Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/3D00E206321511F0A60E8891DAE4EC9C.roa
File: 3D00E206321511F0A60E8891DAE4EC9C.roa (raw, json)
Hash identifier: dDTWG9clGA/xXzUObGr3RJ++UYw8fFDNPo+AZdpGo5g=
Subject key identifier: B8:3F:78:28:63:99:66:46:B5:1F:7C:39:9D:04:AF:5E:21:C7:7F:99
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0A37
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/3D00E206321511F0A60E8891DAE4EC9C.roa
Signing time: Fri 16 May 2025 05:18:45 +0000
ROA not before: Fri 16 May 2025 05:18:41 +0000
ROA not after: Sat 16 May 2026 05:18:41 +0000
asID: 834
IP address blocks: 102.135.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 08 Jun 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2615 (0xa37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: May 16 05:18:41 2025 GMT
Not After : May 16 05:18:41 2026 GMT
Subject: CN=6826cab5-3929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d0:cf:9e:b1:f0:43:70:b0:86:b6:7d:1f:45:
e1:c9:f8:77:85:a9:31:9e:80:1e:66:89:20:40:f4:
dc:86:fd:8a:bb:1b:e4:28:7b:f7:44:f7:40:30:cb:
60:10:62:91:21:b8:20:96:1a:d0:91:62:94:9b:7b:
dd:39:bc:87:31:57:01:72:65:40:30:6f:50:7e:b5:
37:c7:35:83:69:3b:3d:f5:67:09:f7:de:aa:30:50:
36:7e:93:e1:3e:0b:c3:1b:21:42:09:84:67:71:83:
5e:18:a2:03:9f:78:6b:bb:4d:e9:47:6b:37:3c:07:
9d:cf:ee:80:2a:e3:27:24:78:d7:0c:8d:5f:48:d1:
69:9f:8d:3f:59:d9:30:db:b3:2d:cb:a8:b6:53:c0:
c5:fe:f3:5d:51:74:ac:bb:9b:ca:43:60:45:f8:b1:
ac:78:76:2f:76:33:f5:fd:37:87:84:fd:5c:4b:b4:
c2:0c:d9:95:5d:15:a2:61:2a:55:1c:37:e7:f6:77:
9c:0f:14:5e:6e:0a:17:35:63:c9:54:f5:bf:7d:bb:
49:53:6f:90:0e:db:6e:4b:6c:9d:d8:14:e0:fb:2c:
09:de:35:0a:82:25:d4:98:31:89:15:ca:05:10:4f:
f5:4b:cd:d0:78:40:cd:aa:d5:f7:2c:f4:a5:5f:26:
32:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:3F:78:28:63:99:66:46:B5:1F:7C:39:9D:04:AF:5E:21:C7:7F:99
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/3D00E206321511F0A60E8891DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.24.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:b9:be:24:3f:6d:52:ec:83:bd:dc:c2:e6:bc:67:e0:aa:25:
18:e4:3b:48:0f:c9:49:eb:88:44:65:66:75:12:23:d0:8a:63:
8d:d8:74:18:eb:3e:a0:5a:ca:af:1f:c2:7c:42:2b:d8:5c:20:
f4:af:b2:41:44:ab:74:11:36:a5:07:50:40:79:e3:91:ca:ed:
4b:19:d8:30:8c:ce:e9:70:f6:e4:b4:d2:9e:9e:cf:a9:f1:a7:
d7:15:3c:76:cd:df:46:f6:d8:9d:39:1c:b2:8d:1f:df:93:e4:
90:09:6e:b3:c2:f8:b5:70:f9:59:de:f1:87:6e:4b:4a:02:10:
f3:32:a6:be:52:27:25:4a:f2:ab:b5:ee:d4:c5:ba:72:b0:69:
e8:d6:d6:2d:3b:51:e3:d6:d4:ae:d0:92:7b:a7:86:e1:8b:51:
b2:0d:65:5e:fb:22:db:7c:de:8a:ca:76:2a:c0:47:d5:bf:73:
a2:47:82:ec:59:be:33:3c:e6:34:a7:c6:be:fa:39:16:98:a5:
e9:3b:f6:d9:18:87:08:ce:f4:92:65:54:04:a6:7f:73:5d:55:
00:f7:de:46:85:b9:da:92:ed:7b:50:3d:a5:56:c3:8c:d9:ae:
69:98:57:14:c3:01:e6:1b:65:8c:10:76:d3:9f:88:2e:44:e3:
43:8e:7a:01
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCjcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNTA1MTYwNTE4NDFaFw0yNjA1MTYwNTE4NDFaMBgxFjAU
BgNVBAMTDTY4MjZjYWI1LTM5MjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC30M+esfBDcLCGtn0fReHJ+HeFqTGegB5miSBA9NyG/Yq7G+Qoe/dE90Aw
y2AQYpEhuCCWGtCRYpSbe905vIcxVwFyZUAwb1B+tTfHNYNpOz31Zwn33qowUDZ+
k+E+C8MbIUIJhGdxg14YogOfeGu7TelHazc8B53P7oAq4yckeNcMjV9I0WmfjT9Z
2TDbsy3LqLZTwMX+811RdKy7m8pDYEX4sax4di92M/X9N4eE/VxLtMIM2ZVdFaJh
KlUcN+f2d5wPFF5uChc1Y8lU9b99u0lTb5AO225LbJ3YFOD7LAneNQqCJdSYMYkV
ygUQT/VLzdB4QM2q1fcs9KVfJjLrAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUuD94
KGOZZka1H3w5nQSvXiHHf5kwHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3LzNEMDBFMjA2MzIxNTExRjBBNjBFODg5MURBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmhxgwDQYJKoZIhvcNAQEL
BQADggEBAL25viQ/bVLsg73cwua8Z+CqJRjkO0gPyUnriERlZnUSI9CKY43YdBjr
PqBayq8fwnxCK9hcIPSvskFEq3QRNqUHUEB545HK7UsZ2DCMzulw9uS00p6ez6nx
p9cVPHbN30b22J05HLKNH9+T5JAJbrPC+LVw+Vne8YduS0oCEPMypr5SJyVK8qu1
7tTFunKwaejW1i07UePW1K7QknunhuGLUbINZV77Itt83orKdirAR9W/c6JHguxZ
vjM85jSnxr76ORaYpek79tkYhwjO9JJlVASmf3NdVQD33kaFudqS7XtQPaVWw4zZ
rmmYVxTDAeYbZYwQdtOfiC5E40OOegE=
-----END CERTIFICATE-----
Generated at Fri Jun 6 16:51:17 2025 by rpki-client