Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/91380020056F11F0B567D875762E951A.roa
File: 91380020056F11F0B567D875762E951A.roa (raw, json)
Hash identifier: 4Rpwuvuh2kr8XuvKjT/QmInb5JDMonYRpImOW2MHHUc=
Subject key identifier: 9D:22:84:C2:D4:91:F0:A0:A0:F2:F0:DE:97:56:DF:89:77:3A:81:83
Certificate issuer: /CN=F36B3234AF/serialNumber=03FE5D726F34E93CE1A95D94518E12237AC3E2C6
Certificate serial: 056D
Authority key identifier: 03:FE:5D:72:6F:34:E9:3C:E1:A9:5D:94:51:8E:12:23:7A:C3:E2:C6
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/A_5dcm806TzhqV2UUY4SI3rD4sY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/91380020056F11F0B567D875762E951A.roa
Signing time: Thu 20 Mar 2025 09:41:58 +0000
ROA not before: Thu 20 Mar 2025 09:41:55 +0000
ROA not after: Tue 20 Mar 2035 09:41:55 +0000
asID: 37725
IP address blocks: 102.219.22.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.mft
rsync://rpki.afrinic.net/repository/afrinic/A_5dcm806TzhqV2UUY4SI3rD4sY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1389 (0x56d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B3234AF
Validity
Not Before: Mar 20 09:41:55 2025 GMT
Not After : Mar 20 09:41:55 2035 GMT
Subject: CN=67dbe2e6-cf83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:8b:de:67:04:63:16:7b:03:10:d5:89:12:32:
56:65:56:8a:63:ed:3f:8f:1b:2b:2e:30:da:e4:3f:
e8:ed:81:8e:e7:91:81:79:d0:cb:52:0d:57:a2:1d:
90:d3:4e:ec:c5:15:4e:d3:ec:85:df:43:c4:77:8c:
27:93:34:f1:7e:5d:56:3e:1e:1b:d9:45:47:51:78:
b0:15:c6:86:3e:ac:82:01:d2:51:d6:be:b6:e1:a3:
d7:a6:d2:78:69:e5:89:77:89:e8:01:a8:ea:04:49:
12:3c:fc:00:b1:a9:b4:44:38:f6:16:99:0f:cf:e9:
ff:34:2f:ce:cc:cc:71:58:67:15:cd:54:a8:cd:3e:
03:b5:b4:1d:de:79:c0:b7:cb:95:a6:a4:23:93:b3:
fa:4a:3e:22:f8:c9:73:f5:00:e1:0c:01:ff:67:8a:
00:40:8d:f7:3e:2e:52:b0:51:54:cc:ed:78:68:17:
2d:70:ac:d3:03:ed:3c:6e:62:be:57:5f:45:a2:e3:
ed:56:1d:fe:0e:26:17:2d:64:36:75:5b:5f:79:96:
b0:55:1a:17:8a:fa:1b:b5:ba:d9:f8:b0:5c:e5:c2:
94:eb:7e:ac:db:01:d8:13:77:cf:54:8e:f1:09:84:
8a:f8:e0:ec:87:83:e6:64:9e:c6:b7:8b:d1:e3:ed:
50:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:22:84:C2:D4:91:F0:A0:A0:F2:F0:DE:97:56:DF:89:77:3A:81:83
X509v3 Authority Key Identifier:
keyid:03:FE:5D:72:6F:34:E9:3C:E1:A9:5D:94:51:8E:12:23:7A:C3:E2:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/A_5dcm806TzhqV2UUY4SI3rD4sY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/91380020056F11F0B567D875762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.219.22.0/24
Signature Algorithm: sha256WithRSAEncryption
50:bb:0c:b6:30:43:cf:45:dc:cd:1f:8e:a4:72:6a:27:e8:68:
f0:7d:3a:31:cc:8e:4c:e0:60:2f:3e:77:55:b8:5d:bc:f4:87:
d7:4e:22:70:2d:44:de:24:f0:e0:e5:80:59:61:ce:62:5b:7b:
13:d5:fa:ab:b2:25:7b:04:85:cf:77:de:7f:c3:9a:c5:eb:c2:
91:c7:c1:5a:dc:0d:ff:bf:81:b8:c1:52:54:68:1b:07:32:65:
fb:30:e9:0b:81:2b:20:cb:4d:6e:08:96:41:a3:21:45:62:1d:
2c:49:31:61:42:ce:03:80:d4:92:8a:7b:1a:91:2f:a4:1f:8d:
e0:6f:fb:7f:5d:ef:2d:56:d4:5a:4a:31:0a:f0:bf:fd:33:d3:
70:ef:57:db:30:f9:c6:51:86:c2:67:76:ec:b0:84:d3:d1:62:
6c:0e:f0:e9:73:73:75:ec:b2:e8:d8:10:36:aa:f1:d5:3a:03:
27:02:b4:89:19:9d:41:a5:36:f2:11:e0:be:4f:36:fa:bf:3c:
ca:28:6d:9b:ff:ee:2a:1f:fc:bb:de:ba:f1:c5:72:47:ef:06:
f9:c9:4e:56:2f:60:e5:24:4e:a8:bd:5f:30:29:0a:ac:32:47:
6c:8f:5a:79:4f:0b:86:f7:38:ae:13:8b:4a:7f:02:e8:05:84:
63:f0:28:cf
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBW0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QjMyMzRBRjExMC8GA1UEBRMoMDNGRTVENzI2RjM0RTkzQ0UxQTk1RDk0NTE4RTEy
MjM3QUMzRTJDNjAeFw0yNTAzMjAwOTQxNTVaFw0zNTAzMjAwOTQxNTVaMBgxFjAU
BgNVBAMTDTY3ZGJlMmU2LWNmODMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDji95nBGMWewMQ1YkSMlZlVopj7T+PGysuMNrkP+jtgY7nkYF50MtSDVei
HZDTTuzFFU7T7IXfQ8R3jCeTNPF+XVY+HhvZRUdReLAVxoY+rIIB0lHWvrbho9em
0nhp5Yl3iegBqOoESRI8/ACxqbREOPYWmQ/P6f80L87MzHFYZxXNVKjNPgO1tB3e
ecC3y5WmpCOTs/pKPiL4yXP1AOEMAf9nigBAjfc+LlKwUVTM7XhoFy1wrNMD7Txu
Yr5XX0Wi4+1WHf4OJhctZDZ1W195lrBVGheK+hu1utn4sFzlwpTrfqzbAdgTd89U
jvEJhIr44OyHg+Zknsa3i9Hj7VAZAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUnSKE
wtSR8KCg8vDel1bfiXc6gYMwHwYDVR0jBBgwFoAUA/5dcm806TzhqV2UUY4SI3rD
4sYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkIzMjM0LzlFMTIxQzBDMjQxMDExRUNCMkQwNjk1NkQ4QTAxNENFL0FfNWRj
bTgwNlR6aHFWMlVVWTRTSTNyRDRzWS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0FfNWRjbTgwNlR6aHFWMlVVWTRTSTNyRDRzWS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkIzMjM0LzlFMTIxQzBDMjQxMDExRUNCMkQwNjk1NkQ4
QTAxNENFLzkxMzgwMDIwMDU2RjExRjBCNTY3RDg3NTc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABm2xYwDQYJKoZIhvcNAQEL
BQADggEBAFC7DLYwQ89F3M0fjqRyaifoaPB9OjHMjkzgYC8+d1W4Xbz0h9dOInAt
RN4k8ODlgFlhzmJbexPV+quyJXsEhc933n/DmsXrwpHHwVrcDf+/gbjBUlRoGwcy
Zfsw6QuBKyDLTW4IlkGjIUViHSxJMWFCzgOA1JKKexqRL6QfjeBv+39d7y1W1FpK
MQrwv/0z03DvV9sw+cZRhsJnduywhNPRYmwO8Olzc3XssujYEDaq8dU6AycCtIkZ
nUGlNvIR4L5PNvq/PMoobZv/7iof/LveuvHFckfvBvnJTlYvYOUkTqi9XzApCqwy
R2yPWnlPC4b3OK4Ti0p/AugFhGPwKM8=
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:59:11 2025 by rpki-client