Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/A69AB290096C11F0972EA64F762E951A.roa
File: A69AB290096C11F0972EA64F762E951A.roa (raw, json)
Hash identifier: xNpYV0r0G9WAm17vdK5JM4Wt+7wURa+ObUYDR/u7SJw=
Subject key identifier: 13:E9:38:85:07:A7:3F:DB:3B:18:A5:68:A6:49:FF:34:BF:11:23:82
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 081A
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/A69AB290096C11F0972EA64F762E951A.roa
Signing time: Tue 25 Mar 2025 11:31:11 +0000
ROA not before: Tue 25 Mar 2025 11:31:07 +0000
ROA not after: Wed 25 Mar 2026 11:31:07 +0000
asID: 2914
IP address blocks: 102.135.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 06:24:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2074 (0x81a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Mar 25 11:31:07 2025 GMT
Not After : Mar 25 11:31:07 2026 GMT
Subject: CN=67e293fe-6904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:7a:a1:a4:49:fc:c3:17:cf:7d:ea:7d:29:54:
30:46:d1:13:34:16:73:c9:b4:df:2c:ac:46:63:e7:
42:25:71:80:23:eb:b7:3c:f8:d7:05:ef:46:af:52:
8d:9c:df:61:77:f2:48:55:f0:1f:c4:68:0f:c4:94:
13:5b:93:44:ea:d2:f6:cd:e3:a8:e6:e8:a4:35:bc:
bc:e9:03:76:98:69:ac:f6:dc:f1:4f:9d:a0:31:2c:
2b:d4:2e:51:2a:42:9c:e2:95:9b:70:0a:53:58:3f:
a3:e4:0c:ce:aa:a0:ee:d9:97:79:54:24:5b:ea:f0:
09:d4:65:e8:2c:6f:f9:05:f6:a8:15:47:83:7f:b3:
e3:69:43:25:39:35:fd:cd:e9:24:83:81:82:c0:99:
8a:fb:8d:17:6a:86:00:72:1d:6e:d6:21:00:76:2d:
e8:f3:87:6c:c9:f1:00:03:23:91:b8:81:5a:27:88:
4d:53:99:f8:5f:7a:e7:ca:48:9b:76:13:aa:95:6b:
7f:46:36:51:a5:2b:41:a9:ae:f3:db:88:c2:ef:37:
f7:a0:32:a7:ff:4e:4c:fc:b0:c2:2d:7b:fb:64:fe:
f1:5e:65:2d:cf:40:41:30:ed:dc:c7:48:0b:cb:5c:
fe:6f:db:3e:39:c6:6f:d2:aa:53:45:8d:b4:69:75:
f9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:E9:38:85:07:A7:3F:DB:3B:18:A5:68:A6:49:FF:34:BF:11:23:82
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/A69AB290096C11F0972EA64F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.72.0/24
Signature Algorithm: sha256WithRSAEncryption
76:a6:bf:70:08:68:ab:24:a0:08:87:e4:77:04:38:27:35:dc:
08:23:7e:85:55:87:7c:43:0d:eb:c4:b2:80:6a:12:63:a9:e5:
4e:54:0d:f9:e7:d5:05:73:2f:c3:df:1e:64:d6:a2:39:8d:cf:
9f:ef:f9:77:5b:a4:ad:70:23:e4:5f:33:15:4f:3d:6e:bc:81:
7d:c9:26:4d:5c:63:65:cc:a3:30:1f:4c:55:c6:8f:ba:50:9a:
a2:ff:ee:47:35:c8:47:87:7f:f4:15:d6:88:42:54:c5:92:4c:
21:78:33:20:5c:81:92:6d:17:f9:e4:5c:1c:39:54:e2:68:be:
cf:67:7a:f0:e0:27:fc:97:1e:34:af:e9:2e:f0:10:93:75:68:
28:61:e5:fd:54:a0:4e:c0:3c:70:13:75:59:5b:b6:9f:a3:88:
71:53:a3:9d:44:fb:59:c1:2a:17:a2:6a:65:f3:b2:b7:c6:56:
fd:f7:bf:dc:f8:02:f9:6c:3f:26:33:52:84:17:c2:f7:70:5f:
63:48:3a:2b:b7:a3:35:03:f1:d7:31:0b:dd:68:cf:3d:e6:9c:
84:95:bf:49:ee:5e:a8:f1:fd:60:fc:1e:9d:02:b4:f7:b8:2f:
e4:22:fa:bd:de:b7:fb:d3:e8:70:ae:57:1a:1c:cd:67:2d:fe:
17:37:42:b2
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCBowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNTAzMjUxMTMxMDdaFw0yNjAzMjUxMTMxMDdaMBgxFjAU
BgNVBAMTDTY3ZTI5M2ZlLTY5MDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDmeqGkSfzDF8996n0pVDBG0RM0FnPJtN8srEZj50IlcYAj67c8+NcF70av
Uo2c32F38khV8B/EaA/ElBNbk0Tq0vbN46jm6KQ1vLzpA3aYaaz23PFPnaAxLCvU
LlEqQpzilZtwClNYP6PkDM6qoO7Zl3lUJFvq8AnUZegsb/kF9qgVR4N/s+NpQyU5
Nf3N6SSDgYLAmYr7jRdqhgByHW7WIQB2Lejzh2zJ8QADI5G4gVoniE1TmfhfeufK
SJt2E6qVa39GNlGlK0GprvPbiMLvN/egMqf/Tkz8sMIte/tk/vFeZS3PQEEw7dzH
SAvLXP5v2z45xm/SqlNFjbRpdfnRAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUE+k4
hQenP9s7GKVopkn/NL8RI4IwHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3L0E2OUFCMjkwMDk2QzExRjA5NzJFQTY0Rjc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmh0gwDQYJKoZIhvcNAQEL
BQADggEBAHamv3AIaKskoAiH5HcEOCc13AgjfoVVh3xDDevEsoBqEmOp5U5UDfnn
1QVzL8PfHmTWojmNz5/v+XdbpK1wI+RfMxVPPW68gX3JJk1cY2XMozAfTFXGj7pQ
mqL/7kc1yEeHf/QV1ohCVMWSTCF4MyBcgZJtF/nkXBw5VOJovs9nevDgJ/yXHjSv
6S7wEJN1aChh5f1UoE7APHATdVlbtp+jiHFTo51E+1nBKheiamXzsrfGVv33v9z4
AvlsPyYzUoQXwvdwX2NIOiu3ozUD8dcxC91ozz3mnISVv0nuXqjx/WD8Hp0CtPe4
L+Qi+r3et/vT6HCuVxoczWct/hc3QrI=
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:52:06 2025 by rpki-client