Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/C37DC01C412711F08A72D080DAE4EC9C.roa
File: C37DC01C412711F08A72D080DAE4EC9C.roa (raw, json)
Hash identifier: qs6TE4JP060hv/0pYpvsSx8iQ0sA281FwGL4dlEI/3w=
Subject key identifier: 64:B9:07:CF:38:75:3E:BF:E7:6D:9A:19:9E:DF:E0:98:04:ED:6E:48
Certificate issuer: /CN=F36337E5AF/serialNumber=C9C129FBC3C8273A462955A9528E0AAC2F2E982C
Certificate serial: 011A
Authority key identifier: C9:C1:29:FB:C3:C8:27:3A:46:29:55:A9:52:8E:0A:AC:2F:2E:98:2C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ycEp-8PIJzpGKVWpUo4KrC8umCw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/C37DC01C412711F08A72D080DAE4EC9C.roa
Signing time: Wed 04 Jun 2025 09:39:09 +0000
ROA not before: Wed 04 Jun 2025 09:39:04 +0000
ROA not after: Fri 04 Jun 2027 09:39:04 +0000
asID: 329403
IP address blocks: 102.206.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.mft
rsync://rpki.afrinic.net/repository/afrinic/ycEp-8PIJzpGKVWpUo4KrC8umCw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 24 Jun 2025 03:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 282 (0x11a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36337E5AF, serialNumber=C9C129FBC3C8273A462955A9528E0AAC2F2E982C
Validity
Not Before: Jun 4 09:39:04 2025 GMT
Not After : Jun 4 09:39:04 2027 GMT
Subject: CN=6840143d-c909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:44:0e:32:4a:e5:85:77:c0:0b:bb:9c:c8:ee:
85:2c:47:d8:80:08:e5:da:ac:4c:d3:3e:dc:86:12:
bb:74:fc:38:b0:ff:d5:dc:92:ec:84:df:dd:6e:59:
4e:9d:73:19:83:0a:25:0f:81:7f:82:43:40:28:ac:
ba:4c:af:99:d3:e1:58:ca:9c:63:38:8e:fb:c4:94:
b7:a4:1c:38:58:db:4b:88:7a:42:dd:22:b8:70:27:
71:75:0d:04:2f:85:01:ab:e3:1d:d3:49:f2:9b:7a:
ad:fc:26:04:00:f0:ae:f3:2d:b8:c3:a5:c5:99:ba:
43:fd:fb:f5:fd:01:93:1b:47:27:0c:d9:69:19:4b:
86:3e:9f:5b:e4:4a:5e:76:45:72:d5:eb:7c:c7:d2:
d6:2b:1e:e1:61:34:ae:68:0b:32:9a:93:17:e5:31:
f5:4a:cf:54:3e:fc:8f:46:f1:99:1e:db:d8:c2:57:
47:0c:71:cf:7f:ca:29:24:04:b8:d9:0e:df:ee:42:
1b:87:03:e8:98:28:85:40:3c:25:f9:50:50:6c:1d:
31:ab:25:43:91:a2:15:af:83:9f:6d:00:f9:9d:00:
58:aa:21:a6:a2:7f:e7:95:6e:50:17:de:d8:0b:2c:
7b:4c:13:2a:ba:f8:84:36:6c:1f:9b:ff:ea:18:cf:
ad:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:B9:07:CF:38:75:3E:BF:E7:6D:9A:19:9E:DF:E0:98:04:ED:6E:48
X509v3 Authority Key Identifier:
keyid:C9:C1:29:FB:C3:C8:27:3A:46:29:55:A9:52:8E:0A:AC:2F:2E:98:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ycEp-8PIJzpGKVWpUo4KrC8umCw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/C37DC01C412711F08A72D080DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.206.71.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:b0:da:d7:31:7e:9a:40:c7:2c:b0:78:65:41:62:df:e9:df:
ba:53:a9:98:cd:f7:3d:3d:3f:a6:35:a5:19:57:aa:3e:47:93:
0b:ed:f4:73:b5:67:39:a7:d9:4e:b4:1b:3f:39:a6:e8:a6:e6:
6e:e2:25:75:a6:46:d9:a1:45:bc:e3:9f:27:0b:a3:23:5f:37:
1c:78:85:89:15:cc:ba:d7:84:a6:30:8b:6a:0d:46:7a:d2:9b:
49:63:92:25:c9:a3:3a:2a:7c:b8:89:07:af:18:ec:b8:86:05:
e4:a3:22:36:3c:67:2c:d6:b9:89:f7:11:e7:e2:aa:a0:27:2f:
87:cc:8e:d4:72:ed:f2:46:60:c8:99:ed:f6:76:73:55:28:ab:
31:e7:33:50:46:98:0a:fc:64:a3:d0:71:04:b3:09:a9:4a:ce:
a2:73:71:3f:7c:1d:8e:86:4d:21:96:fb:2e:10:ed:b7:7e:75:
7a:ce:17:27:4b:83:f5:36:cc:16:8b:f2:f6:92:06:f7:ea:60:
cb:00:de:21:1a:55:73:2c:8c:73:a3:34:6d:57:80:00:c3:16:
c1:13:90:23:15:e6:42:14:45:99:0d:4e:62:34:1c:23:56:13:
e1:98:ae:34:f6:5e:0d:55:44:85:c3:81:5a:e9:b6:4d:ca:97:
1e:91:ad:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 21:33:58 2025 by rpki-client