Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DA693/0D2968C67D5F11E99565B87EF8AEA228/5E76ED3C623911F09FE19597DAE4EC9C.roa
File: 5E76ED3C623911F09FE19597DAE4EC9C.roa (raw, json)
Hash identifier: l4ecDIraqY10TSmQyQbSow1V/demlZg058HXYFXg3hA=
Subject key identifier: D0:AB:DC:34:04:C7:1C:B8:4A:C1:74:09:BA:E3:FC:10:BD:C3:45:68
Certificate issuer: /CN=F36DA693AF/serialNumber=089012F969A6200C9399B093447AA4EA2CFCA81E
Certificate serial: 090D
Authority key identifier: 08:90:12:F9:69:A6:20:0C:93:99:B0:93:44:7A:A4:EA:2C:FC:A8:1E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CJAS-WmmIAyTmbCTRHqk6iz8qB4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DA693/0D2968C67D5F11E99565B87EF8AEA228/5E76ED3C623911F09FE19597DAE4EC9C.roa
Signing time: Wed 16 Jul 2025 11:38:19 +0000
ROA not before: Wed 16 Jul 2025 11:38:14 +0000
ROA not after: Wed 31 Jul 2030 11:38:14 +0000
asID: 327794
IP address blocks: 102.141.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DA693/0D2968C67D5F11E99565B87EF8AEA228/CJAS-WmmIAyTmbCTRHqk6iz8qB4.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DA693/0D2968C67D5F11E99565B87EF8AEA228/CJAS-WmmIAyTmbCTRHqk6iz8qB4.mft
rsync://rpki.afrinic.net/repository/afrinic/CJAS-WmmIAyTmbCTRHqk6iz8qB4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 03 Aug 2025 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2317 (0x90d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DA693AF, serialNumber=089012F969A6200C9399B093447AA4EA2CFCA81E
Validity
Not Before: Jul 16 11:38:14 2025 GMT
Not After : Jul 31 11:38:14 2030 GMT
Subject: CN=68778f2b-85f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a4:a9:46:94:c5:f7:28:d4:cc:08:1f:f6:ae:
97:73:12:ab:23:97:1b:98:fa:63:46:d5:c1:da:8e:
2f:68:64:9f:a6:b9:13:1c:9b:72:4e:85:87:c6:d7:
7e:70:ef:34:cb:47:74:cd:92:22:74:07:ca:68:65:
b2:6e:c5:e2:b5:50:58:d5:c6:95:8d:49:69:65:3d:
1b:29:9d:ab:70:a6:1d:26:f3:f8:fd:ce:2a:48:32:
34:c9:95:ae:a1:dc:2e:3d:d5:ec:72:02:f0:3d:27:
8f:2b:4c:b5:52:dc:7e:ae:3c:03:68:8f:fc:b5:fd:
49:27:04:20:b8:d8:4d:e5:ba:09:01:66:e0:a0:ae:
03:53:e1:21:70:19:76:fe:10:24:bc:9f:83:2f:65:
7a:1a:cd:c5:d2:b9:c9:7f:0f:98:6b:0f:57:63:9e:
23:e3:a9:b2:53:30:83:63:59:e5:2b:a4:52:9b:ea:
9c:01:b8:f4:27:3c:52:6a:35:5e:c9:d6:2a:08:b9:
fd:e0:33:3d:3f:8a:45:2e:0c:3e:17:55:af:bb:c8:
d8:3c:af:be:87:93:fd:7c:ad:b5:6f:80:d2:da:28:
a4:fa:c0:7b:7d:de:61:54:11:06:3f:99:bd:cd:96:
c4:fd:6b:7a:1d:1d:76:5d:bb:0a:b8:28:d2:b3:a1:
7a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:AB:DC:34:04:C7:1C:B8:4A:C1:74:09:BA:E3:FC:10:BD:C3:45:68
X509v3 Authority Key Identifier:
keyid:08:90:12:F9:69:A6:20:0C:93:99:B0:93:44:7A:A4:EA:2C:FC:A8:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA693/0D2968C67D5F11E99565B87EF8AEA228/CJAS-WmmIAyTmbCTRHqk6iz8qB4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CJAS-WmmIAyTmbCTRHqk6iz8qB4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA693/0D2968C67D5F11E99565B87EF8AEA228/5E76ED3C623911F09FE19597DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.141.226.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:dc:b3:a2:98:6b:2a:a3:d3:57:e6:fc:cb:72:87:9c:99:93:
2b:ae:85:82:1c:9d:db:74:bf:b9:db:0e:38:10:42:6e:72:51:
9b:2a:d1:31:65:07:ad:5a:0b:76:fc:9a:8e:93:9c:3b:4a:a4:
f0:3a:7f:14:30:40:69:19:43:74:93:6b:1d:3c:2e:0d:8f:f2:
9a:77:55:29:7f:31:10:57:60:87:2b:ae:5e:f2:24:b7:95:c5:
3f:ac:e8:f4:e0:5c:cf:d1:87:1c:41:09:0a:f6:d7:29:c2:4c:
80:4f:ee:d8:df:c2:a6:f1:15:70:4b:7c:26:d4:fd:17:82:aa:
58:6c:f7:d4:a1:b5:1d:7d:47:e7:5e:f5:f7:63:c9:f1:a7:e2:
df:9f:d3:48:3b:0d:b6:09:d1:37:96:7f:ac:d5:07:9e:52:10:
dc:4e:b9:ee:87:9c:de:3d:c7:b1:9f:25:ff:44:95:b3:81:34:
fd:7a:ac:7b:17:a1:00:99:f9:60:66:54:2b:c8:30:56:4b:47:
9f:8f:9c:6c:e7:c1:4f:0a:ae:b4:e4:a7:c0:30:7d:41:28:01:
3a:1a:78:c4:25:8d:8d:b9:2d:8b:2d:93:e9:4b:8a:fc:4b:9a:
6d:f8:fe:6f:59:15:11:19:68:e8:e9:15:0d:99:31:fe:81:52:
e1:76:09:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 1 18:09:32 2025 by rpki-client