Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369E9B3/EE40A58A558C11EFAFCCFBA0762E951A/A43C41D4120011F09D92528F762E951A.roa
File: A43C41D4120011F09D92528F762E951A.roa (raw, json)
Hash identifier: +C2vaGXsFk0vULg3LSJ6J09JaHsN+iiW87QQdSsPSN8=
Subject key identifier: 63:6E:AA:1A:0B:3D:98:81:17:AC:E7:51:A7:0F:4C:AB:09:6E:1B:FB
Certificate issuer: /CN=F369E9B3AF/serialNumber=F574B16BA86AD96E00DEDACD6341F9A824EA47A7
Certificate serial: 0102
Authority key identifier: F5:74:B1:6B:A8:6A:D9:6E:00:DE:DA:CD:63:41:F9:A8:24:EA:47:A7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/9XSxa6hq2W4A3trNY0H5qCTqR6c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369E9B3/EE40A58A558C11EFAFCCFBA0762E951A/A43C41D4120011F09D92528F762E951A.roa
Signing time: Sat 05 Apr 2025 09:30:41 +0000
ROA not before: Sat 05 Apr 2025 09:30:36 +0000
ROA not after: Mon 30 Mar 2026 09:30:36 +0000
asID: 329472
IP address blocks: 102.208.48.0/22 maxlen: 24
2c0f:54c0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369E9B3/EE40A58A558C11EFAFCCFBA0762E951A/9XSxa6hq2W4A3trNY0H5qCTqR6c.crl
rsync://rpki.afrinic.net/repository/member_repository/F369E9B3/EE40A58A558C11EFAFCCFBA0762E951A/9XSxa6hq2W4A3trNY0H5qCTqR6c.mft
rsync://rpki.afrinic.net/repository/afrinic/9XSxa6hq2W4A3trNY0H5qCTqR6c.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 19 Apr 2025 04:45:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 258 (0x102)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369E9B3AF, serialNumber=F574B16BA86AD96E00DEDACD6341F9A824EA47A7
Validity
Not Before: Apr 5 09:30:36 2025 GMT
Not After : Mar 30 09:30:36 2026 GMT
Subject: CN=67f0f841-ee3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0c:80:4f:e3:64:a4:65:31:f6:85:eb:4f:4a:
a3:da:69:23:05:d2:a5:b2:9b:9c:2a:fd:b6:3a:01:
3b:e0:0c:43:bd:05:fc:87:e7:9e:77:e4:a4:7f:ff:
e6:88:24:f5:3b:a2:13:bb:ff:b0:75:2e:91:21:fa:
38:ad:57:73:f4:40:3a:22:74:72:fb:24:05:ce:b1:
83:d5:4e:8e:f2:0f:3b:a1:20:c8:5f:34:df:c0:a0:
ae:df:8c:e9:7d:39:1d:8b:ae:d6:57:ed:5b:f7:f8:
06:86:e1:34:d5:67:86:d9:0b:de:00:fb:67:64:37:
6f:d5:d7:35:8b:f6:f9:b6:27:e5:09:9c:de:4b:e9:
39:37:7d:8b:6e:74:11:7d:d2:19:fc:25:d2:fc:89:
34:0c:d8:c7:90:34:81:98:6b:fa:ce:e9:ec:06:79:
09:82:98:59:4f:07:bc:ad:93:5a:01:e2:6b:3e:f3:
62:7a:51:72:91:0a:cb:d8:d4:de:28:e4:f8:9a:f2:
e2:ab:78:d4:ae:af:cf:3c:41:57:b9:12:97:6e:79:
aa:b3:54:ff:46:44:62:72:fa:56:ee:d1:a9:5d:5d:
e9:42:f0:67:21:e8:57:52:13:e3:2e:68:a5:d1:16:
76:4b:2f:34:d4:36:fa:90:7a:c8:5c:b6:4d:e5:77:
17:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:6E:AA:1A:0B:3D:98:81:17:AC:E7:51:A7:0F:4C:AB:09:6E:1B:FB
X509v3 Authority Key Identifier:
keyid:F5:74:B1:6B:A8:6A:D9:6E:00:DE:DA:CD:63:41:F9:A8:24:EA:47:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369E9B3/EE40A58A558C11EFAFCCFBA0762E951A/9XSxa6hq2W4A3trNY0H5qCTqR6c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9XSxa6hq2W4A3trNY0H5qCTqR6c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369E9B3/EE40A58A558C11EFAFCCFBA0762E951A/A43C41D4120011F09D92528F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.208.48.0/22
IPv6:
2c0f:54c0::/32
Signature Algorithm: sha256WithRSAEncryption
94:97:09:2f:62:c9:7d:73:9b:e9:41:1c:c7:2c:23:22:93:52:
24:b9:07:c8:8c:81:28:71:7f:ba:4c:c8:87:8b:01:c6:f3:f6:
65:8c:ef:d6:87:80:f4:62:27:73:ca:77:43:ee:01:7c:b9:fa:
bf:05:2e:29:94:c1:4f:09:ee:40:95:8c:e5:98:88:5e:0b:e3:
b2:ca:0f:e6:ac:2a:09:45:01:b1:fa:7d:82:3b:a7:dc:cc:a3:
a3:45:0b:73:2d:87:81:6f:e3:9d:d0:bf:a2:c9:f3:1e:7a:44:
5b:99:86:1c:bd:f0:f1:cf:88:42:d2:0d:7f:81:b0:e9:e8:ec:
37:bc:0b:74:6b:5d:fd:ff:40:4d:04:95:7a:eb:36:3d:c9:29:
ab:da:67:9f:d5:87:79:57:22:11:b7:e9:4a:40:71:6d:ee:d8:
4c:fa:e8:bc:a7:e8:df:26:ac:8f:35:23:cf:58:e7:eb:2c:3e:
bc:da:2d:85:4f:38:6b:25:78:9c:c2:c6:91:bc:25:3b:56:15:
0e:60:41:67:ce:6d:44:a6:80:8f:d2:93:12:7b:db:62:3f:4f:
1a:2f:07:63:aa:a2:54:08:5f:00:23:81:2e:6f:df:83:55:01:
b9:53:7a:32:fc:63:35:06:16:66:78:83:4d:64:71:87:2e:db:
1c:9c:6f:c7
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgICAQIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OUU5QjNBRjExMC8GA1UEBRMoRjU3NEIxNkJBODZBRDk2RTAwREVEQUNENjM0MUY5
QTgyNEVBNDdBNzAeFw0yNTA0MDUwOTMwMzZaFw0yNjAzMzAwOTMwMzZaMBgxFjAU
BgNVBAMTDTY3ZjBmODQxLWVlM2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDFDIBP42SkZTH2hetPSqPaaSMF0qWym5wq/bY6ATvgDEO9BfyH55535KR/
/+aIJPU7ohO7/7B1LpEh+jitV3P0QDoidHL7JAXOsYPVTo7yDzuhIMhfNN/AoK7f
jOl9OR2LrtZX7Vv3+AaG4TTVZ4bZC94A+2dkN2/V1zWL9vm2J+UJnN5L6Tk3fYtu
dBF90hn8JdL8iTQM2MeQNIGYa/rO6ewGeQmCmFlPB7ytk1oB4ms+82J6UXKRCsvY
1N4o5Pia8uKreNSur888QVe5EpdueaqzVP9GRGJy+lbu0aldXelC8Gch6FdSE+Mu
aKXRFnZLLzTUNvqQeshctk3ldxfXAgMBAAGjggK0MIICsDAdBgNVHQ4EFgQUY26q
Ggs9mIEXrOdRpw9MqwluG/swHwYDVR0jBBgwFoAU9XSxa6hq2W4A3trNY0H5qCTq
R6cwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjlFOUIzL0VFNDBBNThBNTU4QzExRUZBRkNDRkJBMDc2MkU5NTFBLzlYU3hh
NmhxMlc0QTN0ck5ZMEg1cUNUcVI2Yy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzlYU3hhNmhxMlc0QTN0ck5ZMEg1cUNUcVI2Yy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjlFOUIzL0VFNDBBNThBNTU4QzExRUZBRkNDRkJBMDc2
MkU5NTFBL0E0M0M0MUQ0MTIwMDExRjA5RDkyNTI4Rjc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJm0DAwDQQCAAIwBwMFACwP
VMAwDQYJKoZIhvcNAQELBQADggEBAJSXCS9iyX1zm+lBHMcsIyKTUiS5B8iMgShx
f7pMyIeLAcbz9mWM79aHgPRiJ3PKd0PuAXy5+r8FLimUwU8J7kCVjOWYiF4L47LK
D+asKglFAbH6fYI7p9zMo6NFC3Mth4Fv453Qv6LJ8x56RFuZhhy98PHPiELSDX+B
sOno7De8C3RrXf3/QE0ElXrrNj3JKavaZ5/Vh3lXIhG36UpAcW3u2Ez66Lyn6N8m
rI81I89Y5+ssPrzaLYVPOGsleJzCxpG8JTtWFQ5gQWfObUSmgI/SkxJ722I/Txov
B2OqolQIXwAjgS5v34NVAblTejL8YzUGFmZ4g01kcYcu2xycb8c=
-----END CERTIFICATE-----
Generated at Fri Apr 18 10:10:54 2025 by rpki-client