Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361950A/965BBE48478211F0A99DBBCDDAE4EC9C/7B6F3054478411F0B371B7DADAE4EC9C.roa
File: 7B6F3054478411F0B371B7DADAE4EC9C.roa (raw, json)
Hash identifier: w5E8JBOJdrFnCHufU8YUVNcTyXQmMdg4vF0OTc1n9B4=
Subject key identifier: 16:61:D9:57:67:5C:08:71:08:34:5B:60:26:88:74:D6:BE:95:57:F5
Certificate issuer: /CN=F361950AAF/serialNumber=F879531E5F9CA9F48B713383A500810D50F2D244
Certificate serial: 04
Authority key identifier: F8:79:53:1E:5F:9C:A9:F4:8B:71:33:83:A5:00:81:0D:50:F2:D2:44
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/-HlTHl-cqfSLcTODpQCBDVDy0kQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361950A/965BBE48478211F0A99DBBCDDAE4EC9C/7B6F3054478411F0B371B7DADAE4EC9C.roa
Signing time: Thu 12 Jun 2025 11:57:59 +0000
ROA not before: Thu 12 Jun 2025 11:57:52 +0000
ROA not after: Sat 30 Jun 2035 11:57:52 +0000
asID: 329183
IP address blocks: 102.213.92.0/22 maxlen: 24
2c0f:6980::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F361950A/965BBE48478211F0A99DBBCDDAE4EC9C/-HlTHl-cqfSLcTODpQCBDVDy0kQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F361950A/965BBE48478211F0A99DBBCDDAE4EC9C/-HlTHl-cqfSLcTODpQCBDVDy0kQ.mft
rsync://rpki.afrinic.net/repository/afrinic/-HlTHl-cqfSLcTODpQCBDVDy0kQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Jul 2025 05:23:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F361950AAF, serialNumber=F879531E5F9CA9F48B713383A500810D50F2D244
Validity
Not Before: Jun 12 11:57:52 2025 GMT
Not After : Jun 30 11:57:52 2035 GMT
Subject: CN=684ac0c6-27e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b5:71:9f:61:e7:76:fe:35:79:a1:e3:b4:f9:
2b:1f:a3:00:e4:c7:45:c8:61:a8:4b:0b:b5:5f:25:
3d:8a:f0:00:21:71:ae:43:ca:f8:a7:e9:60:a5:42:
2d:11:3c:ee:bb:85:15:2b:4b:e5:61:62:30:31:8e:
ec:ea:1b:e1:82:4b:3f:b8:bd:6c:cd:df:33:34:0b:
04:67:ec:56:f3:3a:02:49:d8:0d:63:2e:42:9d:f5:
1a:7c:da:18:a2:4f:dd:d7:55:09:4c:4a:50:4a:10:
51:35:db:4f:ce:b7:d2:88:72:4e:19:da:09:b6:8d:
6e:f6:82:f8:68:b9:e2:46:e4:7b:94:5c:e2:23:d9:
4c:9b:f4:aa:16:26:22:bc:42:79:31:28:2c:8f:1f:
00:b5:d6:1f:bf:62:70:73:1a:dd:f7:f8:9c:06:bb:
30:31:ce:69:85:19:0c:e3:30:4f:1d:9f:73:19:b7:
bf:19:f3:1f:fb:24:0e:22:28:0d:f0:7b:53:59:7d:
94:c5:b2:46:e6:f6:4e:06:a7:81:e8:e0:40:0b:06:
22:b0:cf:72:7c:8e:48:91:53:89:23:b1:a8:9a:79:
5d:f0:39:43:bb:bb:d6:11:be:36:e1:62:7c:80:81:
3f:54:18:98:27:e0:c1:ef:62:5d:22:7f:42:c8:9a:
33:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:61:D9:57:67:5C:08:71:08:34:5B:60:26:88:74:D6:BE:95:57:F5
X509v3 Authority Key Identifier:
keyid:F8:79:53:1E:5F:9C:A9:F4:8B:71:33:83:A5:00:81:0D:50:F2:D2:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F361950A/965BBE48478211F0A99DBBCDDAE4EC9C/-HlTHl-cqfSLcTODpQCBDVDy0kQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-HlTHl-cqfSLcTODpQCBDVDy0kQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361950A/965BBE48478211F0A99DBBCDDAE4EC9C/7B6F3054478411F0B371B7DADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.213.92.0/22
IPv6:
2c0f:6980::/32
Signature Algorithm: sha256WithRSAEncryption
1b:07:72:a4:87:61:4b:98:92:70:ac:aa:a2:97:8e:8b:12:08:
ae:99:46:13:eb:c2:b5:4b:ed:f1:cf:95:c5:67:e7:c2:4a:31:
3c:61:3d:ea:5f:c9:4f:c0:c2:1b:a4:9d:6a:15:ae:2e:8b:3c:
3e:d9:d2:9f:78:8f:bd:46:a4:e6:fd:ec:e4:28:7b:2c:5a:8f:
ae:06:ae:31:14:ef:35:4e:5a:19:e5:94:3f:0b:95:65:80:e1:
23:64:9a:3b:ad:cd:7b:8a:80:9a:df:18:d5:7b:99:d3:86:2c:
8d:d7:37:ee:07:fe:bb:aa:e0:60:6b:2b:dc:c4:b5:d8:05:9e:
20:12:40:de:94:7d:68:77:10:03:0c:5f:81:26:be:40:4d:f8:
ef:17:72:bd:3b:a9:fe:0f:c6:ea:2f:b6:1a:a3:58:fe:3a:bf:
a8:5a:cf:12:ee:28:07:b8:e4:65:cb:e5:df:05:28:de:17:14:
91:5c:ed:6a:68:d5:d0:eb:5e:8f:f6:65:6d:73:8d:e1:0a:9c:
39:2a:c0:72:8d:65:a4:ba:ac:d7:52:95:68:4e:36:35:4d:c2:
03:ba:de:b3:5e:5c:78:9b:82:0b:05:27:df:99:69:20:c3:11:
3b:12:d9:ef:2e:d5:33:3b:cd:f2:49:7e:ee:ed:6e:f1:b2:d8:
d1:9d:b3:7d
-----BEGIN CERTIFICATE-----
MIIFkTCCBHmgAwIBAgIBBDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzYx
OTUwQUFGMTEwLwYDVQQFEyhGODc5NTMxRTVGOUNBOUY0OEI3MTMzODNBNTAwODEw
RDUwRjJEMjQ0MB4XDTI1MDYxMjExNTc1MloXDTM1MDYzMDExNTc1MlowGDEWMBQG
A1UEAxMNNjg0YWMwYzYtMjdlMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKW1cZ9h53b+NXmh47T5Kx+jAOTHRchhqEsLtV8lPYrwACFxrkPK+KfpYKVC
LRE87ruFFStL5WFiMDGO7Oob4YJLP7i9bM3fMzQLBGfsVvM6AknYDWMuQp31Gnza
GKJP3ddVCUxKUEoQUTXbT8630ohyThnaCbaNbvaC+Gi54kbke5Rc4iPZTJv0qhYm
IrxCeTEoLI8fALXWH79icHMa3ff4nAa7MDHOaYUZDOMwTx2fcxm3vxnzH/skDiIo
DfB7U1l9lMWyRub2TgangejgQAsGIrDPcnyOSJFTiSOxqJp5XfA5Q7u71hG+NuFi
fICBP1QYmCfgwe9iXSJ/QsiaMxMCAwEAAaOCArQwggKwMB0GA1UdDgQWBBQWYdlX
Z1wIcQg0W2AmiHTWvpVX9TAfBgNVHSMEGDAWgBT4eVMeX5yp9ItxM4OlAIENUPLS
RDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MTk1MEEvOTY1QkJFNDg0NzgyMTFGMEE5OURCQkNEREFFNEVDOUMvLUhsVEhs
LWNxZlNMY1RPRHBRQ0JEVkR5MGtRLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvLUhsVEhsLWNxZlNMY1RPRHBRQ0JEVkR5MGtRLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MTk1MEEvOTY1QkJFNDg0NzgyMTFGMEE5OURCQkNEREFF
NEVDOUMvN0I2RjMwNTQ0Nzg0MTFGMEIzNzFCN0RBREFFNEVDOUMucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAmbVXDANBAIAAjAHAwUALA9p
gDANBgkqhkiG9w0BAQsFAAOCAQEAGwdypIdhS5iScKyqopeOixIIrplGE+vCtUvt
8c+VxWfnwkoxPGE96l/JT8DCG6SdahWuLos8PtnSn3iPvUak5v3s5Ch7LFqPrgau
MRTvNU5aGeWUPwuVZYDhI2SaO63Ne4qAmt8Y1XuZ04Ysjdc37gf+u6rgYGsr3MS1
2AWeIBJA3pR9aHcQAwxfgSa+QE347xdyvTup/g/G6i+2GqNY/jq/qFrPEu4oB7jk
Zcvl3wUo3hcUkVztamjV0Otej/ZlbXON4QqcOSrAco1lpLqs11KVaE42NU3CA7re
s15ceJuCCwUn35lpIMMROxLZ7y7VMzvN8kl+7u1u8bLY0Z2zfQ==
-----END CERTIFICATE-----
Generated at Fri Jul 4 19:19:42 2025 by rpki-client