Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361452C/15F0402057F011F0AF4575C8DAE4EC9C/013BE36857F111F0A64336CDDAE4EC9C.roa
File: 013BE36857F111F0A64336CDDAE4EC9C.roa (raw, json)
Hash identifier: HJ3Xli5fQd3z30iTvANZSqI66ie7lcQ+mUYXKi9CwdA=
Subject key identifier: 34:14:25:E0:03:5B:44:72:96:74:77:26:8F:4E:C8:39:1F:05:3B:86
Certificate issuer: /CN=F361452CAF/serialNumber=1683A92157CEE0259E36880DABE016B6DDB5E9CE
Certificate serial: 02
Authority key identifier: 16:83:A9:21:57:CE:E0:25:9E:36:88:0D:AB:E0:16:B6:DD:B5:E9:CE
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/FoOpIVfO4CWeNogNq-AWtt216c4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361452C/15F0402057F011F0AF4575C8DAE4EC9C/013BE36857F111F0A64336CDDAE4EC9C.roa
Signing time: Thu 03 Jul 2025 09:35:07 +0000
ROA not before: Thu 03 Jul 2025 09:35:02 +0000
ROA not after: Sat 03 Jul 2027 09:35:02 +0000
asID: 329552
IP address blocks: 102.205.188.0/23 maxlen: 23
2c0f:23c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F361452C/15F0402057F011F0AF4575C8DAE4EC9C/FoOpIVfO4CWeNogNq-AWtt216c4.crl
rsync://rpki.afrinic.net/repository/member_repository/F361452C/15F0402057F011F0AF4575C8DAE4EC9C/FoOpIVfO4CWeNogNq-AWtt216c4.mft
rsync://rpki.afrinic.net/repository/afrinic/FoOpIVfO4CWeNogNq-AWtt216c4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 03 Aug 2025 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F361452CAF, serialNumber=1683A92157CEE0259E36880DABE016B6DDB5E9CE
Validity
Not Before: Jul 3 09:35:02 2025 GMT
Not After : Jul 3 09:35:02 2027 GMT
Subject: CN=68664ecb-07cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:87:8d:e3:b3:ff:99:0d:76:d0:c2:97:f0:78:
25:a6:9a:68:0e:36:81:e8:6e:5f:e8:a3:d6:16:15:
ac:81:ac:0f:1a:de:f7:5c:05:f8:2f:91:8f:92:92:
3c:38:38:34:05:b2:29:7e:5b:ef:d4:4b:9d:63:9e:
ed:75:d7:b0:4c:19:f3:ce:08:71:bf:7b:65:fc:0b:
a4:ca:89:42:12:a7:61:82:c6:8b:59:ae:5e:2d:8e:
b1:cf:f8:48:4d:2b:8f:35:27:19:fb:1b:d4:c7:f1:
3e:77:2a:0b:e0:cf:3c:d8:d8:d6:50:c4:28:fd:3f:
f3:5f:1a:1c:98:c0:18:91:71:b8:be:e8:65:91:91:
38:f5:c6:2e:9e:e3:ae:d4:75:3e:35:eb:a8:66:39:
83:f4:f3:8c:4c:c4:61:d4:fa:b3:02:d3:2a:a1:b0:
73:93:29:bc:77:12:57:5b:b1:20:5a:3f:0d:a1:f8:
66:37:5a:57:0b:91:79:b2:4c:55:18:5c:3a:94:06:
e9:a9:97:ee:95:9f:20:81:9b:82:4b:05:6a:5d:25:
b8:75:b5:5a:bb:83:bc:b4:30:60:c4:91:66:e7:45:
9f:97:d1:e6:a5:7b:0f:b3:c9:74:64:65:20:94:88:
a0:17:df:5d:e2:d6:7d:f2:f7:53:69:d5:3b:5c:37:
79:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:14:25:E0:03:5B:44:72:96:74:77:26:8F:4E:C8:39:1F:05:3B:86
X509v3 Authority Key Identifier:
keyid:16:83:A9:21:57:CE:E0:25:9E:36:88:0D:AB:E0:16:B6:DD:B5:E9:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F361452C/15F0402057F011F0AF4575C8DAE4EC9C/FoOpIVfO4CWeNogNq-AWtt216c4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/FoOpIVfO4CWeNogNq-AWtt216c4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361452C/15F0402057F011F0AF4575C8DAE4EC9C/013BE36857F111F0A64336CDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.205.188.0/23
IPv6:
2c0f:23c0::/32
Signature Algorithm: sha256WithRSAEncryption
66:cd:7c:55:3d:b6:87:a0:af:8d:87:59:0a:23:e5:94:12:c2:
1f:66:d5:14:88:be:13:4f:0b:dc:21:09:90:67:70:32:e1:15:
d2:55:65:78:a1:ba:c0:14:f3:22:e3:7e:f8:c6:a9:99:ea:6c:
61:15:e8:be:2c:67:77:74:f3:b7:a1:cb:c2:bb:4d:b0:68:7c:
92:80:7c:f3:e3:22:5e:08:f7:ab:1d:f7:c3:0a:d3:a9:f6:1f:
00:4d:a2:7a:20:60:d2:5d:74:a6:2e:5e:4f:02:1e:bd:a3:98:
d8:6a:61:f7:ef:be:69:70:37:ef:f1:ab:d3:03:d0:07:07:96:
c6:75:b3:e0:f4:f1:2e:af:31:20:16:1c:23:70:a1:21:07:16:
7c:f3:fc:7e:ae:77:c1:47:f7:ac:be:44:74:a1:6f:f0:32:ee:
c7:11:a0:96:03:5f:1b:88:86:b6:29:82:f7:62:8f:cf:68:7d:
78:56:d2:2a:e9:ec:34:4d:b3:f6:81:7d:68:bf:5f:d2:c8:56:
84:d9:6d:61:dc:a4:38:83:63:00:1a:3f:02:78:1c:b6:0f:55:
63:37:7f:34:82:99:bb:c0:9e:77:1a:94:69:db:5a:d2:9a:cc:
33:2d:0b:fe:c7:76:d1:4e:40:fa:da:2b:ba:37:62:2b:02:b0:
7c:00:92:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 1 18:09:50 2025 by rpki-client