Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/5BFD5FF2628C11F08702BDA9DAE4EC9C.roa
File: 5BFD5FF2628C11F08702BDA9DAE4EC9C.roa (raw, json)
Hash identifier: 3qER9AVYL3rqbEnQkEA/pNLjhLYQCepw4beWhWdIRqw=
Subject key identifier: 90:83:28:9D:51:20:AB:9C:A6:89:27:5D:23:FD:A1:83:B1:E7:79:A5
Certificate issuer: /CN=F369591CAF/serialNumber=C1090D37DA9FFEEE1A9C229BAFF1190BD22E8934
Certificate serial: 03B6
Authority key identifier: C1:09:0D:37:DA:9F:FE:EE:1A:9C:22:9B:AF:F1:19:0B:D2:2E:89:34
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/5BFD5FF2628C11F08702BDA9DAE4EC9C.roa
Signing time: Wed 16 Jul 2025 21:32:23 +0000
ROA not before: Wed 16 Jul 2025 21:32:17 +0000
ROA not after: Tue 31 Dec 2030 21:32:17 +0000
asID: 15964
IP address blocks: 41.204.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.mft
rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Jul 2025 00:06:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 950 (0x3b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369591CAF, serialNumber=C1090D37DA9FFEEE1A9C229BAFF1190BD22E8934
Validity
Not Before: Jul 16 21:32:17 2025 GMT
Not After : Dec 31 21:32:17 2030 GMT
Subject: CN=68781a67-6f46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:17:ed:36:d4:48:79:bf:70:53:65:ad:e3:4d:
fd:a2:f1:c1:f7:ed:c9:50:d4:ad:a4:b3:14:5b:d8:
8d:b5:14:c1:10:48:1e:82:63:bd:4b:4f:ad:06:c2:
cd:f5:48:82:90:15:e3:0c:c5:c8:77:c8:73:ad:db:
73:ae:29:fc:bb:82:2d:82:6a:4f:07:3f:e6:c3:32:
f2:5c:c3:9f:30:ef:0f:ec:4c:e9:e7:98:7f:ba:09:
21:19:2e:ce:34:f3:90:c9:aa:71:31:9f:d2:c9:9c:
37:22:45:6b:a1:48:34:d7:c9:23:eb:29:23:e6:da:
07:35:c4:fe:c5:fd:1b:ff:b3:3c:d6:5b:54:32:10:
57:22:d0:a9:46:5b:b8:9c:49:bd:81:13:1f:99:13:
ca:b3:92:92:c6:8a:85:f1:58:a0:a3:db:c1:71:7f:
4d:b3:65:64:bf:36:d6:f1:76:3f:d6:42:df:93:fb:
eb:88:ca:4b:c4:54:b4:d0:a3:13:6c:f5:08:1b:dc:
14:a8:0d:ca:05:40:9f:48:c1:ac:9d:a2:1c:8d:82:
3c:b2:6a:91:23:a2:2a:a2:61:58:50:99:7c:09:5f:
52:da:f6:56:03:66:13:5f:6f:6a:e5:70:79:69:17:
62:08:28:a7:78:fc:41:71:13:4e:ed:e9:6f:21:f7:
fc:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:83:28:9D:51:20:AB:9C:A6:89:27:5D:23:FD:A1:83:B1:E7:79:A5
X509v3 Authority Key Identifier:
keyid:C1:09:0D:37:DA:9F:FE:EE:1A:9C:22:9B:AF:F1:19:0B:D2:2E:89:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/5BFD5FF2628C11F08702BDA9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.204.87.0/24
Signature Algorithm: sha256WithRSAEncryption
68:35:80:32:1e:29:e4:a7:11:04:17:03:7a:ba:a4:9e:b1:37:
4e:b5:d3:1e:00:62:ec:87:af:b5:56:ff:ad:0e:83:1e:93:3d:
f0:ca:2d:2a:c0:14:22:8c:34:81:d5:a1:22:05:4b:ae:8e:94:
1b:c6:e2:3d:61:99:3d:33:70:5e:7d:73:00:d7:b8:e8:90:99:
3f:a5:2f:4e:f2:73:dd:3a:5f:45:51:c1:e9:b2:0e:7b:cc:4e:
c6:52:a3:e9:15:b2:b0:2e:fb:0a:d3:f3:eb:ac:a4:a8:c3:84:
26:71:a8:56:53:42:e3:f9:fb:87:59:e4:c5:b1:2a:07:39:12:
2a:df:2e:ad:c8:62:d3:f1:ae:a3:df:7e:96:55:2e:22:92:11:
30:08:60:e9:51:81:1c:89:08:85:6d:b2:19:9d:45:a0:24:99:
7c:af:b4:00:37:a2:7c:15:da:f9:8f:b4:cf:81:b8:3d:35:94:
ae:20:1b:2f:97:f5:85:f7:c8:3c:9a:87:45:46:a4:33:35:a9:
3b:a5:02:c7:76:c1:4f:fd:9e:ac:e7:d4:65:b8:6c:e2:bb:4d:
2a:45:86:f5:ee:1c:be:13:82:c0:5c:f3:49:aa:3c:cf:66:10:
5d:5c:a3:e1:90:7c:69:57:6c:1c:89:59:76:69:e2:9e:d9:99:
07:56:5e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:52:44 2025 by rpki-client