Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F731F/A187DF92379711EEA4C498314AD9E6FC/63498D5272E111F0B646849EDAE4EC9C.roa
File: 63498D5272E111F0B646849EDAE4EC9C.roa (raw, json)
Hash identifier: 21/eCvRVXcBmFJZT4KGihw0yio6Yd2hm4xWHCwHphyk=
Subject key identifier: 5F:62:8E:68:28:11:50:50:02:57:DA:3E:12:FD:E4:B1:C4:EA:18:3F
Certificate issuer: /CN=F36F731FAF/serialNumber=F5C0B63BAA5E7AF7A4386B637FD1206A3682D0C3
Certificate serial: 0309
Authority key identifier: F5:C0:B6:3B:AA:5E:7A:F7:A4:38:6B:63:7F:D1:20:6A:36:82:D0:C3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/9cC2O6peevekOGtjf9EgajaC0MM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F731F/A187DF92379711EEA4C498314AD9E6FC/63498D5272E111F0B646849EDAE4EC9C.roa
Signing time: Wed 06 Aug 2025 16:21:21 +0000
ROA not before: Wed 06 Aug 2025 16:21:16 +0000
ROA not after: Tue 06 Aug 2030 16:21:16 +0000
asID: 29571
IP address blocks: 196.201.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F731F/A187DF92379711EEA4C498314AD9E6FC/9cC2O6peevekOGtjf9EgajaC0MM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F731F/A187DF92379711EEA4C498314AD9E6FC/9cC2O6peevekOGtjf9EgajaC0MM.mft
rsync://rpki.afrinic.net/repository/afrinic/9cC2O6peevekOGtjf9EgajaC0MM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 10 Aug 2025 08:25:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 777 (0x309)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F731FAF, serialNumber=F5C0B63BAA5E7AF7A4386B637FD1206A3682D0C3
Validity
Not Before: Aug 6 16:21:16 2025 GMT
Not After : Aug 6 16:21:16 2030 GMT
Subject: CN=68938101-9b37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6e:db:57:e0:18:9a:48:cf:b3:cd:2f:0c:00:
5a:4c:83:5e:c5:89:48:14:ac:f0:e7:15:e2:02:13:
76:86:e9:64:b9:f9:61:32:f2:72:e5:dc:f4:4c:f4:
e7:03:28:5d:72:1e:66:95:71:6c:81:95:17:eb:57:
07:b9:6e:1b:13:98:17:28:fe:27:da:78:fe:0e:65:
90:f5:c9:67:02:a9:7b:3b:18:03:1b:52:1e:7a:e3:
8c:3e:e3:b0:e7:6b:93:81:41:38:2e:cb:38:30:63:
92:97:91:28:9d:c1:4b:8f:84:d9:9d:ec:d4:84:c9:
1c:21:e2:a0:2b:dd:5d:3a:b3:16:45:2b:cf:07:88:
94:8b:e2:ba:cd:f1:b2:6b:bc:41:f8:eb:9d:d2:cc:
07:6a:cb:fe:02:7b:8d:70:6c:a2:37:7a:0f:b1:d2:
a6:74:1b:76:3a:1e:87:ba:08:d7:ff:5d:2a:fe:da:
cb:ae:23:41:97:b8:1c:13:52:3b:1c:a0:3a:c3:70:
53:4d:60:88:f4:85:16:a6:0b:2e:23:13:75:ee:2c:
64:c1:1e:49:d3:f6:54:a9:5d:71:81:03:96:4e:ea:
1f:92:aa:a6:f5:6f:c8:d4:d8:f1:07:2d:58:c8:5a:
bc:a4:38:e4:56:ce:13:d5:b7:f3:41:63:7f:94:d9:
96:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:62:8E:68:28:11:50:50:02:57:DA:3E:12:FD:E4:B1:C4:EA:18:3F
X509v3 Authority Key Identifier:
keyid:F5:C0:B6:3B:AA:5E:7A:F7:A4:38:6B:63:7F:D1:20:6A:36:82:D0:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F731F/A187DF92379711EEA4C498314AD9E6FC/9cC2O6peevekOGtjf9EgajaC0MM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9cC2O6peevekOGtjf9EgajaC0MM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F731F/A187DF92379711EEA4C498314AD9E6FC/63498D5272E111F0B646849EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.201.64.0/19
Signature Algorithm: sha256WithRSAEncryption
7b:79:8f:b2:e0:e4:cc:31:49:91:38:de:23:51:90:fe:35:ef:
80:ff:80:70:de:7e:de:7c:4c:78:87:49:86:d9:85:48:da:ea:
15:bd:2c:7a:4e:42:74:3b:66:b8:e8:c0:e6:1e:82:8e:db:d8:
a7:7f:3d:70:1c:fe:36:2f:1c:2e:90:fa:7b:5f:88:ee:76:e8:
c9:a7:3b:69:b8:97:2b:51:12:ac:c8:31:6c:3f:e8:d0:d4:75:
a1:e4:f3:3c:98:10:3a:94:70:5f:9b:e5:e3:06:ed:36:ce:91:
0e:9f:80:49:35:f7:bc:56:07:32:4d:99:61:c8:7e:fe:b5:84:
94:09:22:20:48:91:1d:86:f2:db:7d:3c:9f:f9:8f:8e:3e:a0:
4c:0f:d7:44:40:ce:fe:36:2e:02:28:22:68:07:e5:4b:92:22:
03:9f:e5:c6:79:cb:47:34:b9:26:ee:30:07:af:c6:a6:bb:22:
92:f7:dd:4c:03:bf:66:e0:8b:f0:97:d6:89:8b:6f:11:76:c3:
ad:37:97:16:63:05:4a:22:70:3f:c6:30:24:8d:39:f2:17:af:
0e:f3:e7:65:ee:d3:82:90:7d:c8:5a:2d:24:34:89:d3:7e:83:
1f:f2:27:98:3d:48:ef:ea:21:1e:91:b9:b6:2f:8a:cd:b6:da:
62:bd:67:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:48:02 2025 by rpki-client