Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362E505/A91DAD3E4F3E11F09A6706C4DAE4EC9C/0113DEB44F3F11F0A09945C6DAE4EC9C.roa
File: 0113DEB44F3F11F0A09945C6DAE4EC9C.roa (raw, json)
Hash identifier: GXRHrxTjeboN2XXSH+Xnz407u3FNrZjU27pxa/KrvyM=
Subject key identifier: C4:6D:10:04:35:A6:A3:3E:0B:5D:18:46:4E:DE:0E:2C:3A:6F:BF:16
Certificate issuer: /CN=F362E505AF/serialNumber=D2E9DA68EEF57089F4455C71B7C9C77EEDE21662
Certificate serial: 02
Authority key identifier: D2:E9:DA:68:EE:F5:70:89:F4:45:5C:71:B7:C9:C7:7E:ED:E2:16:62
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/0unaaO71cIn0RVxxt8nHfu3iFmI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362E505/A91DAD3E4F3E11F09A6706C4DAE4EC9C/0113DEB44F3F11F0A09945C6DAE4EC9C.roa
Signing time: Sun 22 Jun 2025 08:00:47 +0000
ROA not before: Sun 22 Jun 2025 08:00:43 +0000
ROA not after: Tue 30 Jun 2026 08:00:43 +0000
asID: 328706
IP address blocks: 102.222.73.0/24 maxlen: 24
2001:43f8:1620::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362E505/A91DAD3E4F3E11F09A6706C4DAE4EC9C/0unaaO71cIn0RVxxt8nHfu3iFmI.crl
rsync://rpki.afrinic.net/repository/member_repository/F362E505/A91DAD3E4F3E11F09A6706C4DAE4EC9C/0unaaO71cIn0RVxxt8nHfu3iFmI.mft
rsync://rpki.afrinic.net/repository/afrinic/0unaaO71cIn0RVxxt8nHfu3iFmI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Jul 2025 05:23:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362E505AF, serialNumber=D2E9DA68EEF57089F4455C71B7C9C77EEDE21662
Validity
Not Before: Jun 22 08:00:43 2025 GMT
Not After : Jun 30 08:00:43 2026 GMT
Subject: CN=6857b82f-08ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a5:5c:90:ee:16:20:b2:50:35:47:13:21:db:
52:6a:2d:c7:79:6f:f2:49:8f:5c:17:eb:32:1c:e9:
a0:13:18:a9:78:c4:0f:4d:89:84:bf:8a:6b:87:88:
d9:66:ec:b6:69:6c:3d:6e:69:17:d9:9e:42:32:f6:
8c:a7:52:25:f5:d9:72:88:7d:ea:1a:a7:a7:25:1d:
84:12:ef:7b:19:57:36:a7:f3:26:7f:85:ce:59:b4:
22:82:d8:9b:03:fe:fa:b5:dc:c5:1e:30:fa:94:6e:
df:ce:33:4e:0e:ae:1d:36:45:c4:fa:36:e0:7a:8d:
4f:f2:45:b3:73:26:66:7f:52:68:64:ba:a4:3d:24:
dd:3e:c0:3e:31:23:4e:ea:c2:99:5b:fb:af:c6:3b:
03:a7:50:d4:4c:c2:b2:54:37:fd:0d:87:e5:7d:80:
b0:30:a7:ad:0a:f0:e3:c8:09:3b:da:ef:e5:a4:15:
5e:53:6f:23:2f:a4:a2:6b:19:81:7c:4d:ca:f7:85:
40:47:d1:79:75:b5:e5:d2:92:b7:24:b1:d2:70:cf:
df:86:53:38:9f:f1:91:63:52:ff:af:5c:78:48:8d:
1f:16:ca:e0:c4:97:d8:1e:51:1d:eb:76:98:53:7d:
0b:ef:1c:e6:ae:b4:9f:4b:63:c3:3a:51:53:a7:13:
33:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:6D:10:04:35:A6:A3:3E:0B:5D:18:46:4E:DE:0E:2C:3A:6F:BF:16
X509v3 Authority Key Identifier:
keyid:D2:E9:DA:68:EE:F5:70:89:F4:45:5C:71:B7:C9:C7:7E:ED:E2:16:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362E505/A91DAD3E4F3E11F09A6706C4DAE4EC9C/0unaaO71cIn0RVxxt8nHfu3iFmI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0unaaO71cIn0RVxxt8nHfu3iFmI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362E505/A91DAD3E4F3E11F09A6706C4DAE4EC9C/0113DEB44F3F11F0A09945C6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.222.73.0/24
IPv6:
2001:43f8:1620::/48
Signature Algorithm: sha256WithRSAEncryption
ab:68:cb:05:8d:7f:6d:02:7c:53:4b:1e:42:72:38:eb:7e:a5:
61:ca:e2:94:b9:df:36:82:e6:f5:58:04:0c:a6:b5:61:11:6e:
27:ba:98:7f:da:11:13:17:02:30:77:b1:d1:8f:15:4c:d3:70:
93:e5:ab:d7:a9:d2:69:2e:b2:ae:d2:4a:f7:d1:20:c9:2f:26:
6b:59:74:3a:84:f8:1b:30:b5:fe:54:ac:f1:51:06:ff:d6:04:
0a:f1:fb:09:6f:ea:68:f7:6c:d6:c2:66:d4:fb:41:ba:8d:0d:
cb:1b:15:99:47:f1:fa:1a:92:03:ae:f4:9c:ad:88:f6:ef:e7:
7b:4c:22:1f:5a:fd:47:3b:7e:4d:66:d5:ea:f9:f4:86:5c:66:
32:87:3e:ad:76:10:3a:bd:3d:02:76:58:d4:6f:94:ad:c0:e8:
13:0f:77:7e:1f:cb:86:2f:90:ae:54:2f:90:89:2e:f1:9f:b4:
03:f5:87:2a:02:6c:89:cf:85:bb:fa:57:a1:cf:a3:cc:2e:5c:
4c:fc:49:e7:9f:e2:ca:a6:1a:8e:c4:94:b9:67:84:b9:bd:d5:
5e:57:4e:86:df:99:e5:00:d3:ad:82:b1:94:b8:51:ce:41:0e:
11:02:aa:fa:38:eb:77:ed:b8:60:ce:02:70:13:0d:fe:b1:d3:
2f:cb:0b:f9
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgIBAjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzYy
RTUwNUFGMTEwLwYDVQQFEyhEMkU5REE2OEVFRjU3MDg5RjQ0NTVDNzFCN0M5Qzc3
RUVERTIxNjYyMB4XDTI1MDYyMjA4MDA0M1oXDTI2MDYzMDA4MDA0M1owGDEWMBQG
A1UEAxMNNjg1N2I4MmYtMDhhZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK2lXJDuFiCyUDVHEyHbUmotx3lv8kmPXBfrMhzpoBMYqXjED02JhL+Ka4eI
2WbstmlsPW5pF9meQjL2jKdSJfXZcoh96hqnpyUdhBLvexlXNqfzJn+Fzlm0IoLY
mwP++rXcxR4w+pRu384zTg6uHTZFxPo24HqNT/JFs3MmZn9SaGS6pD0k3T7APjEj
TurCmVv7r8Y7A6dQ1EzCslQ3/Q2H5X2AsDCnrQrw48gJO9rv5aQVXlNvIy+komsZ
gXxNyveFQEfReXW15dKStySx0nDP34ZTOJ/xkWNS/69ceEiNHxbK4MSX2B5RHet2
mFN9C+8c5q60n0tjwzpRU6cTM8MCAwEAAaOCArYwggKyMB0GA1UdDgQWBBTEbRAE
NaajPgtdGEZO3g4sOm+/FjAfBgNVHSMEGDAWgBTS6dpo7vVwifRFXHG3ycd+7eIW
YjAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MkU1MDUvQTkxREFEM0U0RjNFMTFGMDlBNjcwNkM0REFFNEVDOUMvMHVuYWFP
NzFjSW4wUlZ4eHQ4bkhmdTNpRm1JLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvMHVuYWFPNzFjSW4wUlZ4eHQ4bkhmdTNpRm1JLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MkU1MDUvQTkxREFEM0U0RjNFMTFGMDlBNjcwNkM0REFF
NEVDOUMvMDExM0RFQjQ0RjNGMTFGMEEwOTk0NUM2REFFNEVDOUMucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAwBggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAGbeSTAPBAIAAjAJAwcAIAFD
+BYgMA0GCSqGSIb3DQEBCwUAA4IBAQCraMsFjX9tAnxTSx5CcjjrfqVhyuKUud82
gub1WAQMprVhEW4nuph/2hETFwIwd7HRjxVM03CT5avXqdJpLrKu0kr30SDJLyZr
WXQ6hPgbMLX+VKzxUQb/1gQK8fsJb+po92zWwmbU+0G6jQ3LGxWZR/H6GpIDrvSc
rYj27+d7TCIfWv1HO35NZtXq+fSGXGYyhz6tdhA6vT0CdljUb5StwOgTD3d+H8uG
L5CuVC+QiS7xn7QD9YcqAmyJz4W7+lehz6PMLlxM/Ennn+LKphqOxJS5Z4S5vdVe
V06G35nlANOtgrGUuFHOQQ4RAqr6OOt37bhgzgJwEw3+sdMvywv5
-----END CERTIFICATE-----
Generated at Thu Jul 3 05:58:05 2025 by rpki-client