Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3622A10/579D221A5BA011EF88EE516F762E951A/96765F423C6E11F09155EFCBDAE4EC9C.roa
File: 96765F423C6E11F09155EFCBDAE4EC9C.roa (raw, json)
Hash identifier: hFFmGegVcY7FYj6sGdd1sbP6AWog8WEhJh7P4bF8xW8=
Subject key identifier: 46:42:7C:40:0A:25:DF:F7:3D:5B:5B:37:2B:19:4E:CB:48:FA:9E:FB
Certificate issuer: /CN=F3622A10AF/serialNumber=889F941A220A4E4FB090B44C2318FB538DD7B746
Certificate serial: 012A
Authority key identifier: 88:9F:94:1A:22:0A:4E:4F:B0:90:B4:4C:23:18:FB:53:8D:D7:B7:46
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/iJ-UGiIKTk-wkLRMIxj7U43Xt0Y.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3622A10/579D221A5BA011EF88EE516F762E951A/96765F423C6E11F09155EFCBDAE4EC9C.roa
Signing time: Thu 29 May 2025 09:23:32 +0000
ROA not before: Thu 29 May 2025 09:23:27 +0000
ROA not after: Mon 31 May 2027 09:23:27 +0000
asID: 329474
IP address blocks: 102.208.36.0/22 maxlen: 24
2c0f:41c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3622A10/579D221A5BA011EF88EE516F762E951A/iJ-UGiIKTk-wkLRMIxj7U43Xt0Y.crl
rsync://rpki.afrinic.net/repository/member_repository/F3622A10/579D221A5BA011EF88EE516F762E951A/iJ-UGiIKTk-wkLRMIxj7U43Xt0Y.mft
rsync://rpki.afrinic.net/repository/afrinic/iJ-UGiIKTk-wkLRMIxj7U43Xt0Y.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 07 Jun 2025 04:47:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 298 (0x12a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3622A10AF, serialNumber=889F941A220A4E4FB090B44C2318FB538DD7B746
Validity
Not Before: May 29 09:23:27 2025 GMT
Not After : May 31 09:23:27 2027 GMT
Subject: CN=68382794-48e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a8:ff:65:4b:27:fd:12:47:19:30:1c:37:5c:
4c:58:1c:89:e8:22:95:09:c6:b4:be:97:db:ba:6d:
ec:60:5e:8f:ff:a8:22:ce:fe:4a:02:c2:31:29:26:
18:ee:b3:4d:78:d0:70:06:be:2f:96:63:77:1d:c1:
f9:e3:24:a8:7a:95:10:e9:c0:86:8f:27:ff:79:73:
8c:3b:91:fa:32:95:65:12:31:54:7c:b3:c4:a2:85:
3c:21:df:0b:fa:78:f7:f6:07:4e:12:7b:03:3a:3e:
42:a3:68:5d:50:6d:5c:55:6c:3e:a6:58:a2:dc:84:
b3:37:1e:e8:fa:a2:8d:79:15:e4:fc:30:51:db:1d:
e6:f6:ab:b1:5e:2a:82:45:47:d7:eb:88:eb:93:67:
f6:5d:29:bf:11:12:da:c5:38:ae:bf:a3:3f:b8:00:
69:ce:a0:11:3c:0a:36:e7:c5:71:e0:d2:23:c6:04:
e9:5c:c7:51:d4:ff:26:08:7f:b3:08:e5:fa:8e:6e:
83:2a:e8:0c:ee:05:ae:32:c0:db:bf:52:3a:a9:33:
2a:cf:10:f3:04:40:66:7e:a6:37:c6:d1:95:40:73:
bd:4d:99:ff:bd:22:81:4c:e3:ac:f5:01:06:4c:1b:
74:f1:7c:94:ef:45:0c:cd:12:ad:0e:0d:74:b5:b0:
42:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:42:7C:40:0A:25:DF:F7:3D:5B:5B:37:2B:19:4E:CB:48:FA:9E:FB
X509v3 Authority Key Identifier:
keyid:88:9F:94:1A:22:0A:4E:4F:B0:90:B4:4C:23:18:FB:53:8D:D7:B7:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3622A10/579D221A5BA011EF88EE516F762E951A/iJ-UGiIKTk-wkLRMIxj7U43Xt0Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/iJ-UGiIKTk-wkLRMIxj7U43Xt0Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3622A10/579D221A5BA011EF88EE516F762E951A/96765F423C6E11F09155EFCBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.208.36.0/22
IPv6:
2c0f:41c0::/32
Signature Algorithm: sha256WithRSAEncryption
b6:27:11:da:2b:46:78:6c:d8:e5:c5:21:7f:0f:84:fe:7d:f3:
81:84:f3:52:d2:5f:2b:29:4e:59:52:5f:b2:47:61:3d:7e:4c:
25:a5:cd:86:88:43:d1:af:f3:ca:67:68:a4:f8:09:4c:30:d7:
f8:cf:f1:05:27:21:2a:3e:23:c3:8a:b3:9a:22:62:3f:d1:ab:
24:03:fa:92:e9:ca:4a:19:85:ea:a8:74:ac:75:9f:07:88:b1:
ff:c8:3e:66:05:4d:03:3f:9e:28:da:f3:57:1f:52:7f:53:d1:
83:bd:e8:85:1a:28:d1:6c:b1:8d:7d:d2:4c:8c:24:3e:69:76:
ab:4f:05:a3:bf:31:44:39:2f:bb:34:3f:fb:a3:71:68:f4:92:
b0:ef:eb:98:54:75:08:c1:fb:47:29:77:4e:6f:2c:f2:af:a0:
3b:f4:d1:63:2f:70:7e:b3:ae:e9:82:6c:bb:07:61:7b:35:5a:
d0:01:db:0f:71:0f:ce:93:cb:83:cd:89:4a:ac:53:35:77:4c:
63:b1:72:c1:8f:6e:be:a2:03:64:c6:6d:d7:32:e3:ac:3b:5e:
62:20:5e:3d:5c:d2:35:cb:02:5b:c4:37:b8:d7:ba:6c:b4:1c:
7c:e6:6b:5b:a5:98:aa:ea:e9:82:8f:8e:6c:45:f0:d4:0c:f2:
6c:6e:35:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 05:30:38 2025 by rpki-client