Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36364C2/643B7A54B58411ECB7CFC7755A40D577/0285F4C0379E11F0A3CC6178DAE4EC9C.roa
File: 0285F4C0379E11F0A3CC6178DAE4EC9C.roa (raw, json)
Hash identifier: Ed7bn6rVqrOHanN8PnTdQBj8ZHi4l6dmkBiC3AzPA10=
Subject key identifier: 07:C7:9C:27:38:B3:F5:20:AF:C8:81:5D:D2:7E:CC:FE:CB:DB:4F:AC
Certificate issuer: /CN=F36364C2AF/serialNumber=5EE80C7E888C71B3102418780BD6E10A52D17088
Certificate serial: 04AC
Authority key identifier: 5E:E8:0C:7E:88:8C:71:B3:10:24:18:78:0B:D6:E1:0A:52:D1:70:88
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/XugMfoiMcbMQJBh4C9bhClLRcIg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36364C2/643B7A54B58411ECB7CFC7755A40D577/0285F4C0379E11F0A3CC6178DAE4EC9C.roa
Signing time: Fri 23 May 2025 06:20:24 +0000
ROA not before: Fri 23 May 2025 06:20:18 +0000
ROA not after: Wed 23 May 2035 06:20:18 +0000
asID: 328974
IP address blocks: 102.206.84.0/22 maxlen: 24
102.217.228.0/22 maxlen: 24
2c0f:5f00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36364C2/643B7A54B58411ECB7CFC7755A40D577/XugMfoiMcbMQJBh4C9bhClLRcIg.crl
rsync://rpki.afrinic.net/repository/member_repository/F36364C2/643B7A54B58411ECB7CFC7755A40D577/XugMfoiMcbMQJBh4C9bhClLRcIg.mft
rsync://rpki.afrinic.net/repository/afrinic/XugMfoiMcbMQJBh4C9bhClLRcIg.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 10 Jun 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1196 (0x4ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36364C2AF, serialNumber=5EE80C7E888C71B3102418780BD6E10A52D17088
Validity
Not Before: May 23 06:20:18 2025 GMT
Not After : May 23 06:20:18 2035 GMT
Subject: CN=683013a8-7fb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:60:43:2d:f6:6f:96:7b:98:da:49:bc:d6:64:
da:28:07:af:4d:f3:65:d7:e9:1c:9d:ba:02:28:1f:
69:0d:24:82:ba:39:b5:e1:3b:2a:8b:d3:1c:37:75:
6c:84:09:57:0a:3e:aa:0a:a0:48:32:51:56:08:3e:
86:4c:01:8d:f5:c1:68:e5:80:75:03:94:b4:b8:60:
4d:f8:4a:ba:68:2b:98:8f:76:e6:12:2e:b0:15:9a:
75:e9:ac:2c:c8:fa:f8:fd:f4:60:75:29:b5:01:a5:
16:a9:0f:00:fd:93:2f:6c:89:9b:f1:7b:38:7e:f4:
c4:7c:09:0c:26:11:94:5c:3c:b1:09:40:d1:04:fd:
b6:77:ab:ea:72:8a:40:6c:c9:cd:fa:ce:bd:ab:bf:
31:b1:bd:69:06:dc:2f:07:56:97:1e:03:eb:05:d2:
cd:e3:46:dc:b6:ec:34:e8:e8:74:53:2f:4c:19:e8:
b0:31:08:9b:30:eb:d8:e6:4f:d9:ba:1f:76:2b:a4:
1d:be:00:8c:35:8d:09:7b:84:03:ad:a3:10:35:b2:
da:91:9a:fb:76:88:59:b5:8a:63:44:b9:3a:bd:11:
e1:0a:ee:7e:54:ab:78:15:af:25:80:85:94:ba:9a:
23:56:81:d4:c0:e0:2a:e4:d5:14:ce:c2:f2:71:36:
16:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:C7:9C:27:38:B3:F5:20:AF:C8:81:5D:D2:7E:CC:FE:CB:DB:4F:AC
X509v3 Authority Key Identifier:
keyid:5E:E8:0C:7E:88:8C:71:B3:10:24:18:78:0B:D6:E1:0A:52:D1:70:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36364C2/643B7A54B58411ECB7CFC7755A40D577/XugMfoiMcbMQJBh4C9bhClLRcIg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XugMfoiMcbMQJBh4C9bhClLRcIg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36364C2/643B7A54B58411ECB7CFC7755A40D577/0285F4C0379E11F0A3CC6178DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.206.84.0/22
102.217.228.0/22
IPv6:
2c0f:5f00::/32
Signature Algorithm: sha256WithRSAEncryption
78:24:7f:3f:a3:3f:d2:a4:63:2d:c5:e6:c2:12:3c:3b:50:77:
a8:f7:c1:a4:e7:43:53:14:04:d9:15:1d:32:c2:7a:c3:af:f3:
5c:e2:4c:7f:7f:5f:61:90:09:d9:be:67:6e:f3:90:ab:31:2f:
1f:61:e6:0e:7a:03:d0:25:c2:85:b7:03:d8:b6:1f:81:62:ca:
11:6a:4b:1e:f6:f6:d3:ad:07:22:41:6a:15:17:bb:b7:92:86:
db:c8:02:6e:f7:87:da:10:b0:e2:b0:69:f2:f1:fc:a0:33:ec:
6f:e3:45:00:9b:95:c1:e9:0b:65:87:35:2a:d3:c3:75:99:c9:
9e:d7:b9:40:d3:f9:da:8f:92:ea:f5:97:88:ec:e2:66:17:0e:
b1:88:03:8b:17:5f:66:83:81:aa:d9:93:cb:49:62:f8:9e:ea:
c4:2a:cc:f9:21:be:21:a8:ee:e7:18:0c:50:b7:a2:b4:7d:c8:
0e:f3:e4:24:a0:a9:5c:92:eb:c9:54:25:9e:09:0e:7f:7d:d9:
eb:26:f5:ef:64:8d:24:51:02:13:06:69:0e:2e:3f:1c:07:c1:
74:28:ce:14:34:e7:ed:a9:c8:8f:8e:be:89:bb:fd:38:cb:60:
57:aa:62:76:40:6a:15:fe:69:4e:32:bf:b4:3c:23:b2:08:a1:
38:e3:70:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:52:00 2025 by rpki-client