Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/E9B7F0103C8911F0BCDD657ADAE4EC9C.roa
File: E9B7F0103C8911F0BCDD657ADAE4EC9C.roa (raw, json)
Hash identifier: vAnTb85w/AdrqCqbaAjSV+J/HJo5vJEt730TTlC0U2s=
Subject key identifier: 88:8B:86:1B:46:E2:D1:C2:7C:3D:67:70:A9:8A:E4:2A:F7:D3:A2:99
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0ACC
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/E9B7F0103C8911F0BCDD657ADAE4EC9C.roa
Signing time: Thu 29 May 2025 12:39:08 +0000
ROA not before: Thu 29 May 2025 12:39:03 +0000
ROA not after: Fri 29 May 2026 12:39:03 +0000
asID: 2914
IP address blocks: 102.135.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 07 Jun 2025 00:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2764 (0xacc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: May 29 12:39:03 2025 GMT
Not After : May 29 12:39:03 2026 GMT
Subject: CN=6838556c-5a6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:0c:65:62:6d:c0:c6:b9:cd:05:ff:6f:e4:81:
9f:04:ea:10:d6:00:7e:0e:49:e9:02:8e:31:99:0b:
2a:2d:a4:fa:e1:ef:89:6b:89:61:74:8a:a4:93:a0:
5b:3d:48:49:c2:69:1d:a2:6f:42:5f:de:fe:8f:89:
49:fc:46:95:c9:dc:eb:69:bc:aa:e4:ac:3d:aa:1c:
57:df:36:9c:ac:5b:6d:05:4d:19:fd:12:f3:93:c3:
d5:fa:00:34:dc:dc:b5:73:fc:dd:bc:fb:a6:91:bb:
ee:2a:57:29:2a:96:56:8b:2f:b1:b6:1e:61:ac:7e:
11:cc:98:86:79:02:ea:b2:47:f7:3a:e8:7a:93:a8:
6c:88:4f:6d:bd:2b:40:a5:fa:52:b0:67:fc:6c:6f:
ee:8f:c6:8e:95:dd:c4:31:f8:d0:6e:0f:48:5e:8b:
93:06:9a:63:ea:fe:ab:75:73:9b:a8:8c:f9:25:67:
9f:ac:d0:5a:0f:2b:f1:9c:e1:ae:78:ba:72:50:29:
4a:af:e8:34:50:66:1f:89:93:0a:bf:77:ac:d4:23:
52:6d:02:ba:53:1b:12:d2:ff:1a:39:d0:3f:bc:06:
63:a6:e9:e1:7f:13:94:26:8f:e6:7a:19:70:ea:d8:
35:ef:56:38:ff:c1:0f:66:d3:d1:a9:c1:7d:ee:12:
8e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:8B:86:1B:46:E2:D1:C2:7C:3D:67:70:A9:8A:E4:2A:F7:D3:A2:99
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/E9B7F0103C8911F0BCDD657ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.98.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:da:43:f5:85:c8:f5:3f:49:76:dc:13:f7:24:7d:55:7d:00:
e4:26:db:0d:eb:0c:d5:a8:2b:61:ad:b6:ec:e0:c6:05:d3:c0:
61:9f:94:d1:17:35:c7:2c:b0:36:f0:b1:83:28:6c:3d:93:6c:
ad:8e:d4:0c:24:f3:44:2a:06:7a:1c:e6:98:c3:14:6b:72:c1:
6d:65:a4:c3:f4:eb:a3:03:ff:3e:ef:6d:41:a5:41:b6:2b:5b:
17:82:89:f1:a2:63:a4:26:16:21:b9:eb:6c:85:61:a1:5d:c5:
1c:59:bf:e9:0d:20:32:75:f7:eb:0e:e1:9b:f4:ac:fa:a9:9c:
d9:f2:1b:ee:6b:75:7b:8a:6d:d7:aa:26:4c:fe:ce:d1:f7:4b:
52:7d:91:d5:b5:07:8c:80:13:73:ae:80:59:84:a1:a2:33:c8:
81:cb:85:4f:d4:b1:df:94:59:1c:bb:b4:45:bd:be:3d:22:5a:
71:27:f6:3b:50:4f:86:f8:b9:6f:3d:03:b3:0f:be:62:05:90:
33:39:15:b9:f5:32:53:08:b6:ed:79:d2:f9:f2:7c:cc:6c:0a:
80:cb:6d:f1:42:4b:47:20:ed:ab:c9:ec:21:86:61:3f:81:06:
c9:34:73:bc:f6:52:b0:2e:4b:50:f7:60:b4:4b:f6:fb:24:8f:
0d:56:82:df
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCswwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNTA1MjkxMjM5MDNaFw0yNjA1MjkxMjM5MDNaMBgxFjAU
BgNVBAMTDTY4Mzg1NTZjLTVhNmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDZDGVibcDGuc0F/2/kgZ8E6hDWAH4OSekCjjGZCyotpPrh74lriWF0iqST
oFs9SEnCaR2ib0Jf3v6PiUn8RpXJ3OtpvKrkrD2qHFffNpysW20FTRn9EvOTw9X6
ADTc3LVz/N28+6aRu+4qVykqllaLL7G2HmGsfhHMmIZ5AuqyR/c66HqTqGyIT229
K0Cl+lKwZ/xsb+6Pxo6V3cQx+NBuD0hei5MGmmPq/qt1c5uojPklZ5+s0FoPK/Gc
4a54unJQKUqv6DRQZh+Jkwq/d6zUI1JtArpTGxLS/xo50D+8BmOm6eF/E5Qmj+Z6
GXDq2DXvVjj/wQ9m09GpwX3uEo4RAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUiIuG
G0bi0cJ8PWdwqYrkKvfTopkwHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3L0U5QjdGMDEwM0M4OTExRjBCQ0RENjU3QURBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmh2IwDQYJKoZIhvcNAQEL
BQADggEBAKraQ/WFyPU/SXbcE/ckfVV9AOQm2w3rDNWoK2GttuzgxgXTwGGflNEX
NccssDbwsYMobD2TbK2O1Awk80QqBnoc5pjDFGtywW1lpMP066MD/z7vbUGlQbYr
WxeCifGiY6QmFiG562yFYaFdxRxZv+kNIDJ19+sO4Zv0rPqpnNnyG+5rdXuKbdeq
Jkz+ztH3S1J9kdW1B4yAE3OugFmEoaIzyIHLhU/Usd+UWRy7tEW9vj0iWnEn9jtQ
T4b4uW89A7MPvmIFkDM5Fbn1MlMItu150vnyfMxsCoDLbfFCS0cg7avJ7CGGYT+B
Bsk0c7z2UrAuS1D3YLRL9vskjw1Wgt8=
-----END CERTIFICATE-----
Generated at Thu Jun 5 18:23:08 2025 by rpki-client