Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/711BB0AC609611F0B59372F1DAE4EC9C.roa
File: 711BB0AC609611F0B59372F1DAE4EC9C.roa (raw, json)
Hash identifier: Wa2xWuIQ8AtZwNFgdslwoJn1vnFVZInDmWmorn2qG0A=
Subject key identifier: 48:E0:5C:91:31:51:B7:CB:30:C5:46:5A:54:B3:0D:A5:77:33:2A:BE
Certificate issuer: /CN=F36A1CEFAF/serialNumber=82F1C6611A3A1467DB3D78A4A5FED50A08A57B13
Certificate serial: 0639
Authority key identifier: 82:F1:C6:61:1A:3A:14:67:DB:3D:78:A4:A5:FE:D5:0A:08:A5:7B:13
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/711BB0AC609611F0B59372F1DAE4EC9C.roa
Signing time: Mon 14 Jul 2025 09:39:31 +0000
ROA not before: Mon 14 Jul 2025 09:39:26 +0000
ROA not after: Fri 13 Jul 2035 09:39:26 +0000
asID: 37645
IP address blocks: 102.206.56.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.mft
rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Jul 2025 00:06:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1593 (0x639)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A1CEFAF, serialNumber=82F1C6611A3A1467DB3D78A4A5FED50A08A57B13
Validity
Not Before: Jul 14 09:39:26 2025 GMT
Not After : Jul 13 09:39:26 2035 GMT
Subject: CN=6874d053-c45a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5c:4f:a1:c7:62:30:5f:01:87:1c:76:2f:08:
6b:35:5e:71:40:dd:24:7f:0a:1b:97:36:27:af:5f:
2e:a1:3f:5b:a2:f1:7d:77:77:01:95:96:78:7d:5b:
4c:db:06:82:9f:9d:27:4f:ef:c5:6f:7c:a0:66:1b:
34:89:ac:0a:77:49:9e:a1:0f:8f:c3:9e:31:08:46:
29:65:39:b7:d1:e5:c6:ff:a9:df:6e:f2:43:f7:46:
a4:62:11:d6:c2:84:66:56:81:bc:a9:22:c4:0a:a6:
3e:74:98:b5:65:5e:84:c9:b7:29:ee:a5:c8:8b:a6:
ed:94:ec:4a:9a:23:8e:75:1b:ec:d1:aa:1f:5d:ef:
ef:9a:54:e3:18:e5:e9:c8:07:6e:21:68:ed:cc:b3:
f3:ec:44:20:94:90:21:e1:71:db:bd:f1:21:46:08:
e8:f1:ce:d2:24:2e:2e:3e:72:20:09:2e:73:9c:6e:
05:bc:03:14:e2:3f:94:ef:3e:ca:a7:e4:74:2d:8a:
b0:d2:69:ce:ea:9f:ba:19:62:e2:4e:35:d3:91:fd:
88:63:8f:51:49:fe:89:da:43:d5:6d:6d:d2:5d:cc:
ed:9e:12:3c:bc:22:9b:97:6e:16:37:f6:a2:ec:a7:
4a:8c:7b:b3:1e:af:82:20:9f:d3:76:c2:ab:fd:db:
53:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:E0:5C:91:31:51:B7:CB:30:C5:46:5A:54:B3:0D:A5:77:33:2A:BE
X509v3 Authority Key Identifier:
keyid:82:F1:C6:61:1A:3A:14:67:DB:3D:78:A4:A5:FE:D5:0A:08:A5:7B:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/711BB0AC609611F0B59372F1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.206.56.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:90:f3:71:b9:b4:46:68:eb:19:c1:14:58:8e:e7:ab:14:2c:
76:41:a4:4c:db:ed:b5:6d:5b:b7:6b:cd:5c:4a:d4:40:a7:31:
e8:7b:0d:e7:85:af:a0:43:9f:90:c3:39:ee:22:08:a5:32:ff:
0b:28:38:f3:65:45:98:10:fd:b9:1f:f0:6e:ae:12:56:e4:a7:
04:2c:cf:df:e7:0a:d7:71:77:67:10:3b:3c:47:dd:9c:35:0e:
e1:91:97:4f:81:d4:10:e4:fa:41:f5:ff:20:9c:76:fa:9d:bb:
07:21:9a:53:bf:1d:b0:d9:6d:b5:db:8b:48:a5:14:0e:c8:4b:
18:20:fc:d8:07:72:10:88:d0:9e:65:43:b1:dc:95:ec:80:4f:
08:b4:f6:84:0e:22:a3:5d:5d:d8:12:f1:f8:ac:9e:f3:4f:02:
e7:9e:0c:20:96:5c:dd:9b:b0:21:1a:8a:42:33:f2:c8:07:1d:
ca:6a:bd:eb:31:a1:93:2b:0c:a7:a1:2a:ea:32:e6:2b:39:45:
2d:5f:7c:f8:a9:33:df:76:55:07:5d:43:66:fc:4d:d6:9e:3f:
c4:23:03:5a:09:2f:82:e4:8e:37:be:bb:43:01:13:fd:dd:fb:
b4:a8:b6:1d:17:36:2b:a0:03:e1:75:79:8c:af:dd:ed:f3:e6:
36:39:7c:6b
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBjkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTFDRUZBRjExMC8GA1UEBRMoODJGMUM2NjExQTNBMTQ2N0RCM0Q3OEE0QTVGRUQ1
MEEwOEE1N0IxMzAeFw0yNTA3MTQwOTM5MjZaFw0zNTA3MTMwOTM5MjZaMBgxFjAU
BgNVBAMTDTY4NzRkMDUzLWM0NWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDJXE+hx2IwXwGHHHYvCGs1XnFA3SR/ChuXNievXy6hP1ui8X13dwGVlnh9
W0zbBoKfnSdP78VvfKBmGzSJrAp3SZ6hD4/DnjEIRillObfR5cb/qd9u8kP3RqRi
EdbChGZWgbypIsQKpj50mLVlXoTJtynupciLpu2U7EqaI451G+zRqh9d7++aVOMY
5enIB24haO3Ms/PsRCCUkCHhcdu98SFGCOjxztIkLi4+ciAJLnOcbgW8AxTiP5Tv
Psqn5HQtirDSac7qn7oZYuJONdOR/Yhjj1FJ/onaQ9VtbdJdzO2eEjy8IpuXbhY3
9qLsp0qMe7Mer4Ign9N2wqv921PpAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUSOBc
kTFRt8swxUZaVLMNpXczKr4wHwYDVR0jBBgwFoAUgvHGYRo6FGfbPXikpf7VCgil
exMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkExQ0VGLzdGMzg4REU0RjEzODExRUI5MTdGRDcxN0Q4QTAxNENFL2d2SEdZ
Um82RkdmYlBYaWtwZjdWQ2dpbGV4TS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2d2SEdZUm82RkdmYlBYaWtwZjdWQ2dpbGV4TS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkExQ0VGLzdGMzg4REU0RjEzODExRUI5MTdGRDcxN0Q4
QTAxNENFLzcxMUJCMEFDNjA5NjExRjBCNTkzNzJGMURBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJmzjgwDQYJKoZIhvcNAQEL
BQADggEBAGyQ83G5tEZo6xnBFFiO56sULHZBpEzb7bVtW7drzVxK1ECnMeh7DeeF
r6BDn5DDOe4iCKUy/wsoOPNlRZgQ/bkf8G6uElbkpwQsz9/nCtdxd2cQOzxH3Zw1
DuGRl0+B1BDk+kH1/yCcdvqduwchmlO/HbDZbbXbi0ilFA7ISxgg/NgHchCI0J5l
Q7HcleyATwi09oQOIqNdXdgS8fisnvNPAueeDCCWXN2bsCEaikIz8sgHHcpqvesx
oZMrDKehKuoy5is5RS1ffPipM992VQddQ2b8TdaeP8QjA1oJL4Lkjje+u0MBE/3d
+7Soth0XNiugA+F1eYyv3e3z5jY5fGs=
-----END CERTIFICATE-----
Generated at Sun Jul 27 12:17:37 2025 by rpki-client