Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/5006E70E5E3611F0893678E9DAE4EC9C.roa
File: 5006E70E5E3611F0893678E9DAE4EC9C.roa (raw, json)
Hash identifier: +o+9Z0JPTJwXWASmZEn5sX4JUlRX+byFenFDA6I4P5g=
Subject key identifier: 56:B2:92:B5:FF:1D:8D:2C:42:3B:1B:5B:81:B5:43:86:11:81:9A:C2
Certificate issuer: /CN=F361ED63AF/serialNumber=3824AC5EE00439EEDA21A1A10109E8BF76E4FAB8
Certificate serial: 060B
Authority key identifier: 38:24:AC:5E:E0:04:39:EE:DA:21:A1:A1:01:09:E8:BF:76:E4:FA:B8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/OCSsXuAEOe7aIaGhAQnov3bk-rg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/5006E70E5E3611F0893678E9DAE4EC9C.roa
Signing time: Fri 11 Jul 2025 09:06:22 +0000
ROA not before: Fri 11 Jul 2025 09:06:17 +0000
ROA not after: Wed 10 Jul 2030 09:06:17 +0000
asID: 22355
IP address blocks: 196.1.56.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.crl
rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.mft
rsync://rpki.afrinic.net/repository/afrinic/OCSsXuAEOe7aIaGhAQnov3bk-rg.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 03 Aug 2025 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1547 (0x60b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F361ED63AF, serialNumber=3824AC5EE00439EEDA21A1A10109E8BF76E4FAB8
Validity
Not Before: Jul 11 09:06:17 2025 GMT
Not After : Jul 10 09:06:17 2030 GMT
Subject: CN=6870d40d-973c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:30:58:44:68:1a:65:bd:24:62:50:f3:37:d4:
23:53:7c:ef:bf:7d:c4:25:ce:2d:37:5f:15:db:5f:
b4:db:61:52:58:d8:f7:a9:5a:37:e7:1b:d3:88:da:
2e:5e:47:45:97:e9:9b:df:9e:c6:a3:ef:e7:04:ba:
a0:94:ec:b4:ff:ab:de:43:3c:b2:5b:03:3d:50:dd:
bc:24:c8:7b:20:1c:cc:22:10:be:4d:19:59:ea:fe:
7e:8a:12:7f:e8:d5:53:15:05:03:4b:87:28:8a:41:
03:40:1d:dc:5c:00:4e:b3:99:2b:69:9a:88:0b:c6:
c7:ad:d0:bc:eb:10:9c:ae:da:02:87:5b:ba:a3:fb:
ed:ad:61:22:f6:96:77:51:a4:cd:3d:54:17:36:c6:
a2:f5:31:87:8a:bb:a3:f8:d9:55:87:53:01:ce:b2:
9a:f5:d6:98:fd:3a:5a:02:f7:0b:b0:e2:89:ba:d3:
fb:94:bf:c8:67:9a:7a:5b:37:15:bd:57:72:da:79:
ad:ad:7d:42:cf:80:51:7d:c5:92:95:d8:7a:0b:20:
6a:c0:c9:16:6f:d1:f7:e4:c4:15:ef:86:27:06:af:
ac:db:26:2b:d6:5c:68:b3:8b:ba:73:67:ef:8d:f7:
33:13:45:06:4a:1d:7c:96:9e:f9:9a:a8:94:50:f5:
da:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:B2:92:B5:FF:1D:8D:2C:42:3B:1B:5B:81:B5:43:86:11:81:9A:C2
X509v3 Authority Key Identifier:
keyid:38:24:AC:5E:E0:04:39:EE:DA:21:A1:A1:01:09:E8:BF:76:E4:FA:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OCSsXuAEOe7aIaGhAQnov3bk-rg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/5006E70E5E3611F0893678E9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.1.56.0/21
Signature Algorithm: sha256WithRSAEncryption
92:35:8d:54:b9:bc:9a:cf:cf:f4:c3:c1:f8:b4:b7:87:c7:11:
dc:cb:6d:1a:8b:a3:cf:51:e3:07:40:86:c9:45:96:10:3d:56:
32:ee:25:17:6e:34:f5:f5:73:ee:57:28:b6:de:f5:b3:dd:35:
fc:8a:47:bb:44:1d:34:0c:2d:96:98:5b:ed:d2:3f:3d:06:8c:
b4:6e:35:ba:f6:9d:5e:b5:d7:6c:ca:8a:52:a0:3b:58:4f:58:
b0:c1:21:fb:71:1a:aa:f0:39:16:ef:52:99:56:6e:25:fe:4c:
4e:8c:c1:e6:20:5c:84:9c:e8:e6:19:a4:0a:65:23:d8:e0:fb:
57:a1:33:28:1a:62:f2:c3:d9:52:67:92:9d:46:94:d3:6f:95:
25:70:0b:34:99:00:6e:b8:d4:c2:37:a3:d8:e0:c3:30:03:b3:
a4:22:23:50:bb:62:1b:cb:1d:c7:46:9a:71:3b:7f:b5:3b:86:
bc:a6:bd:e7:92:85:7f:0b:14:53:a0:f1:2f:d4:a7:0e:a4:69:
c0:4c:aa:e4:11:14:b5:bc:49:21:28:17:f0:8e:37:f9:88:1f:
81:ba:ed:ca:d7:8e:5f:a2:95:8f:07:08:3d:b3:5d:c9:1a:5b:
0f:e7:f4:c2:da:d7:4a:fd:1d:f5:53:48:c6:a5:2e:e6:0b:0b:
bc:61:8b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 1 18:12:47 2025 by rpki-client