Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/6535223A5B2A11F084BE7DCFDAE4EC9C.roa
File: 6535223A5B2A11F084BE7DCFDAE4EC9C.roa (raw, json)
Hash identifier: E6XUO21M1WiWOfXgXoIJnViWEjPsKZ84YPJ9VFWP2jo=
Subject key identifier: 43:73:29:AB:8E:35:17:22:A0:F1:2C:AC:E5:22:11:0A:EE:0B:C6:56
Certificate issuer: /CN=F369591CAF/serialNumber=C1090D37DA9FFEEE1A9C229BAFF1190BD22E8934
Certificate serial: 03A9
Authority key identifier: C1:09:0D:37:DA:9F:FE:EE:1A:9C:22:9B:AF:F1:19:0B:D2:2E:89:34
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/6535223A5B2A11F084BE7DCFDAE4EC9C.roa
Signing time: Mon 07 Jul 2025 12:03:30 +0000
ROA not before: Mon 07 Jul 2025 12:03:18 +0000
ROA not after: Tue 31 Dec 2030 12:03:18 +0000
asID: 15964
IP address blocks: 41.204.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.mft
rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Jul 2025 00:06:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 937 (0x3a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369591CAF, serialNumber=C1090D37DA9FFEEE1A9C229BAFF1190BD22E8934
Validity
Not Before: Jul 7 12:03:18 2025 GMT
Not After : Dec 31 12:03:18 2030 GMT
Subject: CN=686bb792-f606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:6f:9f:eb:3d:3a:dd:c8:67:ae:53:0b:d3:22:
d9:a4:b9:39:d4:fe:da:e1:cc:12:da:58:ed:aa:6b:
56:dd:ab:9f:c1:8b:84:61:42:ea:68:2c:ab:1f:2f:
54:45:a8:18:3a:0d:ee:9a:1f:01:c4:1b:77:eb:d8:
49:a4:60:08:f7:15:86:4b:9a:8d:d2:4c:3e:60:48:
e5:05:d7:79:49:8d:87:1d:1a:f6:3b:5d:1e:c0:b6:
96:f0:39:8a:5c:48:8c:df:c0:95:ea:58:bd:4a:11:
51:1d:4c:c2:36:72:cc:c8:25:ae:9d:28:c1:ee:ad:
5e:71:13:2a:94:2d:9f:da:dd:48:49:fe:2a:2e:8c:
f0:88:9c:a9:06:c3:d8:ca:8a:3b:fc:d1:2b:28:cf:
a8:c8:20:82:e1:9e:6d:a2:56:c5:9b:96:e4:55:25:
93:dd:b4:f8:35:89:71:17:83:d6:06:04:8d:c9:0e:
cc:da:00:4a:7a:2f:ff:d5:d6:ea:8d:56:19:85:47:
60:fb:53:95:03:90:0a:c1:16:c5:e6:ce:94:12:6f:
07:85:73:9e:65:3b:ed:cc:9a:a3:9b:e0:70:71:5c:
a8:ef:b0:2b:83:40:8b:43:8f:b2:76:72:85:fe:f6:
07:82:40:5a:26:49:b7:d7:f8:55:8c:bb:bf:d6:15:
d8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:73:29:AB:8E:35:17:22:A0:F1:2C:AC:E5:22:11:0A:EE:0B:C6:56
X509v3 Authority Key Identifier:
keyid:C1:09:0D:37:DA:9F:FE:EE:1A:9C:22:9B:AF:F1:19:0B:D2:2E:89:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/6535223A5B2A11F084BE7DCFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.204.79.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:3d:95:6d:d1:bf:ed:da:c5:e0:91:c4:0d:d2:f4:1c:aa:28:
f1:09:35:1a:9f:f6:8a:7f:68:c0:0d:f3:41:a7:bb:6b:7d:ff:
52:3d:d6:a2:79:e9:bf:39:86:fb:ee:42:b9:d3:ba:4a:8f:c2:
12:0f:05:6e:d7:2b:88:42:ed:8b:00:a6:0e:ae:37:f8:26:b0:
06:38:10:e2:bc:d5:f7:94:98:d5:71:2f:f6:ff:80:59:9d:98:
27:b2:8f:7c:77:c9:0b:a3:97:ce:34:f6:cf:8a:97:7f:fa:d8:
c2:ee:be:0d:83:aa:ad:e6:ea:ea:6f:14:14:7c:b6:2a:04:e2:
bf:00:58:cc:44:1a:b0:47:5d:d7:d4:d6:ed:eb:62:69:5e:3c:
20:34:38:24:d0:24:7a:a5:63:44:23:d3:b6:b4:1d:97:2f:16:
d8:26:33:dc:a7:42:6f:90:75:72:84:1e:4c:de:c2:d1:2e:6c:
0f:14:22:53:61:79:f5:0d:98:fe:b8:87:7b:ba:e1:c8:52:b1:
6e:26:ab:65:2f:dc:74:4e:4b:e7:0d:4b:8e:69:84:3b:d5:90:
91:cc:fe:5d:6d:98:ca:ed:f5:04:5c:39:35:23:c0:7d:9a:19:
44:52:46:44:79:ce:55:3d:85:8c:53:9a:8b:a0:d7:44:09:e7:
fa:38:4c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:59:07 2025 by rpki-client