Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/9EC7E0FC664011F099D444DEDAE4EC9C.roa
File: 9EC7E0FC664011F099D444DEDAE4EC9C.roa (raw, json)
Hash identifier: T6NsArflMlR27ihl+RWlr6t/CZ4ImER2FSyy6Y2HGzo=
Subject key identifier: EC:F2:0B:FD:B9:89:92:F9:82:C1:24:C3:E5:48:0B:27:42:7D:68:5E
Certificate issuer: /CN=F369591CAF/serialNumber=C1090D37DA9FFEEE1A9C229BAFF1190BD22E8934
Certificate serial: 03BD
Authority key identifier: C1:09:0D:37:DA:9F:FE:EE:1A:9C:22:9B:AF:F1:19:0B:D2:2E:89:34
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/9EC7E0FC664011F099D444DEDAE4EC9C.roa
Signing time: Mon 21 Jul 2025 14:40:18 +0000
ROA not before: Mon 21 Jul 2025 14:40:13 +0000
ROA not after: Tue 31 Dec 2030 14:40:13 +0000
asID: 15964
IP address blocks: 41.204.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.mft
rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Jul 2025 00:06:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 957 (0x3bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369591CAF, serialNumber=C1090D37DA9FFEEE1A9C229BAFF1190BD22E8934
Validity
Not Before: Jul 21 14:40:13 2025 GMT
Not After : Dec 31 14:40:13 2030 GMT
Subject: CN=687e5152-af0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:45:e4:ab:54:55:67:a8:19:1c:71:a7:d2:f9:
6b:90:8e:eb:cc:5f:9b:4f:11:8e:94:41:ea:78:4c:
f4:b3:a9:8d:08:07:e1:72:63:20:93:f1:ac:f6:1d:
9e:a0:5a:e3:55:1e:ca:05:bb:5f:0c:e7:4a:0b:d3:
2b:2f:68:33:4f:aa:d5:a8:18:9a:2f:7f:bb:e5:f8:
b3:a6:97:30:57:19:62:55:2c:6a:78:04:a4:eb:35:
40:c8:0d:97:75:18:3a:41:6f:62:4d:e0:12:ef:ef:
a9:9d:d6:7e:d2:71:7f:d9:1f:7a:ad:81:7f:46:3f:
f6:55:79:17:9e:79:d4:b7:f9:73:36:61:25:fe:95:
3c:c1:5a:72:b1:86:f7:f8:1a:86:2d:3f:ed:47:df:
d0:a1:ff:2e:17:7f:4b:83:18:bb:fb:46:98:31:d5:
0a:35:f6:6b:a6:42:b8:15:e5:76:12:14:fa:1a:1a:
03:c8:9f:7f:da:8b:71:9a:b7:ae:b0:70:92:0a:f6:
15:eb:52:d3:55:08:6b:89:22:77:b1:c9:26:cc:2a:
cb:17:e9:97:18:21:7f:24:13:9d:8c:61:03:9f:1b:
ee:e7:09:6f:e6:19:3d:53:3d:cb:49:28:00:e6:cb:
c8:a9:7a:8e:bb:bb:06:b1:73:82:89:ad:d8:61:e8:
61:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:F2:0B:FD:B9:89:92:F9:82:C1:24:C3:E5:48:0B:27:42:7D:68:5E
X509v3 Authority Key Identifier:
keyid:C1:09:0D:37:DA:9F:FE:EE:1A:9C:22:9B:AF:F1:19:0B:D2:2E:89:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/9EC7E0FC664011F099D444DEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.204.92.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:27:18:33:ae:aa:bc:8d:30:eb:36:34:42:b7:f0:80:7b:56:
fe:50:21:39:c1:2e:b2:50:ce:23:2b:3f:2e:c3:28:f8:4c:1f:
9f:12:43:ec:5b:a0:9a:9f:fe:1d:ab:cb:d7:0d:62:22:39:b2:
65:2b:32:04:3d:82:c5:a0:b4:82:50:e3:95:b6:65:c7:c9:07:
32:b8:f1:db:5a:8a:a7:99:1e:5e:b2:f3:f8:56:19:5c:2f:a7:
6d:03:ab:b9:82:85:8a:77:be:b6:85:16:a4:05:73:fb:8f:3b:
62:36:41:86:68:c3:00:2d:e3:dc:14:38:74:a8:25:da:c7:aa:
6e:82:3b:78:ca:b6:73:3d:e2:b2:ba:f3:7f:8c:14:3b:a4:f3:
d4:ca:19:0b:cd:47:58:50:2c:68:a0:76:69:7d:21:1f:2e:85:
f3:22:51:42:29:ed:e1:d7:06:4f:6a:a9:54:9f:f8:45:7e:e3:
52:37:a7:63:41:be:5d:8b:83:2c:ca:7a:ea:bc:1f:ba:20:a7:
89:7d:14:80:5e:6d:04:78:fb:f0:45:20:12:68:e3:be:e4:cd:
61:e2:b6:8b:9e:8e:d5:f1:8c:6e:b6:2d:ae:f1:ff:9d:d9:53:
62:75:00:97:03:1e:08:f3:9f:36:ff:74:74:c0:07:d1:da:dc:
a6:bd:b6:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:53:59 2025 by rpki-client