Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/011810C00A1511F09EC90456762E951A.roa
File: 011810C00A1511F09EC90456762E951A.roa (raw, json)
Hash identifier: B7foglOqgw8uqaOLt5UJRj7iJDrtE9NoYnnXH6pUX1g=
Subject key identifier: AB:14:5E:84:56:FB:38:06:7F:EB:35:00:C6:88:7D:C8:E2:64:7D:AA
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0886
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/011810C00A1511F09EC90456762E951A.roa
Signing time: Wed 26 Mar 2025 07:36:18 +0000
ROA not before: Wed 26 Mar 2025 07:36:14 +0000
ROA not after: Thu 26 Mar 2026 07:36:14 +0000
asID: 4766
IP address blocks: 102.135.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 12 Apr 2025 00:06:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2182 (0x886)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Mar 26 07:36:14 2025 GMT
Not After : Mar 26 07:36:14 2026 GMT
Subject: CN=67e3ae72-5695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1a:df:c5:ec:a5:7f:d9:12:a6:e7:d5:91:65:
86:01:8d:2e:60:35:8b:51:fb:6e:c7:fb:b4:7d:5c:
6e:d6:dd:86:46:1b:e5:18:8d:de:18:a1:94:fc:ba:
5d:c6:1a:05:2e:18:50:a2:4b:ea:c0:ff:bd:06:a7:
0e:1b:80:51:38:eb:a1:82:5b:ba:46:6b:47:61:e0:
04:86:fb:6a:b6:6a:9b:30:42:82:4b:59:f6:c0:95:
b1:fd:c5:1d:3d:79:db:47:d7:8e:0a:66:98:b3:a3:
50:cb:61:5b:c2:48:54:b4:8d:df:62:43:71:6f:98:
f7:dc:35:9b:49:c2:97:f4:0f:cd:0d:f5:7a:a7:a5:
3f:b0:d6:55:5d:95:2b:8b:e3:5f:9c:e8:d7:d8:f7:
e4:fc:21:19:ad:85:99:e3:05:91:62:7f:ce:a6:26:
68:ff:c7:88:0d:2d:ca:17:8e:38:31:29:f8:df:a0:
43:97:a2:2e:d6:f3:04:f9:ea:a6:2d:2f:c0:df:d8:
dc:86:f5:09:a7:f9:c1:3c:42:85:e6:39:75:90:75:
05:ff:c7:2e:85:cc:0f:fd:a2:11:6b:62:a6:13:c3:
b3:c0:64:a8:db:93:d8:8c:03:29:ff:08:d9:b8:89:
93:34:47:46:73:51:1d:c0:a9:07:98:d2:24:fa:6d:
06:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:14:5E:84:56:FB:38:06:7F:EB:35:00:C6:88:7D:C8:E2:64:7D:AA
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/011810C00A1511F09EC90456762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.91.0/24
Signature Algorithm: sha256WithRSAEncryption
56:73:dd:16:71:86:a0:3d:51:dc:1e:4e:42:69:b7:fd:28:57:
59:47:b0:1d:96:1b:26:c7:eb:af:2f:c3:54:5c:01:da:aa:66:
e3:ad:85:4b:60:e7:0c:d8:aa:32:71:8b:81:a1:ac:dd:e2:4b:
0a:63:28:38:bc:04:a1:c2:da:2a:5e:29:19:69:d6:8a:8a:26:
1b:43:ba:bb:db:8e:e8:2b:95:f7:f9:a9:75:4f:ff:15:c8:dd:
f6:4f:89:d6:d4:96:9b:66:83:f9:e4:2b:21:53:24:64:a0:5a:
67:fa:0a:b9:61:df:aa:af:ea:34:13:d6:b5:80:8f:df:ab:d8:
68:32:be:68:29:0d:f5:7b:83:fa:73:6a:6e:6a:86:d1:e8:3d:
2b:3e:b9:fc:09:55:10:5e:c8:91:48:f6:84:c9:16:e7:0f:92:
0b:3e:ee:cf:d9:56:cb:c0:26:94:87:4d:12:fe:bd:23:c1:21:
cf:8f:c6:98:bf:50:42:6b:d7:d5:49:6b:b9:00:99:82:8a:89:
94:33:ca:2a:a0:c6:ad:16:2f:28:8b:44:b3:9e:34:02:e8:78:
9b:a6:b1:e7:c8:e3:49:47:43:8c:ac:89:17:a1:4b:87:4c:b4:
76:05:01:52:b5:b2:60:d7:a9:ac:5a:03:6c:06:04:60:66:b7:
51:a4:ce:9e
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCIYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNTAzMjYwNzM2MTRaFw0yNjAzMjYwNzM2MTRaMBgxFjAU
BgNVBAMTDTY3ZTNhZTcyLTU2OTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC4Gt/F7KV/2RKm59WRZYYBjS5gNYtR+27H+7R9XG7W3YZGG+UYjd4YoZT8
ul3GGgUuGFCiS+rA/70Gpw4bgFE466GCW7pGa0dh4ASG+2q2apswQoJLWfbAlbH9
xR09edtH144KZpizo1DLYVvCSFS0jd9iQ3FvmPfcNZtJwpf0D80N9XqnpT+w1lVd
lSuL41+c6NfY9+T8IRmthZnjBZFif86mJmj/x4gNLcoXjjgxKfjfoEOXoi7W8wT5
6qYtL8Df2NyG9Qmn+cE8QoXmOXWQdQX/xy6FzA/9ohFrYqYTw7PAZKjbk9iMAyn/
CNm4iZM0R0ZzUR3AqQeY0iT6bQZbAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUqxRe
hFb7OAZ/6zUAxoh9yOJkfaowHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3LzAxMTgxMEMwMEExNTExRjA5RUM5MDQ1Njc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmh1swDQYJKoZIhvcNAQEL
BQADggEBAFZz3RZxhqA9UdweTkJpt/0oV1lHsB2WGybH668vw1RcAdqqZuOthUtg
5wzYqjJxi4GhrN3iSwpjKDi8BKHC2ipeKRlp1oqKJhtDurvbjugrlff5qXVP/xXI
3fZPidbUlptmg/nkKyFTJGSgWmf6Crlh36qv6jQT1rWAj9+r2GgyvmgpDfV7g/pz
am5qhtHoPSs+ufwJVRBeyJFI9oTJFucPkgs+7s/ZVsvAJpSHTRL+vSPBIc+Pxpi/
UEJr19VJa7kAmYKKiZQzyiqgxq0WLyiLRLOeNALoeJumsefI40lHQ4ysiRehS4dM
tHYFAVK1smDXqaxaA2wGBGBmt1Gkzp4=
-----END CERTIFICATE-----
Generated at Thu Apr 10 04:28:55 2025 by rpki-client