Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362E278/2C6A530A3C6F11F0976A48D0DAE4EC9C/76A1AD86424D11F089D462E9DAE4EC9C.roa
File: 76A1AD86424D11F089D462E9DAE4EC9C.roa (raw, json)
Hash identifier: 920Pq5gLXNEK7ec2oQwBasEvZAmSump0pVGWoebeoI4=
Subject key identifier: 17:12:BB:0B:52:57:D5:E9:D5:7B:12:3A:15:57:F7:41:7C:13:61:C9
Certificate issuer: /CN=F362E278AF/serialNumber=5F3D4548D0494CB3EBB65FB0A79FE099A5A12CEA
Certificate serial: 09
Authority key identifier: 5F:3D:45:48:D0:49:4C:B3:EB:B6:5F:B0:A7:9F:E0:99:A5:A1:2C:EA
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Xz1FSNBJTLPrtl-wp5_gmaWhLOo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362E278/2C6A530A3C6F11F0976A48D0DAE4EC9C/76A1AD86424D11F089D462E9DAE4EC9C.roa
Signing time: Thu 05 Jun 2025 20:41:32 +0000
ROA not before: Thu 05 Jun 2025 20:41:26 +0000
ROA not after: Wed 05 Jun 2030 20:41:26 +0000
asID: 37123
IP address blocks: 41.191.232.0/21 maxlen: 24
154.119.80.0/20 maxlen: 24
2c0f:f0b8::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362E278/2C6A530A3C6F11F0976A48D0DAE4EC9C/Xz1FSNBJTLPrtl-wp5_gmaWhLOo.crl
rsync://rpki.afrinic.net/repository/member_repository/F362E278/2C6A530A3C6F11F0976A48D0DAE4EC9C/Xz1FSNBJTLPrtl-wp5_gmaWhLOo.mft
rsync://rpki.afrinic.net/repository/afrinic/Xz1FSNBJTLPrtl-wp5_gmaWhLOo.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 10 Jun 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9 (0x9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362E278AF, serialNumber=5F3D4548D0494CB3EBB65FB0A79FE099A5A12CEA
Validity
Not Before: Jun 5 20:41:26 2025 GMT
Not After : Jun 5 20:41:26 2030 GMT
Subject: CN=684200fc-f05c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6b:49:74:02:39:af:82:08:04:ce:ec:71:f0:
3e:7a:53:c5:c6:a0:c6:f8:72:db:fa:8a:11:cb:bf:
54:97:a9:d6:16:79:86:dd:df:a2:17:53:65:7b:95:
d4:fa:98:7d:03:f5:9d:4e:0e:c5:79:1f:f4:f5:dc:
9a:78:21:15:bc:bd:d8:1d:05:08:ef:d6:2e:5a:e5:
f4:8c:1f:6d:8d:e7:0b:95:bd:a3:45:b9:e9:08:33:
9e:ed:a7:ac:55:4d:38:6f:e4:01:79:d0:a7:c6:ba:
4f:e6:ac:5a:e8:73:4e:2b:c8:38:4a:5c:51:2b:15:
70:cc:6e:78:5f:07:7a:99:28:b4:e4:96:7a:82:50:
31:4b:e9:43:98:77:12:88:71:24:21:9c:26:8a:5b:
8e:ac:31:2d:45:4e:36:19:f8:d2:b1:68:f2:44:58:
89:49:67:10:4a:be:ad:bb:6a:bd:db:e3:64:e6:c1:
8d:3f:38:6d:e6:87:13:d1:d0:f7:5d:0c:59:84:30:
24:04:e3:cb:53:f0:75:77:8b:d9:7c:17:81:55:e8:
8b:b4:c6:a6:53:d3:2a:da:f6:0a:26:21:c7:c9:8f:
79:ee:2b:2a:5b:82:69:6c:c8:31:9f:11:1c:6f:24:
0c:ca:d0:ae:18:6c:05:d7:9f:3e:6e:03:c6:b9:db:
2b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:12:BB:0B:52:57:D5:E9:D5:7B:12:3A:15:57:F7:41:7C:13:61:C9
X509v3 Authority Key Identifier:
keyid:5F:3D:45:48:D0:49:4C:B3:EB:B6:5F:B0:A7:9F:E0:99:A5:A1:2C:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362E278/2C6A530A3C6F11F0976A48D0DAE4EC9C/Xz1FSNBJTLPrtl-wp5_gmaWhLOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Xz1FSNBJTLPrtl-wp5_gmaWhLOo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362E278/2C6A530A3C6F11F0976A48D0DAE4EC9C/76A1AD86424D11F089D462E9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.191.232.0/21
154.119.80.0/20
IPv6:
2c0f:f0b8::/32
Signature Algorithm: sha256WithRSAEncryption
06:6d:df:e3:bc:19:6b:a3:6d:07:c5:14:a4:a7:9b:f5:57:5d:
e7:8a:c0:4c:69:39:00:db:58:c1:b8:1a:20:a3:55:67:08:0e:
a3:e3:b0:69:63:27:e3:82:a1:62:98:ff:34:be:60:dd:00:a7:
8a:79:41:40:14:55:0e:e2:b5:e7:08:55:7d:c9:ef:ab:09:98:
79:38:0e:e6:ad:9c:8f:8b:58:59:f5:8b:a3:41:af:f1:39:69:
63:c7:50:1f:55:2d:59:ac:e9:c5:bf:72:3d:0e:94:f6:42:17:
a4:69:c1:f2:aa:38:78:94:65:c7:98:6e:fc:e3:d6:44:dc:b6:
f6:d2:54:b2:26:8a:c2:09:0a:f5:30:e5:08:43:88:d4:d1:ac:
df:e8:1e:88:4b:3b:53:4a:07:9b:18:84:58:0b:01:d3:61:a2:
67:ac:60:77:f5:e5:5d:c7:86:46:62:67:b2:4f:a7:17:c8:32:
41:9b:aa:ce:28:4e:a9:77:3f:a6:04:1d:04:9f:98:9c:d9:44:
a3:72:0c:f4:13:3e:3f:54:51:65:dd:25:cf:60:18:85:87:79:
5d:2e:2d:86:66:e7:91:98:b8:d1:e9:ba:57:0e:96:f2:f3:86:
a0:3d:ad:33:0f:21:30:79:f5:e9:cb:56:c8:7a:14:a9:9e:1c:
04:a2:97:ae
-----BEGIN CERTIFICATE-----
MIIFlzCCBH+gAwIBAgIBCTANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzYy
RTI3OEFGMTEwLwYDVQQFEyg1RjNENDU0OEQwNDk0Q0IzRUJCNjVGQjBBNzlGRTA5
OUE1QTEyQ0VBMB4XDTI1MDYwNTIwNDEyNloXDTMwMDYwNTIwNDEyNlowGDEWMBQG
A1UEAxMNNjg0MjAwZmMtZjA1YzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMdrSXQCOa+CCATO7HHwPnpTxcagxvhy2/qKEcu/VJep1hZ5ht3fohdTZXuV
1PqYfQP1nU4OxXkf9PXcmnghFby92B0FCO/WLlrl9IwfbY3nC5W9o0W56Qgznu2n
rFVNOG/kAXnQp8a6T+asWuhzTivIOEpcUSsVcMxueF8HepkotOSWeoJQMUvpQ5h3
EohxJCGcJopbjqwxLUVONhn40rFo8kRYiUlnEEq+rbtqvdvjZObBjT84beaHE9HQ
910MWYQwJATjy1PwdXeL2XwXgVXoi7TGplPTKtr2CiYhx8mPee4rKluCaWzIMZ8R
HG8kDMrQrhhsBdefPm4DxrnbK+MCAwEAAaOCArowggK2MB0GA1UdDgQWBBQXErsL
UlfV6dV7EjoVV/dBfBNhyTAfBgNVHSMEGDAWgBRfPUVI0ElMs+u2X7Cnn+CZpaEs
6jAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MkUyNzgvMkM2QTUzMEEzQzZGMTFGMDk3NkE0OEQwREFFNEVDOUMvWHoxRlNO
QkpUTFBydGwtd3A1X2dtYVdoTE9vLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvWHoxRlNOQkpUTFBydGwtd3A1X2dtYVdoTE9vLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MkUyNzgvMkM2QTUzMEEzQzZGMTFGMDk3NkE0OEQwREFF
NEVDOUMvNzZBMUFEODY0MjREMTFGMDg5RDQ2MkU5REFFNEVDOUMucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDA0BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAym/6AMEBJp3UDANBAIAAjAH
AwUALA/wuDANBgkqhkiG9w0BAQsFAAOCAQEABm3f47wZa6NtB8UUpKeb9Vdd54rA
TGk5ANtYwbgaIKNVZwgOo+OwaWMn44KhYpj/NL5g3QCninlBQBRVDuK15whVfcnv
qwmYeTgO5q2cj4tYWfWLo0Gv8TlpY8dQH1UtWazpxb9yPQ6U9kIXpGnB8qo4eJRl
x5hu/OPWRNy29tJUsiaKwgkK9TDlCEOI1NGs3+geiEs7U0oHmxiEWAsB02GiZ6xg
d/XlXceGRmJnsk+nF8gyQZuqzihOqXc/pgQdBJ+YnNlEo3IM9BM+P1RRZd0lz2AY
hYd5XS4thmbnkZi40em6Vw6W8vOGoD2tMw8hMHn16ctWyHoUqZ4cBKKXrg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 21:26:04 2025 by rpki-client