Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/3F10B7A03CAC11F088C969D5DAE4EC9C.roa
File: 3F10B7A03CAC11F088C969D5DAE4EC9C.roa (raw, json)
Hash identifier: Sjpk4ysp1mNszx84MrVYy/vBQoLw8u4fp7N7mgOTEIQ=
Subject key identifier: 05:88:C3:86:63:51:99:AC:DE:04:28:82:1B:C2:38:D9:80:55:A8:72
Certificate issuer: /CN=F367CD72AF/serialNumber=7708E66F1C07C1D7670AEBDBAE186DA42BCB30C7
Certificate serial: E4
Authority key identifier: 77:08:E6:6F:1C:07:C1:D7:67:0A:EB:DB:AE:18:6D:A4:2B:CB:30:C7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/dwjmbxwHwddnCuvbrhhtpCvLMMc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/3F10B7A03CAC11F088C969D5DAE4EC9C.roa
Signing time: Thu 29 May 2025 16:44:54 +0000
ROA not before: Thu 29 May 2025 16:44:50 +0000
ROA not after: Wed 31 Dec 2031 16:44:50 +0000
asID: 30985
IP address blocks: 2001:42c0::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/dwjmbxwHwddnCuvbrhhtpCvLMMc.crl
rsync://rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/dwjmbxwHwddnCuvbrhhtpCvLMMc.mft
rsync://rpki.afrinic.net/repository/afrinic/dwjmbxwHwddnCuvbrhhtpCvLMMc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 08 Jun 2025 05:07:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 228 (0xe4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367CD72AF, serialNumber=7708E66F1C07C1D7670AEBDBAE186DA42BCB30C7
Validity
Not Before: May 29 16:44:50 2025 GMT
Not After : Dec 31 16:44:50 2031 GMT
Subject: CN=68388f06-3220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:03:1a:18:5c:76:72:d1:c5:15:0e:76:2e:cb:
61:b7:e4:89:87:2c:13:f0:6c:44:ad:c8:55:93:8d:
1d:b3:37:6f:e0:4d:3e:c2:53:76:cf:5b:77:5a:f3:
3f:1f:55:64:0d:31:c7:c5:8e:a1:c9:d6:3c:5d:14:
93:79:eb:99:3d:f8:29:75:a1:a3:d9:18:3a:2b:57:
f7:d3:4a:5e:65:dd:ab:bc:d6:bf:0f:8b:4c:df:1f:
d5:40:e4:b0:28:e2:3e:46:4b:9b:0e:1e:a8:73:ab:
62:ac:87:fa:18:78:4a:a4:83:c5:ad:8f:cc:31:4c:
70:4d:b8:ba:0f:e7:4d:ae:25:fa:1e:15:8f:39:95:
40:f2:86:a2:34:91:35:6e:33:50:4d:c1:fa:fc:3d:
85:64:7d:93:c1:8b:e5:bd:fb:07:a3:39:fb:83:46:
0b:18:50:ee:60:d5:4b:7b:1a:40:b8:b0:36:e2:51:
4f:2c:e6:fa:bf:51:f5:77:fd:00:33:93:cc:db:0f:
f3:c6:e8:f0:c2:35:c2:b1:05:df:eb:95:2d:6b:b0:
78:64:65:08:90:86:5e:39:77:63:d6:bc:01:d8:ac:
40:e1:9c:95:e1:1f:db:4e:fa:d5:d3:c3:2f:b0:37:
9e:31:5b:26:36:34:67:16:38:19:31:ad:f7:30:16:
b0:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:88:C3:86:63:51:99:AC:DE:04:28:82:1B:C2:38:D9:80:55:A8:72
X509v3 Authority Key Identifier:
keyid:77:08:E6:6F:1C:07:C1:D7:67:0A:EB:DB:AE:18:6D:A4:2B:CB:30:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/dwjmbxwHwddnCuvbrhhtpCvLMMc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/dwjmbxwHwddnCuvbrhhtpCvLMMc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/3F10B7A03CAC11F088C969D5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:42c0::/32
Signature Algorithm: sha256WithRSAEncryption
0f:5e:31:21:2c:54:ef:37:c5:16:fb:79:8e:30:a6:0b:8d:65:
71:2f:ee:9c:b0:be:82:00:37:81:c3:12:55:38:20:20:9b:1e:
5f:21:5c:a0:7a:43:d7:76:6e:a0:b4:31:ec:77:0b:ca:de:4f:
cb:72:91:ed:03:10:67:dd:ea:ca:9b:be:21:a8:bd:12:b7:87:
a6:a4:0b:db:fe:f8:97:9e:6e:24:d0:64:52:27:b9:25:aa:d0:
4e:71:28:c4:ee:69:50:c3:67:ef:e7:aa:01:a1:c9:41:ae:39:
56:4c:64:6e:ee:b3:be:79:1a:47:f0:90:bc:be:67:17:4e:d1:
d4:04:07:dd:e1:26:25:d7:df:ff:e1:2f:d2:6d:11:dd:c5:c8:
bb:e4:b4:8f:5b:0c:62:2c:b8:c6:5b:49:1d:8f:21:c5:9a:fa:
4e:b0:6c:e4:62:f1:f8:e7:df:4f:44:18:f5:7b:45:ac:fa:fc:
59:22:ed:47:d4:49:d7:4a:fa:4b:c8:40:93:c0:a6:af:4d:51:
f3:bd:56:79:a4:7f:27:ab:b1:46:ac:b4:3c:f2:7a:06:5e:4f:
4d:a7:8f:e1:87:27:af:e0:e7:6a:d8:2d:f5:72:4d:9d:c1:8e:
cb:24:e7:3c:7d:3b:be:46:18:89:72:e1:d6:0f:d8:b7:49:b6:
62:7b:15:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:09:10 2025 by rpki-client