Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/B93FF080370D11F0AA5D86C6DAE4EC9C.roa
File: B93FF080370D11F0AA5D86C6DAE4EC9C.roa (raw, json)
Hash identifier: oR44VDCe57iHpvXZmXIWRhSjg9n06hyXql/Fe1QkrKw=
Subject key identifier: A6:07:77:68:01:13:A0:C9:90:0A:36:31:67:E0:75:73:75:63:B8:83
Certificate issuer: /CN=F36B3234AF/serialNumber=03FE5D726F34E93CE1A95D94518E12237AC3E2C6
Certificate serial: 05D4
Authority key identifier: 03:FE:5D:72:6F:34:E9:3C:E1:A9:5D:94:51:8E:12:23:7A:C3:E2:C6
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/A_5dcm806TzhqV2UUY4SI3rD4sY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/B93FF080370D11F0AA5D86C6DAE4EC9C.roa
Signing time: Thu 22 May 2025 13:07:33 +0000
ROA not before: Thu 22 May 2025 13:07:29 +0000
ROA not after: Mon 21 May 2035 13:07:29 +0000
asID: 37725
IP address blocks: 102.220.125.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.mft
rsync://rpki.afrinic.net/repository/afrinic/A_5dcm806TzhqV2UUY4SI3rD4sY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 08 Jun 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1492 (0x5d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B3234AF, serialNumber=03FE5D726F34E93CE1A95D94518E12237AC3E2C6
Validity
Not Before: May 22 13:07:29 2025 GMT
Not After : May 21 13:07:29 2035 GMT
Subject: CN=682f2195-65b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:35:bd:68:7b:e3:40:79:9e:da:1d:64:eb:1e:
be:a7:ef:7d:a7:a4:9f:0b:03:5c:9b:77:44:48:85:
95:46:6f:7c:aa:eb:4d:f6:25:25:00:5c:95:23:9d:
84:1e:c8:59:66:0f:2b:58:7a:5e:38:a5:14:1e:07:
69:37:49:6b:00:ea:7a:6e:f3:1f:55:c4:da:70:18:
03:58:e5:f9:a6:7b:63:e1:c4:f2:45:e7:9e:f6:a4:
9a:17:8e:1d:42:67:08:ea:a9:6d:1c:df:c9:59:fb:
4f:8b:60:cd:f0:b9:21:c4:83:01:f0:32:68:b3:f4:
0c:eb:a4:51:16:65:99:35:af:81:0b:73:8e:c3:e5:
f8:af:4e:76:12:02:63:a5:6e:7b:6e:d4:d8:3d:c2:
a3:d7:95:0d:4c:6a:91:90:d2:65:bb:98:d0:53:6c:
30:ed:4f:57:22:e7:c9:69:73:24:be:db:c5:d7:df:
ef:c1:34:52:38:21:a5:4a:9e:9c:f6:53:c2:4f:8a:
37:50:94:2c:4f:74:a1:00:23:a9:32:f6:87:4b:cd:
74:11:74:0f:74:ab:fa:86:87:34:57:ae:c8:5f:e4:
57:d7:08:be:fe:fa:a6:14:38:3c:67:db:e2:6f:f0:
20:d5:43:ff:c6:df:83:53:6a:f8:de:0a:98:67:68:
e2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:07:77:68:01:13:A0:C9:90:0A:36:31:67:E0:75:73:75:63:B8:83
X509v3 Authority Key Identifier:
keyid:03:FE:5D:72:6F:34:E9:3C:E1:A9:5D:94:51:8E:12:23:7A:C3:E2:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/A_5dcm806TzhqV2UUY4SI3rD4sY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/B93FF080370D11F0AA5D86C6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.220.125.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:db:c1:72:0a:a0:7a:93:45:f1:31:31:d3:ec:58:6e:65:f0:
ec:30:46:b6:20:2b:50:ad:79:04:61:d4:0b:eb:8e:d4:43:d9:
d6:ba:9b:e6:5b:3d:80:46:63:b2:ea:a0:3c:f1:b1:ed:f0:33:
22:71:7f:e8:d1:1b:b1:9b:a7:aa:52:3c:74:82:1d:1f:38:9f:
fd:3b:89:9f:e7:de:ef:42:f9:01:72:e8:cf:54:01:cc:1a:0f:
20:f4:1a:12:b7:e3:0b:b9:23:5b:38:29:5f:e0:f0:59:cd:da:
44:7f:36:f1:a1:e6:12:b8:22:9a:40:64:b3:d2:6a:59:e9:4e:
a9:58:fa:1a:29:3c:29:de:ec:28:43:90:aa:9a:d0:e0:5b:ae:
30:6e:65:03:44:8e:0e:19:2c:80:a3:0f:3f:97:1e:47:df:5d:
61:f8:a0:e2:3a:0a:d8:5a:bc:1d:b0:30:c7:54:b9:6a:fd:16:
92:6b:ce:8f:5c:18:2f:9a:0e:ba:9b:73:f5:32:af:9c:65:66:
20:bf:9f:c7:7a:34:4b:c5:76:28:68:ab:1c:6c:6c:8c:d9:ed:
22:cf:06:90:59:26:81:d2:cc:a2:5f:e4:0f:49:e2:29:a7:38:
19:eb:08:5d:2e:26:e4:13:27:da:d4:35:58:1a:9e:39:76:35:
ea:d8:30:45
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBdQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QjMyMzRBRjExMC8GA1UEBRMoMDNGRTVENzI2RjM0RTkzQ0UxQTk1RDk0NTE4RTEy
MjM3QUMzRTJDNjAeFw0yNTA1MjIxMzA3MjlaFw0zNTA1MjExMzA3MjlaMBgxFjAU
BgNVBAMTDTY4MmYyMTk1LTY1YjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDGNb1oe+NAeZ7aHWTrHr6n732npJ8LA1ybd0RIhZVGb3yq6032JSUAXJUj
nYQeyFlmDytYel44pRQeB2k3SWsA6npu8x9VxNpwGANY5fmme2PhxPJF5572pJoX
jh1CZwjqqW0c38lZ+0+LYM3wuSHEgwHwMmiz9AzrpFEWZZk1r4ELc47D5fivTnYS
AmOlbntu1Ng9wqPXlQ1MapGQ0mW7mNBTbDDtT1ci58lpcyS+28XX3+/BNFI4IaVK
npz2U8JPijdQlCxPdKEAI6ky9odLzXQRdA90q/qGhzRXrshf5FfXCL7++qYUODxn
2+Jv8CDVQ//G34NTavjeCphnaOK7AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUpgd3
aAEToMmQCjYxZ+B1c3VjuIMwHwYDVR0jBBgwFoAUA/5dcm806TzhqV2UUY4SI3rD
4sYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkIzMjM0LzlFMTIxQzBDMjQxMDExRUNCMkQwNjk1NkQ4QTAxNENFL0FfNWRj
bTgwNlR6aHFWMlVVWTRTSTNyRDRzWS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0FfNWRjbTgwNlR6aHFWMlVVWTRTSTNyRDRzWS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkIzMjM0LzlFMTIxQzBDMjQxMDExRUNCMkQwNjk1NkQ4
QTAxNENFL0I5M0ZGMDgwMzcwRDExRjBBQTVEODZDNkRBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABm3H0wDQYJKoZIhvcNAQEL
BQADggEBAAzbwXIKoHqTRfExMdPsWG5l8OwwRrYgK1CteQRh1AvrjtRD2da6m+Zb
PYBGY7LqoDzxse3wMyJxf+jRG7Gbp6pSPHSCHR84n/07iZ/n3u9C+QFy6M9UAcwa
DyD0GhK34wu5I1s4KV/g8FnN2kR/NvGh5hK4IppAZLPSalnpTqlY+hopPCne7ChD
kKqa0OBbrjBuZQNEjg4ZLICjDz+XHkffXWH4oOI6CthavB2wMMdUuWr9FpJrzo9c
GC+aDrqbc/Uyr5xlZiC/n8d6NEvFdihoqxxsbIzZ7SLPBpBZJoHSzKJf5A9J4imn
OBnrCF0uJuQTJ9rUNVganjl2NerYMEU=
-----END CERTIFICATE-----
Generated at Fri Jun 6 06:40:37 2025 by rpki-client