Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B5768/D4281494258911F0A52BC8A1DAE4EC9C/0BF4391E25BE11F0BA0F6C78DAE4EC9C.roa
File: 0BF4391E25BE11F0BA0F6C78DAE4EC9C.roa (raw, json)
Hash identifier: yV3qp3Snn6vcZINsGIupcA7CLhBh7nsh5NGhTfu+GnU=
Subject key identifier: 9C:1B:20:C2:D9:BF:B6:94:37:F3:F6:54:78:F9:B1:0C:80:30:E4:A5
Certificate issuer: /CN=F36B5768AF/serialNumber=9CD5614CF90DA51E2773B5EB97BD89937C505861
Certificate serial: 02
Authority key identifier: 9C:D5:61:4C:F9:0D:A5:1E:27:73:B5:EB:97:BD:89:93:7C:50:58:61
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B5768/D4281494258911F0A52BC8A1DAE4EC9C/0BF4391E25BE11F0BA0F6C78DAE4EC9C.roa
Signing time: Wed 30 Apr 2025 12:24:23 +0000
ROA not before: Wed 30 Apr 2025 12:24:18 +0000
ROA not after: Thu 30 Apr 2026 12:24:18 +0000
asID: 329261
IP address blocks: 102.213.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B5768/D4281494258911F0A52BC8A1DAE4EC9C/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B5768/D4281494258911F0A52BC8A1DAE4EC9C/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.mft
rsync://rpki.afrinic.net/repository/afrinic/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Jun 2025 05:19:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B5768AF, serialNumber=9CD5614CF90DA51E2773B5EB97BD89937C505861
Validity
Not Before: Apr 30 12:24:18 2025 GMT
Not After : Apr 30 12:24:18 2026 GMT
Subject: CN=68121677-52dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ec:cf:4b:86:82:5f:5e:02:3d:db:13:55:15:
e3:1a:f4:8b:35:54:c2:4f:fd:88:55:01:00:fe:ab:
6e:dd:d1:7f:e8:34:9c:c5:8b:aa:1a:e9:75:36:40:
b3:e9:fa:0c:86:a5:7d:91:80:e0:94:14:1a:7f:fd:
6a:6f:19:70:aa:f1:f1:bd:ee:e2:22:49:4f:70:ff:
76:96:55:5f:32:f8:6e:63:42:8d:87:f8:01:d9:af:
a3:86:e4:78:02:83:f7:61:f3:a5:48:19:31:13:7f:
c7:26:7d:35:4d:d4:a8:68:4c:1f:b5:3d:d4:b2:21:
29:85:fe:9d:53:a8:1d:9e:9d:11:9d:e0:36:7d:e6:
c4:c8:0b:c2:8d:8b:7b:60:75:96:a5:47:77:d5:cd:
52:94:5c:05:41:bb:e6:4f:50:34:95:2a:fa:7f:40:
50:98:a9:87:dd:79:db:a1:23:ed:df:7d:9e:a7:56:
e1:4d:be:08:4a:18:90:b5:46:e7:a3:dc:09:f8:60:
17:92:d8:e4:38:b7:e0:08:a1:71:61:15:7a:04:74:
df:b1:38:7e:fa:4d:1d:dd:53:f3:e4:92:01:cc:8b:
ae:94:0f:0b:25:60:1e:3e:90:4c:13:65:ad:f7:86:
36:da:32:90:5a:4e:70:30:13:a4:cf:14:c9:01:e0:
16:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:1B:20:C2:D9:BF:B6:94:37:F3:F6:54:78:F9:B1:0C:80:30:E4:A5
X509v3 Authority Key Identifier:
keyid:9C:D5:61:4C:F9:0D:A5:1E:27:73:B5:EB:97:BD:89:93:7C:50:58:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5768/D4281494258911F0A52BC8A1DAE4EC9C/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5768/D4281494258911F0A52BC8A1DAE4EC9C/0BF4391E25BE11F0BA0F6C78DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.213.179.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:36:a1:df:23:c0:29:1a:32:85:57:44:ca:e5:87:4f:ed:07:
51:dd:2c:eb:63:18:f7:10:e2:62:04:e2:21:e4:44:4c:a0:a7:
fe:c7:1d:e1:1b:8a:69:b5:bf:6e:ba:c4:91:ad:04:87:16:4c:
5f:cb:be:e0:6a:bf:38:52:bf:d6:cb:76:64:e5:c8:f4:8a:6d:
cc:bc:89:97:c0:88:44:49:2e:78:b9:20:d2:b7:05:89:01:d6:
47:6c:15:a7:ff:ab:19:f4:70:51:1b:91:12:a9:34:8c:48:b9:
b5:29:dc:36:84:1e:83:56:b4:a6:55:a9:1c:7d:b7:b3:63:fa:
b9:8f:5a:8f:a0:c9:90:51:fb:89:17:de:b5:20:92:6b:71:4a:
00:ce:11:9d:50:b8:c6:47:13:f3:cc:3d:c8:cc:ef:44:72:a9:
a8:9c:16:b0:46:11:63:bf:9e:f9:2c:77:a2:59:2f:6e:8b:e9:
64:e0:5a:83:68:7a:c6:0c:ea:98:6f:e4:5f:c3:7e:6b:56:19:
05:1b:a2:42:80:d7:f2:50:e9:1c:e0:10:63:aa:ad:30:62:24:
12:f9:f9:10:fb:71:90:c5:aa:b6:c7:00:f2:c0:a3:b8:46:d0:
5d:c2:fd:f8:a0:1a:d9:d9:f2:c9:24:97:71:b1:80:5c:96:53:
15:df:73:fd
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZC
NTc2OEFGMTEwLwYDVQQFEyg5Q0Q1NjE0Q0Y5MERBNTFFMjc3M0I1RUI5N0JEODk5
MzdDNTA1ODYxMB4XDTI1MDQzMDEyMjQxOFoXDTI2MDQzMDEyMjQxOFowGDEWMBQG
A1UEAxMNNjgxMjE2NzctNTJkYzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALDsz0uGgl9eAj3bE1UV4xr0izVUwk/9iFUBAP6rbt3Rf+g0nMWLqhrpdTZA
s+n6DIalfZGA4JQUGn/9am8ZcKrx8b3u4iJJT3D/dpZVXzL4bmNCjYf4Admvo4bk
eAKD92HzpUgZMRN/xyZ9NU3UqGhMH7U91LIhKYX+nVOoHZ6dEZ3gNn3mxMgLwo2L
e2B1lqVHd9XNUpRcBUG75k9QNJUq+n9AUJiph91526Ej7d99nqdW4U2+CEoYkLVG
56PcCfhgF5LY5Di34AihcWEVegR037E4fvpNHd1T8+SSAcyLrpQPCyVgHj6QTBNl
rfeGNtoykFpOcDATpM8UyQHgFokCAwEAAaOCAqUwggKhMB0GA1UdDgQWBBScGyDC
2b+2lDfz9lR4+bEMgDDkpTAfBgNVHSMEGDAWgBSc1WFM+Q2lHidzteuXvYmTfFBY
YTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2QjU3NjgvRDQyODE0OTQyNTg5MTFGMEE1MkJDOEExREFFNEVDOUMvbk5WaFRQ
a05wUjRuYzdYcmw3MkprM3hRV0dFLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvbk5WaFRQa05wUjRuYzdYcmw3MkprM3hRV0dFLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QjU3NjgvRDQyODE0OTQyNTg5MTFGMEE1MkJDOEExREFF
NEVDOUMvMEJGNDM5MUUyNUJFMTFGMEJBMEY2Qzc4REFFNEVDOUMucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGbVszANBgkqhkiG9w0BAQsF
AAOCAQEAsjah3yPAKRoyhVdEyuWHT+0HUd0s62MY9xDiYgTiIeRETKCn/scd4RuK
abW/brrEka0EhxZMX8u+4Gq/OFK/1st2ZOXI9IptzLyJl8CIREkueLkg0rcFiQHW
R2wVp/+rGfRwURuREqk0jEi5tSncNoQeg1a0plWpHH23s2P6uY9aj6DJkFH7iRfe
tSCSa3FKAM4RnVC4xkcT88w9yMzvRHKpqJwWsEYRY7+e+Sx3olkvbovpZOBag2h6
xgzqmG/kX8N+a1YZBRuiQoDX8lDpHOAQY6qtMGIkEvn5EPtxkMWqtscA8sCjuEbQ
XcL9+KAa2dnyySSXcbGAXJZTFd9z/Q==
-----END CERTIFICATE-----
Generated at Sat Jun 7 11:07:50 2025 by rpki-client