Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/B38C401C396511F08862AB8ADAE4EC9C.roa
File: B38C401C396511F08862AB8ADAE4EC9C.roa (raw, json)
Hash identifier: Vu+jWzoHIDSqURSEkhIKXNeidaf3yklXTcI/1FJoqJI=
Subject key identifier: B3:75:6B:D4:D9:F6:5E:1C:EC:BD:F0:A9:D2:85:FC:3B:73:04:C9:B8
Certificate issuer: /CN=F36EF7D0AF/serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
Certificate serial: 0365
Authority key identifier: 3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/B38C401C396511F08862AB8ADAE4EC9C.roa
Signing time: Sun 25 May 2025 12:42:22 +0000
ROA not before: Sun 25 May 2025 12:42:17 +0000
ROA not after: Sun 26 May 2030 12:42:17 +0000
asID: 20326
IP address blocks: 102.212.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl
rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.mft
rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Jun 2025 03:44:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 869 (0x365)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36EF7D0AF, serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
Validity
Not Before: May 25 12:42:17 2025 GMT
Not After : May 26 12:42:17 2030 GMT
Subject: CN=6833102e-fab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:37:94:71:7b:eb:98:06:36:22:8b:e4:b7:c8:
c8:14:c4:c1:31:ad:b9:9d:c2:36:e7:e1:75:47:b6:
35:11:d3:f1:e7:89:a9:3a:f6:ad:ea:d2:b4:0e:4f:
a2:b0:c4:69:2b:b9:4c:98:db:8e:09:56:43:16:4b:
c4:d4:ce:eb:02:3b:af:69:3f:21:4f:b2:d0:c5:d8:
b5:b0:aa:fc:28:35:f1:78:61:52:a3:05:08:0b:43:
46:5e:32:ae:ad:80:6f:c3:64:75:f9:54:ef:88:bc:
58:51:43:95:78:50:15:27:b3:e8:fb:ee:00:ea:56:
b6:b0:44:e4:5e:ef:9e:e8:3a:09:68:22:5e:fc:48:
da:40:72:fa:c2:56:83:db:96:0e:82:92:2b:e7:b0:
f2:4f:29:43:fa:99:51:0e:33:df:90:ab:5a:eb:89:
7c:48:dc:55:11:64:b2:d8:3d:0c:52:06:c6:6c:b7:
bb:ed:dc:f1:b5:88:5b:28:80:65:23:fa:c0:36:b5:
1a:bc:13:02:24:ab:15:e7:3d:f8:a5:27:25:4b:c4:
37:e4:28:f6:bd:61:f5:90:61:fc:7f:99:3f:78:dc:
0f:58:f6:a5:27:86:61:d1:01:a7:23:b1:4b:2b:92:
8e:ca:41:9e:af:82:9f:ad:c9:d5:98:c0:f3:7c:49:
bb:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:75:6B:D4:D9:F6:5E:1C:EC:BD:F0:A9:D2:85:FC:3B:73:04:C9:B8
X509v3 Authority Key Identifier:
keyid:3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/B38C401C396511F08862AB8ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.212.7.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:2f:75:21:87:fb:d9:36:26:dd:37:48:c1:10:b9:62:55:15:
39:0b:18:2d:88:fd:f1:40:53:59:a6:20:1b:76:ee:97:a0:d7:
f5:71:cb:bf:3c:48:74:86:27:2e:ba:dc:cf:98:4c:89:80:d6:
2b:cf:6f:20:5a:ce:c4:0f:80:b2:03:2b:13:ec:90:7a:00:ba:
64:4b:54:ad:02:4d:f6:c8:e7:ad:d6:99:c6:53:10:78:32:45:
ff:f4:7f:3c:0f:3a:b6:2b:24:3a:92:f5:70:c7:1d:1f:6e:26:
38:5d:a2:da:4b:bf:2c:2e:7d:9a:8b:d6:90:e8:85:85:7d:0d:
63:15:44:78:57:4b:24:0e:3c:4b:27:23:53:62:91:68:b3:0c:
d5:aa:7b:c7:2c:76:d2:53:0c:30:84:8f:8b:85:0e:be:44:61:
4b:40:98:12:af:24:3a:3e:40:6f:c5:71:84:e4:fe:60:22:0e:
d0:ef:6e:30:6c:1f:e6:55:3c:ab:59:aa:d5:b8:00:31:ba:ed:
b9:18:4f:0c:05:78:2b:07:23:93:55:97:ab:5f:b9:ab:62:68:
68:4e:35:4e:0a:ec:ed:f8:da:86:e6:c1:bf:fe:aa:c0:79:cf:
11:76:4c:7d:15:84:c4:5e:62:8a:5d:75:ab:83:39:90:c4:d4:
9c:28:db:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 02:42:02 2025 by rpki-client