Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367C8F5/FB11026A016C11EF98CC2F01017001B1/A49224C63ED011F09870CEC9DAE4EC9C.roa
File: A49224C63ED011F09870CEC9DAE4EC9C.roa (raw, json)
Hash identifier: OSuhvI721+aNOvOxPfDiyyj7Sr9nZrCMf4kt6CXovps=
Subject key identifier: FE:F1:83:4D:9C:B0:B9:F5:D2:08:61:39:B3:36:41:93:BC:4F:88:F4
Certificate issuer: /CN=F367C8F5AF/serialNumber=33F6581A98AC954F373A47098050D8FE2BF47E3D
Certificate serial: 01A9
Authority key identifier: 33:F6:58:1A:98:AC:95:4F:37:3A:47:09:80:50:D8:FE:2B:F4:7E:3D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/M_ZYGpislU83OkcJgFDY_iv0fj0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367C8F5/FB11026A016C11EF98CC2F01017001B1/A49224C63ED011F09870CEC9DAE4EC9C.roa
Signing time: Sun 01 Jun 2025 10:10:29 +0000
ROA not before: Sun 01 Jun 2025 10:10:24 +0000
ROA not after: Mon 31 Dec 2035 10:10:24 +0000
asID: 328977
IP address blocks: 2c0f:7340:fff0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367C8F5/FB11026A016C11EF98CC2F01017001B1/M_ZYGpislU83OkcJgFDY_iv0fj0.crl
rsync://rpki.afrinic.net/repository/member_repository/F367C8F5/FB11026A016C11EF98CC2F01017001B1/M_ZYGpislU83OkcJgFDY_iv0fj0.mft
rsync://rpki.afrinic.net/repository/afrinic/M_ZYGpislU83OkcJgFDY_iv0fj0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 10 Jun 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 425 (0x1a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367C8F5AF, serialNumber=33F6581A98AC954F373A47098050D8FE2BF47E3D
Validity
Not Before: Jun 1 10:10:24 2025 GMT
Not After : Dec 31 10:10:24 2035 GMT
Subject: CN=683c2715-0d86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:08:53:61:7a:d6:91:0d:36:67:26:12:f8:65:
f5:05:08:e8:0a:a9:61:62:ea:2e:02:00:bf:26:a2:
80:f1:2b:d6:8a:04:88:02:fa:02:ff:c3:42:e8:25:
68:48:cc:6f:b6:25:9f:0e:36:58:ab:6f:be:ab:b5:
c0:50:6f:c4:d1:9d:f2:24:8f:45:84:ad:aa:a5:b5:
9c:81:f3:e1:77:ef:4c:16:56:25:a3:0d:e3:4f:f5:
17:2d:40:98:4f:b4:c8:f7:49:94:da:65:cc:86:69:
01:cc:7d:d7:8c:62:5e:7b:c0:8f:1c:4c:cb:a4:ff:
cc:7b:54:53:68:55:f5:00:5c:87:2f:6f:0a:47:7b:
88:e4:ef:3c:08:74:e3:43:65:c0:7a:aa:19:4b:f4:
86:41:da:a9:51:41:54:24:e5:f8:c2:05:31:f6:92:
7a:c7:5c:9b:b9:30:11:69:93:72:2b:af:e8:5e:31:
c1:90:8b:35:32:79:98:3b:ad:47:7c:b4:e2:c3:85:
94:17:99:aa:e5:04:bb:8b:64:97:f2:37:a0:22:1c:
5a:10:2f:5f:c3:c7:1f:ce:d7:8a:a9:4c:8a:27:25:
4c:3c:64:c2:70:8a:0a:26:0a:ad:3e:f2:36:77:88:
8b:eb:43:89:7c:56:b0:d1:60:ad:2f:51:cc:f5:ce:
28:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:F1:83:4D:9C:B0:B9:F5:D2:08:61:39:B3:36:41:93:BC:4F:88:F4
X509v3 Authority Key Identifier:
keyid:33:F6:58:1A:98:AC:95:4F:37:3A:47:09:80:50:D8:FE:2B:F4:7E:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367C8F5/FB11026A016C11EF98CC2F01017001B1/M_ZYGpislU83OkcJgFDY_iv0fj0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/M_ZYGpislU83OkcJgFDY_iv0fj0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367C8F5/FB11026A016C11EF98CC2F01017001B1/A49224C63ED011F09870CEC9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:7340:fff0::/44
Signature Algorithm: sha256WithRSAEncryption
59:be:72:51:d7:77:80:42:1b:e4:01:48:7c:20:66:be:a2:30:
04:47:87:e3:69:26:e4:c0:ed:62:e5:b6:c0:39:04:be:b5:38:
f2:91:e0:d6:d3:4f:9c:76:09:3d:27:2c:84:8a:cc:b4:52:e9:
f6:cf:86:16:f7:3a:cc:59:8d:02:0e:88:d2:7d:de:68:a6:f8:
cd:fc:2e:90:0d:79:e4:69:14:44:cd:f1:80:55:93:7c:7d:ad:
fe:af:58:e9:64:2a:dd:b8:66:d5:90:b6:e8:31:b4:16:3f:33:
89:f0:53:5e:51:e9:1e:dd:8e:2a:c8:33:5e:a8:f4:76:5e:af:
8b:9c:7c:15:48:19:f7:ec:ee:6c:da:10:9d:b4:a8:3e:b1:b1:
e6:a9:cd:c9:63:ae:24:5b:5c:75:a1:93:e4:00:08:14:1c:b6:
03:e4:67:7b:9b:03:c9:61:44:23:a7:da:b5:f2:0c:1a:59:49:
90:d6:cb:f9:c4:6d:45:49:c3:0a:52:b0:97:d2:d0:1d:11:09:
7a:d1:3e:c8:ff:9e:04:fa:0e:de:b4:51:14:e7:b2:0e:55:d3:
d2:da:35:36:83:fe:32:19:f0:c4:fc:bc:f6:27:ff:a8:c2:e8:
af:b2:3d:e8:f6:01:a6:f6:f2:ca:56:08:79:9d:b9:05:f2:45:
98:4a:b6:f4
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgICAakwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
N0M4RjVBRjExMC8GA1UEBRMoMzNGNjU4MUE5OEFDOTU0RjM3M0E0NzA5ODA1MEQ4
RkUyQkY0N0UzRDAeFw0yNTA2MDExMDEwMjRaFw0zNTEyMzExMDEwMjRaMBgxFjAU
BgNVBAMTDTY4M2MyNzE1LTBkODYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDzCFNhetaRDTZnJhL4ZfUFCOgKqWFi6i4CAL8mooDxK9aKBIgC+gL/w0Lo
JWhIzG+2JZ8ONlirb76rtcBQb8TRnfIkj0WEraqltZyB8+F370wWViWjDeNP9Rct
QJhPtMj3SZTaZcyGaQHMfdeMYl57wI8cTMuk/8x7VFNoVfUAXIcvbwpHe4jk7zwI
dONDZcB6qhlL9IZB2qlRQVQk5fjCBTH2knrHXJu5MBFpk3Irr+heMcGQizUyeZg7
rUd8tOLDhZQXmarlBLuLZJfyN6AiHFoQL1/Dxx/O14qpTIonJUw8ZMJwigomCq0+
8jZ3iIvrQ4l8VrDRYK0vUcz1zijRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/vGD
TZywufXSCGE5szZBk7xPiPQwHwYDVR0jBBgwFoAUM/ZYGpislU83OkcJgFDY/iv0
fj0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdDOEY1L0ZCMTEwMjZBMDE2QzExRUY5OENDMkYwMTAxNzAwMUIxL01fWllH
cGlzbFU4M09rY0pnRkRZX2l2MGZqMC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL01fWllHcGlzbFU4M09rY0pnRkRZX2l2MGZqMC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjdDOEY1L0ZCMTEwMjZBMDE2QzExRUY5OENDMkYwMTAx
NzAwMUIxL0E0OTIyNEM2M0VEMDExRjA5ODcwQ0VDOURBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQsD3NA//AwDQYJKoZIhvcN
AQELBQADggEBAFm+clHXd4BCG+QBSHwgZr6iMARHh+NpJuTA7WLltsA5BL61OPKR
4NbTT5x2CT0nLISKzLRS6fbPhhb3OsxZjQIOiNJ93mim+M38LpANeeRpFETN8YBV
k3x9rf6vWOlkKt24ZtWQtugxtBY/M4nwU15R6R7djirIM16o9HZer4ucfBVIGffs
7mzaEJ20qD6xseapzcljriRbXHWhk+QACBQctgPkZ3ubA8lhRCOn2rXyDBpZSZDW
y/nEbUVJwwpSsJfS0B0RCXrRPsj/ngT6Dt60URTnsg5V09LaNTaD/jIZ8MT8vPYn
/6jC6K+yPej2Aab28spWCHmduQXyRZhKtvQ=
-----END CERTIFICATE-----
Generated at Sun Jun 8 09:06:46 2025 by rpki-client