Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/9AD9F8F2370D11F09CFCB9C4DAE4EC9C.roa
File: 9AD9F8F2370D11F09CFCB9C4DAE4EC9C.roa (raw, json)
Hash identifier: Fix3gEDJPPFM0HHIPucaf7A4LYvzEWyykGgzqpJWGfs=
Subject key identifier: ED:40:BE:0B:46:13:5E:45:A9:24:10:B0:00:C7:B1:17:B8:1C:E6:96
Certificate issuer: /CN=F36B3234AF/serialNumber=03FE5D726F34E93CE1A95D94518E12237AC3E2C6
Certificate serial: 05D2
Authority key identifier: 03:FE:5D:72:6F:34:E9:3C:E1:A9:5D:94:51:8E:12:23:7A:C3:E2:C6
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/A_5dcm806TzhqV2UUY4SI3rD4sY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/9AD9F8F2370D11F09CFCB9C4DAE4EC9C.roa
Signing time: Thu 22 May 2025 13:06:42 +0000
ROA not before: Thu 22 May 2025 13:06:37 +0000
ROA not after: Mon 21 May 2035 13:06:37 +0000
asID: 5536
IP address blocks: 102.219.22.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.mft
rsync://rpki.afrinic.net/repository/afrinic/A_5dcm806TzhqV2UUY4SI3rD4sY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 08 Jun 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1490 (0x5d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B3234AF, serialNumber=03FE5D726F34E93CE1A95D94518E12237AC3E2C6
Validity
Not Before: May 22 13:06:37 2025 GMT
Not After : May 21 13:06:37 2035 GMT
Subject: CN=682f2162-c2b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3b:e3:a9:de:1f:14:50:f9:18:cb:ce:4d:b3:
8c:c2:83:a8:47:88:30:0d:05:d6:1e:59:15:93:d7:
06:84:7e:eb:84:d3:6c:08:14:e7:c5:4f:15:e9:18:
28:67:7a:bf:76:d9:48:61:ee:dc:72:03:be:64:c7:
fe:0c:d8:62:c3:09:b2:60:ca:9f:b7:7f:81:3a:e0:
bb:c7:11:da:72:95:38:2a:b8:41:d3:a3:f0:86:ab:
de:98:3a:54:bc:ea:5d:81:a8:b3:d9:fe:f1:5a:5b:
6e:48:48:09:f3:6e:e6:b2:14:39:7b:80:82:1c:50:
e8:eb:86:82:9f:06:c7:1d:4f:42:40:0c:4a:84:b9:
6e:79:f2:b4:2c:18:8d:38:61:06:f2:83:86:50:c9:
e1:8e:ab:85:a8:be:ed:ce:ad:59:89:6a:ff:6d:6e:
45:00:7f:76:41:db:1c:1f:46:09:e6:fc:8a:f8:60:
8d:7c:5d:66:be:b0:9a:3a:36:26:55:da:d3:ac:ba:
b3:13:69:ab:f3:2f:ae:c6:71:57:71:6a:91:a9:90:
ef:ed:db:bf:4a:1e:07:95:b7:06:10:c1:67:c7:18:
d1:e5:b6:31:5f:bf:71:4f:c4:c1:b7:bd:a9:a9:cf:
9c:7b:b4:43:be:42:14:60:a0:69:0e:5a:70:08:e5:
0f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:40:BE:0B:46:13:5E:45:A9:24:10:B0:00:C7:B1:17:B8:1C:E6:96
X509v3 Authority Key Identifier:
keyid:03:FE:5D:72:6F:34:E9:3C:E1:A9:5D:94:51:8E:12:23:7A:C3:E2:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/A_5dcm806TzhqV2UUY4SI3rD4sY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/9AD9F8F2370D11F09CFCB9C4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.219.22.0/24
Signature Algorithm: sha256WithRSAEncryption
40:ec:02:83:fa:3a:8e:cf:3c:c0:0c:0b:c3:23:b6:14:7c:fa:
b3:25:ff:d0:00:36:d5:ab:a9:47:b0:a6:f2:26:8e:79:4b:b2:
64:3e:17:28:41:a7:4f:cc:31:a2:7b:1d:b6:84:1f:73:83:c6:
4c:92:92:87:9d:aa:23:83:da:e3:83:47:ec:dd:35:66:e4:87:
1e:39:12:a1:a2:a2:13:dd:03:85:7d:bc:60:63:00:07:be:9e:
7f:85:3a:68:06:68:e9:3c:93:b6:b2:56:eb:03:2c:78:6a:3b:
d7:30:36:0e:f8:a9:65:e5:8a:3a:53:38:ef:43:0d:71:5a:8b:
4e:aa:10:7e:fe:5d:71:d3:45:ce:b0:96:8e:54:5e:6c:91:ad:
61:bc:33:1d:05:da:4c:62:30:9f:5d:cf:d4:21:25:f8:a0:1a:
5f:43:d6:1f:c7:ca:c7:91:9b:09:47:5d:91:e4:39:65:51:b4:
af:ec:eb:9e:c9:be:f2:e0:ff:50:60:05:f5:b7:6b:9b:1e:bd:
ee:88:ac:82:32:25:6d:6d:33:ba:30:b5:9d:01:52:1a:88:86:
ff:2e:95:c6:c4:8c:01:67:58:9c:c4:43:fe:ab:c3:dd:4d:82:
50:38:5a:3c:f8:99:a7:3c:8c:c2:a2:2a:8d:3e:af:c7:02:87:
68:4d:35:77
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBdIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QjMyMzRBRjExMC8GA1UEBRMoMDNGRTVENzI2RjM0RTkzQ0UxQTk1RDk0NTE4RTEy
MjM3QUMzRTJDNjAeFw0yNTA1MjIxMzA2MzdaFw0zNTA1MjExMzA2MzdaMBgxFjAU
BgNVBAMTDTY4MmYyMTYyLWMyYjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCxO+Op3h8UUPkYy85Ns4zCg6hHiDANBdYeWRWT1waEfuuE02wIFOfFTxXp
GChner922Uhh7txyA75kx/4M2GLDCbJgyp+3f4E64LvHEdpylTgquEHTo/CGq96Y
OlS86l2BqLPZ/vFaW25ISAnzbuayFDl7gIIcUOjrhoKfBscdT0JADEqEuW558rQs
GI04YQbyg4ZQyeGOq4Wovu3OrVmJav9tbkUAf3ZB2xwfRgnm/Ir4YI18XWa+sJo6
NiZV2tOsurMTaavzL67GcVdxapGpkO/t279KHgeVtwYQwWfHGNHltjFfv3FPxMG3
vampz5x7tEO+QhRgoGkOWnAI5Q9jAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU7UC+
C0YTXkWpJBCwAMexF7gc5pYwHwYDVR0jBBgwFoAUA/5dcm806TzhqV2UUY4SI3rD
4sYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkIzMjM0LzlFMTIxQzBDMjQxMDExRUNCMkQwNjk1NkQ4QTAxNENFL0FfNWRj
bTgwNlR6aHFWMlVVWTRTSTNyRDRzWS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0FfNWRjbTgwNlR6aHFWMlVVWTRTSTNyRDRzWS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkIzMjM0LzlFMTIxQzBDMjQxMDExRUNCMkQwNjk1NkQ4
QTAxNENFLzlBRDlGOEYyMzcwRDExRjA5Q0ZDQjlDNERBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABm2xYwDQYJKoZIhvcNAQEL
BQADggEBAEDsAoP6Oo7PPMAMC8MjthR8+rMl/9AANtWrqUewpvImjnlLsmQ+FyhB
p0/MMaJ7HbaEH3ODxkySkoedqiOD2uODR+zdNWbkhx45EqGiohPdA4V9vGBjAAe+
nn+FOmgGaOk8k7ayVusDLHhqO9cwNg74qWXlijpTOO9DDXFai06qEH7+XXHTRc6w
lo5UXmyRrWG8Mx0F2kxiMJ9dz9QhJfigGl9D1h/HyseRmwlHXZHkOWVRtK/s657J
vvLg/1BgBfW3a5seve6IrIIyJW1tM7owtZ0BUhqIhv8ulcbEjAFnWJzEQ/6rw91N
glA4Wjz4mac8jMKiKo0+r8cCh2hNNXc=
-----END CERTIFICATE-----
Generated at Fri Jun 6 19:36:14 2025 by rpki-client