
Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369F058/8B32E79A553911E9A572702FF8AEA228/04605838361A11F0B9F961F3DAE4EC9C.roa
File: 04605838361A11F0B9F961F3DAE4EC9C.roa (raw, json)
Hash identifier: r+y3Fw+81AAFIoIiHOQuOaDuH+WDZZZ3ri/u6RsXKpg=
Subject key identifier: BB:5A:C2:2A:1E:F7:7B:3F:37:BA:01:93:08:F4:6F:E6:5A:94:1B:D6
Certificate issuer: /CN=F369F058AF/serialNumber=C92E885827C67619E13175703017C4442DDFEACF
Certificate serial: 090B
Authority key identifier: C9:2E:88:58:27:C6:76:19:E1:31:75:70:30:17:C4:44:2D:DF:EA:CF
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/yS6IWCfGdhnhMXVwMBfERC3f6s8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369F058/8B32E79A553911E9A572702FF8AEA228/04605838361A11F0B9F961F3DAE4EC9C.roa
Signing time: Wed 21 May 2025 08:03:02 +0000
ROA not before: Wed 21 May 2025 08:02:57 +0000
ROA not after: Mon 21 May 2035 08:02:57 +0000
asID: 328114
IP address blocks: 102.207.196.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369F058/8B32E79A553911E9A572702FF8AEA228/yS6IWCfGdhnhMXVwMBfERC3f6s8.crl
rsync://rpki.afrinic.net/repository/member_repository/F369F058/8B32E79A553911E9A572702FF8AEA228/yS6IWCfGdhnhMXVwMBfERC3f6s8.mft
rsync://rpki.afrinic.net/repository/afrinic/yS6IWCfGdhnhMXVwMBfERC3f6s8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 08 Jun 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2315 (0x90b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369F058AF, serialNumber=C92E885827C67619E13175703017C4442DDFEACF
Validity
Not Before: May 21 08:02:57 2025 GMT
Not After : May 21 08:02:57 2035 GMT
Subject: CN=682d88b6-97cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4d:fd:09:af:02:79:d9:a4:b2:ff:1f:c2:68:
f0:23:8b:e1:82:c1:2c:fc:9a:c8:f3:2c:93:61:2d:
13:1d:5f:b2:d8:60:80:f3:2e:da:74:0b:3b:b3:1f:
51:30:cc:a9:3c:08:06:b2:e0:59:2d:f3:42:e2:03:
78:d2:fd:b3:fd:e1:56:f8:b2:df:33:a1:0b:37:5a:
9f:36:2b:5b:ae:c2:a1:ff:cf:f3:3c:c9:24:23:05:
9a:da:0c:9b:74:c0:6f:1c:b9:a4:a0:07:5b:0e:1c:
4d:df:91:cd:ae:8e:c9:87:bf:19:e2:e6:ec:64:9a:
60:78:a1:f0:ff:bf:99:e4:04:46:19:73:13:27:4a:
b5:a1:55:1a:91:26:87:01:28:9f:57:af:4d:33:bd:
60:d8:a3:8c:3f:62:78:21:4d:4c:b1:c4:a7:f6:87:
34:e6:cf:8b:06:70:11:e5:00:72:1b:57:7a:0e:14:
c9:b9:c4:36:06:3d:18:ba:78:3b:cd:12:a6:c9:2b:
79:9b:d1:76:60:a2:57:bd:a1:fe:7d:67:48:62:72:
ad:08:ac:7f:ea:76:80:ab:bd:7e:4b:2a:48:71:e3:
98:ca:82:8c:95:32:a2:28:dd:65:c4:f0:61:94:d5:
27:44:5d:6d:25:ce:04:b4:ff:12:0c:9d:cd:37:ee:
d1:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:5A:C2:2A:1E:F7:7B:3F:37:BA:01:93:08:F4:6F:E6:5A:94:1B:D6
X509v3 Authority Key Identifier:
keyid:C9:2E:88:58:27:C6:76:19:E1:31:75:70:30:17:C4:44:2D:DF:EA:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369F058/8B32E79A553911E9A572702FF8AEA228/yS6IWCfGdhnhMXVwMBfERC3f6s8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yS6IWCfGdhnhMXVwMBfERC3f6s8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369F058/8B32E79A553911E9A572702FF8AEA228/04605838361A11F0B9F961F3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.207.196.0/22
Signature Algorithm: sha256WithRSAEncryption
b2:a5:e8:ba:37:e6:79:66:9b:61:af:bb:f4:b6:85:32:4d:93:
0c:7d:4c:b8:f0:b1:2c:27:b1:3c:6e:d7:e7:d2:67:55:ae:76:
54:2a:83:86:18:9e:3f:2f:67:67:a4:aa:f1:4d:21:ed:8d:2c:
8b:23:fb:4a:bb:50:f6:0e:26:4e:4e:7b:25:43:ff:35:4d:27:
46:cf:60:0c:31:1e:38:cc:d8:9d:f7:14:2e:24:bd:ff:c3:4c:
dc:f6:dd:29:1a:d2:46:91:95:85:fa:75:1f:34:f6:4a:f3:50:
a0:14:04:50:9d:f8:f3:75:45:1f:3a:0b:06:47:03:ef:f7:49:
22:dc:f6:35:4e:89:4a:1e:f3:21:e9:94:a6:7b:2c:d1:51:06:
30:ae:9e:b9:2d:c6:b2:14:d1:80:9a:29:c1:d9:fa:68:65:55:
68:61:a3:da:e0:41:1e:f8:67:e4:18:12:00:fe:b2:7b:a8:5b:
2c:40:64:52:55:f5:1a:43:c1:18:6b:cc:ee:e3:32:10:0e:4d:
43:5c:4a:f5:56:ac:31:1e:46:29:b2:6f:7c:1d:8a:f7:bc:20:
ab:92:37:c9:62:b7:dc:95:14:80:cb:c0:74:e9:0b:df:1a:a4:
39:26:8b:e1:6d:aa:69:4b:d6:61:1e:64:d6:77:9f:8e:a8:40:
ec:66:07:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:40:51 2025 by rpki-client