Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DA693/0D2968C67D5F11E99565B87EF8AEA228/1963512C623911F09F861D97DAE4EC9C.roa
File: 1963512C623911F09F861D97DAE4EC9C.roa (raw, json)
Hash identifier: 4aZy3ZXYskyRarEP/OWaGENB6KUMQOh7UNemMxR0fpU=
Subject key identifier: CF:F7:F1:3C:C4:D2:45:D8:4E:E2:51:F3:2C:B8:40:09:1A:19:B2:0D
Certificate issuer: /CN=F36DA693AF/serialNumber=089012F969A6200C9399B093447AA4EA2CFCA81E
Certificate serial: 090B
Authority key identifier: 08:90:12:F9:69:A6:20:0C:93:99:B0:93:44:7A:A4:EA:2C:FC:A8:1E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CJAS-WmmIAyTmbCTRHqk6iz8qB4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DA693/0D2968C67D5F11E99565B87EF8AEA228/1963512C623911F09F861D97DAE4EC9C.roa
Signing time: Wed 16 Jul 2025 11:36:23 +0000
ROA not before: Wed 16 Jul 2025 11:36:18 +0000
ROA not after: Wed 31 Jul 2030 11:36:18 +0000
asID: 327794
IP address blocks: 102.22.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DA693/0D2968C67D5F11E99565B87EF8AEA228/CJAS-WmmIAyTmbCTRHqk6iz8qB4.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DA693/0D2968C67D5F11E99565B87EF8AEA228/CJAS-WmmIAyTmbCTRHqk6iz8qB4.mft
rsync://rpki.afrinic.net/repository/afrinic/CJAS-WmmIAyTmbCTRHqk6iz8qB4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 03 Aug 2025 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2315 (0x90b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DA693AF, serialNumber=089012F969A6200C9399B093447AA4EA2CFCA81E
Validity
Not Before: Jul 16 11:36:18 2025 GMT
Not After : Jul 31 11:36:18 2030 GMT
Subject: CN=68778eb7-32ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:06:c6:9a:42:f3:8b:15:aa:3c:b2:d7:29:81:
8d:29:7d:98:92:bc:ed:df:35:51:46:3e:2e:ee:30:
2b:6a:55:50:2d:3c:5e:b2:a1:e9:25:86:77:02:01:
e2:ea:1f:6a:de:9b:3b:84:19:b1:73:d0:bd:de:b1:
e7:cd:ab:cb:e9:19:9a:c6:55:ca:74:5c:0c:d0:89:
53:4c:fc:fc:6b:ea:2b:72:dc:c7:88:61:23:58:aa:
ed:e0:20:44:c6:9d:90:ff:db:bb:3d:69:c5:83:a8:
2c:26:5e:d4:20:3a:78:16:92:77:a4:62:63:ed:0d:
07:e9:be:2f:00:45:90:b6:22:4e:63:c3:f9:91:74:
f3:67:6e:c9:8f:56:df:06:9d:76:f2:38:8d:a1:3d:
03:f8:d1:c8:b1:87:29:2a:83:8e:ae:6c:fb:1f:07:
5d:d1:34:85:08:3f:38:ce:03:ad:72:a9:f8:e7:4b:
57:b7:ef:47:f2:63:0f:a6:51:d4:b0:2f:7d:56:89:
eb:e1:7c:3b:af:2d:89:ba:44:1d:83:1c:43:f2:1c:
2d:13:10:8e:46:a8:73:d8:ea:de:16:34:9d:a3:47:
25:00:40:07:08:4a:1f:f7:76:47:0b:5c:c7:3c:0b:
9e:aa:82:94:47:21:48:64:6c:be:18:5f:32:e9:75:
2c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:F7:F1:3C:C4:D2:45:D8:4E:E2:51:F3:2C:B8:40:09:1A:19:B2:0D
X509v3 Authority Key Identifier:
keyid:08:90:12:F9:69:A6:20:0C:93:99:B0:93:44:7A:A4:EA:2C:FC:A8:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA693/0D2968C67D5F11E99565B87EF8AEA228/CJAS-WmmIAyTmbCTRHqk6iz8qB4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CJAS-WmmIAyTmbCTRHqk6iz8qB4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA693/0D2968C67D5F11E99565B87EF8AEA228/1963512C623911F09F861D97DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.22.206.0/24
Signature Algorithm: sha256WithRSAEncryption
17:e5:56:88:0a:ba:a1:84:0d:b8:c3:c5:34:4f:83:91:c8:b6:
5a:50:0e:f6:c3:f1:78:67:72:17:a4:ec:53:ef:ce:6f:38:1e:
ee:4d:ca:50:52:0b:39:f1:58:72:c5:8a:7b:b0:71:8c:cc:0d:
39:4e:d7:08:79:60:39:ba:a9:27:99:f0:19:5c:dc:81:cb:da:
08:5d:4e:f7:79:7a:de:9e:9e:5b:dd:0f:b1:fa:63:51:42:6c:
3f:4e:5b:48:25:be:05:bc:a3:cb:2c:34:f5:2f:a0:d4:3b:60:
cc:c5:55:f0:de:5b:af:25:54:9a:60:f3:e0:41:4a:93:4d:fe:
3e:5b:73:eb:61:e7:cd:83:00:b7:74:50:db:3f:21:4b:52:0a:
af:74:01:17:9e:83:9c:95:42:42:04:47:91:15:27:0b:3e:f0:
7c:4f:00:3d:da:5f:fe:bc:f5:26:28:e3:6c:59:4f:08:d6:a6:
05:a6:c1:60:4b:60:65:27:e7:95:15:cc:79:e9:87:6f:a6:61:
28:8b:43:8b:d2:00:2a:a4:3c:6e:2b:50:f7:52:f3:34:a9:47:
6d:6a:aa:92:e9:c4:32:b3:91:5d:8e:f6:a7:69:ad:9f:f6:5d:
44:b9:f7:5f:e3:14:ea:73:2a:ee:79:89:af:da:68:0b:2c:91:
dc:52:1a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 1 18:15:39 2025 by rpki-client