Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F731F/A187DF92379711EEA4C498314AD9E6FC/A66AE9EC3B1811F08C015795DAE4EC9C.roa
File: A66AE9EC3B1811F08C015795DAE4EC9C.roa (raw, json)
Hash identifier: pOIhcilK3EwhS8025kcbyVdkcwS9lUsgshVLstEid7c=
Subject key identifier: CA:35:02:B9:A3:2D:B0:49:02:55:99:3D:F4:DA:DE:9F:5E:9C:98:20
Certificate issuer: /CN=F36F731FAF/serialNumber=F5C0B63BAA5E7AF7A4386B637FD1206A3682D0C3
Certificate serial: 02AD
Authority key identifier: F5:C0:B6:3B:AA:5E:7A:F7:A4:38:6B:63:7F:D1:20:6A:36:82:D0:C3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/9cC2O6peevekOGtjf9EgajaC0MM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F731F/A187DF92379711EEA4C498314AD9E6FC/A66AE9EC3B1811F08C015795DAE4EC9C.roa
Signing time: Tue 27 May 2025 16:35:51 +0000
ROA not before: Tue 27 May 2025 16:35:46 +0000
ROA not after: Wed 31 Dec 2025 16:35:46 +0000
asID: 29571
IP address blocks: 102.210.82.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F731F/A187DF92379711EEA4C498314AD9E6FC/9cC2O6peevekOGtjf9EgajaC0MM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F731F/A187DF92379711EEA4C498314AD9E6FC/9cC2O6peevekOGtjf9EgajaC0MM.mft
rsync://rpki.afrinic.net/repository/afrinic/9cC2O6peevekOGtjf9EgajaC0MM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 08 Jun 2025 03:56:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 685 (0x2ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F731FAF, serialNumber=F5C0B63BAA5E7AF7A4386B637FD1206A3682D0C3
Validity
Not Before: May 27 16:35:46 2025 GMT
Not After : Dec 31 16:35:46 2025 GMT
Subject: CN=6835e9e7-e686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:35:e5:42:c4:0a:7a:88:eb:b6:ed:14:01:e8:
69:7a:b8:0f:ba:bf:8e:42:79:a6:d8:b1:1d:ce:be:
e9:7a:3d:1e:a7:68:09:74:ba:c3:bf:4b:e2:b1:49:
a0:2a:99:36:47:c8:c3:45:ff:bd:b9:d6:03:7e:09:
fe:6f:42:7d:eb:60:d7:fe:20:d1:f9:4e:3a:a8:bf:
78:8e:07:0e:85:ee:eb:45:71:14:e7:3f:05:b9:35:
24:e6:b2:c2:83:89:1c:df:b2:e5:1d:d0:f3:6a:97:
8b:eb:50:b1:fa:74:29:18:cf:9b:2b:6d:f3:a8:75:
86:de:20:ef:52:c8:fa:e1:c1:b5:9b:90:23:aa:1c:
73:64:91:41:2e:43:37:77:fd:fe:64:84:1d:4c:6b:
4b:ce:16:63:c3:c8:a0:f3:49:26:20:55:3f:a9:b2:
0a:89:5a:38:38:04:63:6e:3b:4a:df:b9:11:3c:6c:
50:e1:d3:db:85:9a:1b:63:4d:79:6c:f6:10:2a:82:
27:f9:ba:20:97:ca:28:41:da:25:ed:62:b4:0b:e6:
26:3f:30:af:cf:48:88:19:59:5d:7a:07:3e:c1:a3:
f2:06:2e:01:e6:69:11:ef:8b:b6:1e:90:f5:b5:34:
01:a3:1d:25:52:99:86:49:e0:0b:bf:06:ce:08:a5:
64:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:35:02:B9:A3:2D:B0:49:02:55:99:3D:F4:DA:DE:9F:5E:9C:98:20
X509v3 Authority Key Identifier:
keyid:F5:C0:B6:3B:AA:5E:7A:F7:A4:38:6B:63:7F:D1:20:6A:36:82:D0:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F731F/A187DF92379711EEA4C498314AD9E6FC/9cC2O6peevekOGtjf9EgajaC0MM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9cC2O6peevekOGtjf9EgajaC0MM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F731F/A187DF92379711EEA4C498314AD9E6FC/A66AE9EC3B1811F08C015795DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.210.82.0/24
Signature Algorithm: sha256WithRSAEncryption
30:5f:8b:4b:af:a0:30:f2:78:03:b6:63:38:2b:b9:ef:35:de:
18:ce:cb:51:39:e6:3b:1a:81:0c:51:ac:17:90:fa:49:46:53:
7b:f3:fe:db:05:a3:f5:30:2b:43:ff:a2:d0:34:66:aa:db:b1:
c2:ec:d3:bf:47:d8:c6:bd:1e:c1:15:8e:3c:91:d3:53:54:74:
1b:ab:b4:6f:46:e1:25:8d:2a:65:48:fb:68:6e:21:2d:7b:2e:
a4:7b:97:9d:08:d1:55:39:44:f1:e5:c3:47:41:57:53:6e:d3:
0b:b0:6e:2a:0d:0b:d1:e7:1b:6a:ef:32:91:1e:cb:11:19:19:
bf:42:15:66:04:5d:49:ec:88:26:d3:24:8d:a0:e5:06:10:55:
99:d0:ef:9e:ef:81:69:d3:4c:d1:99:6a:1c:3f:d6:03:de:b3:
6f:68:4d:c0:28:ee:d3:1b:74:8e:5d:71:ff:d8:2c:e4:68:94:
3c:79:cf:26:10:44:f4:4c:6e:02:e0:7d:9c:2a:70:cc:fa:d0:
74:60:8e:89:ee:43:37:81:df:92:6f:60:5d:aa:e1:bf:08:a5:
28:00:0e:5c:32:df:ed:d4:f6:49:ac:77:dd:00:06:a1:dd:b3:
12:85:25:4f:5b:e6:53:3a:3e:e8:1b:32:88:fe:02:3c:e8:76:
1e:2e:1b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:53:39 2025 by rpki-client