Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/3124E4A43ADB11F0B661DF8CDAE4EC9C.roa
File: 3124E4A43ADB11F0B661DF8CDAE4EC9C.roa (raw, json)
Hash identifier: /KfsPoT5qUOvysKqMbWcrWqL7gfEaFiGmlBdWNzpvz4=
Subject key identifier: 4B:6E:AA:B1:6C:98:A0:D1:E0:7B:08:02:DC:B7:01:72:B3:69:79:DE
Certificate issuer: /CN=F369BF27AF/serialNumber=6057F489F5ADC4E9269C260D702C81AAB6AA2E6D
Certificate serial: 08E0
Authority key identifier: 60:57:F4:89:F5:AD:C4:E9:26:9C:26:0D:70:2C:81:AA:B6:AA:2E:6D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YFf0ifWtxOkmnCYNcCyBqraqLm0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/3124E4A43ADB11F0B661DF8CDAE4EC9C.roa
Signing time: Tue 27 May 2025 09:15:55 +0000
ROA not before: Tue 27 May 2025 09:15:50 +0000
ROA not after: Sun 20 May 2035 09:15:50 +0000
asID: 37049
IP address blocks: 41.242.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/YFf0ifWtxOkmnCYNcCyBqraqLm0.crl
rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/YFf0ifWtxOkmnCYNcCyBqraqLm0.mft
rsync://rpki.afrinic.net/repository/afrinic/YFf0ifWtxOkmnCYNcCyBqraqLm0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Jun 2025 01:34:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2272 (0x8e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369BF27AF, serialNumber=6057F489F5ADC4E9269C260D702C81AAB6AA2E6D
Validity
Not Before: May 27 09:15:50 2025 GMT
Not After : May 20 09:15:50 2035 GMT
Subject: CN=683582cb-d439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:67:30:38:59:2d:77:54:7a:4e:93:8e:1a:63:
c6:49:d8:78:a7:d2:20:42:3e:0d:ba:55:8a:08:c5:
98:9a:49:04:23:0f:b2:c3:f5:18:fb:fe:a6:83:fd:
e0:dd:fc:1b:56:2d:3d:56:a8:b7:b9:8f:7c:4d:ef:
74:3a:3e:1f:16:33:d0:90:33:56:3a:33:89:98:4a:
fa:80:29:f9:1f:4d:25:43:45:9c:bc:8d:56:12:69:
08:54:74:d3:4a:8b:a7:ba:c9:43:93:9c:30:e8:39:
5a:8c:0a:a5:84:da:73:6f:fc:94:3c:79:4b:98:75:
77:02:5a:05:78:a3:26:16:40:e2:d1:d2:5e:3b:f7:
90:53:68:77:23:54:86:4f:64:a7:a8:ae:5a:af:1b:
cc:9e:ec:d6:27:8f:5f:98:e2:65:dd:72:ef:56:1a:
8c:b0:18:a8:9b:8e:61:43:c2:40:31:f6:eb:af:f3:
c3:6e:42:a7:e6:d9:d9:92:03:51:35:ea:bb:8f:b6:
7c:b3:dc:5c:5f:fd:87:d7:7d:c5:ac:37:31:7d:08:
e6:29:a7:95:e0:5e:db:bb:5c:e3:f2:e5:76:fb:44:
37:17:ee:1c:56:f6:62:bf:6e:ef:f9:31:fe:01:ac:
ed:70:e6:c0:c4:a6:d5:58:4f:2a:96:ef:b8:a9:e1:
6e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:6E:AA:B1:6C:98:A0:D1:E0:7B:08:02:DC:B7:01:72:B3:69:79:DE
X509v3 Authority Key Identifier:
keyid:60:57:F4:89:F5:AD:C4:E9:26:9C:26:0D:70:2C:81:AA:B6:AA:2E:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/YFf0ifWtxOkmnCYNcCyBqraqLm0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YFf0ifWtxOkmnCYNcCyBqraqLm0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/3124E4A43ADB11F0B661DF8CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.242.160.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:e1:b1:21:72:05:a7:c4:05:c1:4b:5a:75:90:44:6f:d1:a7:
93:2d:d2:a2:c2:9b:9a:f9:53:16:23:dc:f7:80:38:5b:34:5e:
82:68:fb:b3:d8:f5:62:c1:a2:df:10:6b:48:ed:41:d7:18:a9:
c7:c1:cd:a6:53:79:fe:b8:2e:52:9e:e1:3b:37:a7:74:9e:18:
20:f6:4e:f9:ed:54:de:e8:2f:b2:79:9c:b6:a6:69:58:ad:26:
66:70:41:7b:83:df:c7:69:25:0c:d4:6d:04:ae:c8:5e:5d:02:
6f:19:89:23:d9:41:c2:1f:9e:b8:48:31:d4:42:62:a4:dc:25:
a6:5a:ba:21:b1:59:7d:d2:29:9d:47:f8:8f:81:e4:f1:4c:27:
32:6d:1c:c2:8c:e1:b3:27:09:78:71:c0:a6:ae:80:e1:ff:12:
d1:33:50:29:c5:a6:23:1c:46:c4:ac:16:4c:43:85:e3:60:f2:
26:f2:33:f9:29:a9:1e:15:75:ad:80:a7:ba:0b:a2:00:49:38:
bb:88:69:28:da:75:cb:92:9c:84:4c:74:b3:48:0b:6b:57:52:
4b:aa:8c:5b:bf:6b:a1:0e:92:76:2c:e5:08:d9:c5:ff:23:34:
79:2a:c7:d0:6c:a9:9d:17:c5:fd:36:96:72:fa:d8:f3:6a:2e:
10:d1:de:96
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCOAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OUJGMjdBRjExMC8GA1UEBRMoNjA1N0Y0ODlGNUFEQzRFOTI2OUMyNjBENzAyQzgx
QUFCNkFBMkU2RDAeFw0yNTA1MjcwOTE1NTBaFw0zNTA1MjAwOTE1NTBaMBgxFjAU
BgNVBAMTDTY4MzU4MmNiLWQ0MzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDFZzA4WS13VHpOk44aY8ZJ2Hin0iBCPg26VYoIxZiaSQQjD7LD9Rj7/qaD
/eDd/BtWLT1WqLe5j3xN73Q6Ph8WM9CQM1Y6M4mYSvqAKfkfTSVDRZy8jVYSaQhU
dNNKi6e6yUOTnDDoOVqMCqWE2nNv/JQ8eUuYdXcCWgV4oyYWQOLR0l4795BTaHcj
VIZPZKeorlqvG8ye7NYnj1+Y4mXdcu9WGoywGKibjmFDwkAx9uuv88NuQqfm2dmS
A1E16ruPtnyz3Fxf/YfXfcWsNzF9COYpp5XgXtu7XOPy5Xb7RDcX7hxW9mK/bu/5
Mf4BrO1w5sDEptVYTyqW77ip4W67AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUS26q
sWyYoNHgewgC3LcBcrNped4wHwYDVR0jBBgwFoAUYFf0ifWtxOkmnCYNcCyBqraq
Lm0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjlCRjI3LzQ1MTI0OERBOTFFQTExRTlCQTkyODQ3QUY4QUVBMjI4L1lGZjBp
Zld0eE9rbW5DWU5jQ3lCcXJhcUxtMC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1lGZjBpZld0eE9rbW5DWU5jQ3lCcXJhcUxtMC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjlCRjI3LzQ1MTI0OERBOTFFQTExRTlCQTkyODQ3QUY4
QUVBMjI4LzMxMjRFNEE0M0FEQjExRjBCNjYxREY4Q0RBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAp8qAwDQYJKoZIhvcNAQEL
BQADggEBAKbhsSFyBafEBcFLWnWQRG/Rp5Mt0qLCm5r5UxYj3PeAOFs0XoJo+7PY
9WLBot8Qa0jtQdcYqcfBzaZTef64LlKe4Ts3p3SeGCD2TvntVN7oL7J5nLamaVit
JmZwQXuD38dpJQzUbQSuyF5dAm8ZiSPZQcIfnrhIMdRCYqTcJaZauiGxWX3SKZ1H
+I+B5PFMJzJtHMKM4bMnCXhxwKaugOH/EtEzUCnFpiMcRsSsFkxDheNg8ibyM/kp
qR4Vda2Ap7oLogBJOLuIaSjadcuSnIRMdLNIC2tXUkuqjFu/a6EOknYs5QjZxf8j
NHkqx9BsqZ0Xxf02lnL62PNqLhDR3pY=
-----END CERTIFICATE-----
Generated at Sat Jun 7 10:49:04 2025 by rpki-client