Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B95DE/0142933CCA5E11EAAA82C884F8AEA228/45832B683A1811F0A5162699DAE4EC9C.roa
File: 45832B683A1811F0A5162699DAE4EC9C.roa (raw, json)
Hash identifier: bH1V9seBQy1bZT+/9CsQ550EAlVYbRUIjhOsEaER3S4=
Subject key identifier: C5:B7:C6:5D:76:AB:96:96:9C:C2:7C:B8:31:FC:6F:7D:5E:03:91:CB
Certificate issuer: /CN=F36B95DEAF/serialNumber=42D85C6FE43CDDD9C342A99123939EF6D10B9661
Certificate serial: 0722
Authority key identifier: 42:D8:5C:6F:E4:3C:DD:D9:C3:42:A9:91:23:93:9E:F6:D1:0B:96:61
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Qthcb-Q83dnDQqmRI5Oe9tELlmE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B95DE/0142933CCA5E11EAAA82C884F8AEA228/45832B683A1811F0A5162699DAE4EC9C.roa
Signing time: Mon 26 May 2025 10:00:37 +0000
ROA not before: Mon 26 May 2025 10:00:32 +0000
ROA not after: Thu 20 Jun 2030 10:00:32 +0000
asID: 327849
IP address blocks: 102.207.200.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B95DE/0142933CCA5E11EAAA82C884F8AEA228/Qthcb-Q83dnDQqmRI5Oe9tELlmE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B95DE/0142933CCA5E11EAAA82C884F8AEA228/Qthcb-Q83dnDQqmRI5Oe9tELlmE.mft
rsync://rpki.afrinic.net/repository/afrinic/Qthcb-Q83dnDQqmRI5Oe9tELlmE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 21 Jun 2025 00:06:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1826 (0x722)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B95DEAF, serialNumber=42D85C6FE43CDDD9C342A99123939EF6D10B9661
Validity
Not Before: May 26 10:00:32 2025 GMT
Not After : Jun 20 10:00:32 2030 GMT
Subject: CN=68343bc5-32f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3f:d6:df:70:31:5b:dd:8a:d1:e5:01:d3:12:
10:76:1e:ce:f1:98:33:bb:03:9c:e9:29:51:4f:e1:
92:77:08:48:08:44:d5:c2:aa:27:65:01:75:aa:99:
bc:c3:e6:67:d0:ca:d7:a3:af:32:11:13:bf:39:68:
f5:d9:b6:67:58:49:ed:79:35:2b:3e:c0:fb:62:bb:
4b:98:a1:15:f8:31:ac:17:7b:47:bb:09:d9:8d:92:
17:0c:93:1e:51:f1:d5:d1:f5:db:c4:bd:a5:eb:6d:
27:b8:59:2e:bd:e7:13:fb:80:4b:84:31:4a:24:6c:
1d:9c:2a:e8:8f:26:18:c0:6d:ad:4e:8f:da:83:c1:
c1:a7:d2:ef:dd:38:81:dc:cf:c4:78:b5:96:7a:e4:
4d:bf:d3:b6:b1:e5:05:03:95:24:25:f6:28:74:89:
f4:de:42:d8:bf:00:8d:83:97:57:f6:62:25:14:f7:
a4:c1:ac:fe:fa:4b:b3:cd:dc:86:6f:58:54:4c:77:
9c:aa:5f:19:47:d6:d9:e3:3a:10:01:2c:0e:11:f4:
61:eb:fb:dc:4d:76:13:1e:65:47:0c:3d:74:ba:94:
a7:90:fe:f4:c6:72:aa:22:bf:95:88:c8:00:45:15:
97:7f:5d:b0:60:1b:37:4a:96:7b:9a:9c:b6:42:fe:
20:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:B7:C6:5D:76:AB:96:96:9C:C2:7C:B8:31:FC:6F:7D:5E:03:91:CB
X509v3 Authority Key Identifier:
keyid:42:D8:5C:6F:E4:3C:DD:D9:C3:42:A9:91:23:93:9E:F6:D1:0B:96:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B95DE/0142933CCA5E11EAAA82C884F8AEA228/Qthcb-Q83dnDQqmRI5Oe9tELlmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Qthcb-Q83dnDQqmRI5Oe9tELlmE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B95DE/0142933CCA5E11EAAA82C884F8AEA228/45832B683A1811F0A5162699DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.207.200.0/22
Signature Algorithm: sha256WithRSAEncryption
97:68:c6:92:ec:82:2c:a9:e9:a2:a6:ed:c4:c1:90:8d:91:55:
25:b2:29:72:7c:b1:f8:20:0b:3f:02:01:3f:9c:ad:bf:bc:2c:
fd:24:b3:1a:e4:f5:6e:00:24:4a:2d:e9:5b:6c:a0:d9:4e:ea:
a0:37:0f:d2:33:c2:1a:02:90:71:c5:5d:52:0b:77:9b:8b:77:
f5:18:38:00:e9:69:3c:e7:d4:3f:6d:52:df:3a:d0:2e:90:e8:
13:13:24:50:2a:1b:6b:50:e7:49:15:46:5b:a7:4f:6c:fc:9f:
24:39:1d:a3:8b:5f:d5:5f:1d:d2:da:fa:e0:f9:e7:38:03:47:
c7:a7:be:e8:6d:e2:13:6b:51:5e:27:7d:59:37:55:84:11:c7:
6e:bd:93:e4:e0:46:6c:2b:3c:f4:f2:43:4e:91:e5:36:29:f9:
fb:ce:6b:81:82:11:aa:8e:e3:35:23:9a:eb:cf:93:57:b0:ed:
22:6d:c2:bc:44:c9:6c:7a:2a:55:5d:e0:47:58:9e:7a:ab:48:
4c:af:94:9d:1c:55:23:21:6f:5b:8d:44:d0:41:68:54:f8:87:
9b:14:92:9a:93:d7:4a:4f:e9:60:6e:0f:30:6b:87:4d:4c:df:
9b:29:a6:a4:45:27:bf:f9:10:0e:90:79:2e:83:e3:f9:f2:a2:
fe:ab:8e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 04:44:44 2025 by rpki-client