d:11:bb:5f:9c:5e:cc:82:95:37:06:
9e:74:b2:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 07:06:59 2025 by rpki-client