Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B5EE7/ED7066526B9011F0819CC681DAE4EC9C/2CED30A26B9211F0B55B648ADAE4EC9C.roa
File: 2CED30A26B9211F0B55B648ADAE4EC9C.roa (raw, json)
Hash identifier: 8FK7+AonagW3DFNpcFJhHjfYGIQ/QIt42K+ERVsqWds=
Subject key identifier: AA:46:F0:63:C3:5E:0D:30:77:C2:C5:6C:BD:68:8B:D7:50:4D:63:3E
Certificate issuer: /CN=F36B5EE7RI/serialNumber=B0EB854DC0D89A3233C92551D16D14D438CF551F
Certificate serial: 02
Authority key identifier: B0:EB:85:4D:C0:D8:9A:32:33:C9:25:51:D1:6D:14:D4:38:CF:55:1F
Authority info access: rsync://rpki.afrinic.net/repository/ripe/sOuFTcDYmjIzySVR0W0U1DjPVR8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/ED7066526B9011F0819CC681DAE4EC9C/2CED30A26B9211F0B55B648ADAE4EC9C.roa
Signing time: Mon 28 Jul 2025 09:06:41 +0000
ROA not before: Mon 28 Jul 2025 09:06:34 +0000
ROA not after: Sat 28 Jul 2035 09:06:34 +0000
asID: 327794
IP address blocks: 213.150.216.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/ED7066526B9011F0819CC681DAE4EC9C/sOuFTcDYmjIzySVR0W0U1DjPVR8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/ED7066526B9011F0819CC681DAE4EC9C/sOuFTcDYmjIzySVR0W0U1DjPVR8.mft
rsync://rpki.afrinic.net/repository/ripe/sOuFTcDYmjIzySVR0W0U1DjPVR8.cer
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 04 Aug 2025 00:45:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B5EE7RI, serialNumber=B0EB854DC0D89A3233C92551D16D14D438CF551F
Validity
Not Before: Jul 28 09:06:34 2025 GMT
Not After : Jul 28 09:06:34 2035 GMT
Subject: CN=68873da1-e46d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c1:f0:6c:97:4e:2b:8f:07:e4:eb:e2:62:d6:
f8:81:a3:f6:4d:e2:57:62:44:58:af:85:ff:9a:33:
1b:63:af:17:95:4d:e7:38:a0:bf:30:47:5e:aa:2a:
9f:0c:9c:70:f2:a4:a1:5d:9a:eb:b5:bd:5f:3f:ff:
cd:ab:9d:7a:4d:60:93:3c:02:29:e3:d9:b0:9d:11:
7e:79:b2:ec:e6:64:bc:b4:e6:e0:f1:97:d7:0b:22:
71:e9:bc:96:b0:50:f7:ca:aa:15:86:68:ed:83:18:
a2:8e:b0:45:a6:e5:63:4f:ee:98:62:8b:b0:73:7c:
e2:b9:45:bc:f5:ed:76:67:f7:00:c5:64:04:9a:e7:
8d:f9:62:71:05:f1:ce:81:aa:04:3a:75:77:6c:bc:
a5:09:40:67:fe:a0:a3:17:6d:2e:89:df:c7:a4:2d:
47:4e:9a:b9:2e:09:bc:b9:6e:8d:45:2a:a5:40:01:
48:8a:a5:7e:af:b3:1c:a8:fd:a5:91:e5:d3:38:37:
85:a3:18:0e:bd:24:ae:6e:79:03:97:54:3e:a5:dc:
51:45:fe:aa:19:d3:c4:30:3f:70:50:e7:b4:40:5f:
cd:f4:e2:f0:f7:aa:2c:b7:6a:79:cf:43:82:56:9f:
5e:71:14:12:f5:4b:52:f4:85:18:88:c2:ea:c1:8a:
06:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:46:F0:63:C3:5E:0D:30:77:C2:C5:6C:BD:68:8B:D7:50:4D:63:3E
X509v3 Authority Key Identifier:
keyid:B0:EB:85:4D:C0:D8:9A:32:33:C9:25:51:D1:6D:14:D4:38:CF:55:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/ED7066526B9011F0819CC681DAE4EC9C/sOuFTcDYmjIzySVR0W0U1DjPVR8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/sOuFTcDYmjIzySVR0W0U1DjPVR8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/ED7066526B9011F0819CC681DAE4EC9C/2CED30A26B9211F0B55B648ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
213.150.216.0/21
Signature Algorithm: sha256WithRSAEncryption
43:30:c6:60:81:5a:a5:05:1f:18:7e:9f:f5:5b:1f:3f:1b:b6:
9b:9a:ad:f4:65:c9:2c:ea:a2:28:c5:f2:5c:9d:96:30:bd:07:
89:e7:52:a3:5e:e0:6e:2e:d0:58:5b:b2:b2:db:58:5a:8e:0f:
4d:75:28:4c:55:9c:8d:58:90:c5:e5:ae:0f:e7:8d:cf:1e:ee:
36:11:36:cc:af:6c:c5:74:0c:db:45:5f:90:6e:d2:39:89:85:
96:b1:5a:e8:cb:c2:76:d1:5f:aa:1d:88:fe:85:e5:0f:93:88:
f2:1d:6f:4a:cf:52:73:5e:19:15:5c:90:9b:2d:be:f7:3d:93:
64:f4:e1:b7:84:be:fd:f6:80:76:1f:76:64:35:3f:fd:14:e1:
47:c9:9f:58:ea:de:1d:3a:fc:a2:d1:c0:ca:8e:94:77:a2:fa:
15:2f:78:38:23:62:32:e2:e9:30:a3:43:8e:5b:45:04:a5:fa:
83:27:20:cd:ef:28:48:1c:41:d7:24:13:4b:43:74:7e:cb:d3:
d4:b9:85:d4:f7:ec:47:67:53:57:f2:2d:c4:e7:5c:17:8d:03:
88:4d:97:94:ad:3a:1d:3c:fe:61:af:0a:2a:10:69:89:d2:55:
ba:53:97:46:5f:8a:f9:34:ad:e0:bd:17:8c:13:85:f8:d1:6f:
da:55:a5:c9
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIBAjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZC
NUVFN1JJMTEwLwYDVQQFEyhCMEVCODU0REMwRDg5QTMyMzNDOTI1NTFEMTZEMTRE
NDM4Q0Y1NTFGMB4XDTI1MDcyODA5MDYzNFoXDTM1MDcyODA5MDYzNFowGDEWMBQG
A1UEAxMNNjg4NzNkYTEtZTQ2ZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMLB8GyXTiuPB+Tr4mLW+IGj9k3iV2JEWK+F/5ozG2OvF5VN5zigvzBHXqoq
nwyccPKkoV2a67W9Xz//zaudek1gkzwCKePZsJ0Rfnmy7OZkvLTm4PGX1wsicem8
lrBQ98qqFYZo7YMYoo6wRablY0/umGKLsHN84rlFvPXtdmf3AMVkBJrnjflicQXx
zoGqBDp1d2y8pQlAZ/6goxdtLonfx6QtR06auS4JvLlujUUqpUABSIqlfq+zHKj9
pZHl0zg3haMYDr0krm55A5dUPqXcUUX+qhnTxDA/cFDntEBfzfTi8PeqLLdqec9D
glafXnEUEvVLUvSFGIjC6sGKBj0CAwEAAaOCAqIwggKeMB0GA1UdDgQWBBSqRvBj
w14NMHfCxWy9aIvXUE1jPjAfBgNVHSMEGDAWgBSw64VNwNiaMjPJJVHRbRTUOM9V
HzAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2QjVFRTcvRUQ3MDY2NTI2QjkwMTFGMDgxOUNDNjgxREFFNEVDOUMvc091RlRj
RFltakl6eVNWUjBXMFUxRGpQVlI4LmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L3JpcGUv
c091RlRjRFltakl6eVNWUjBXMFUxRGpQVlI4LmNlcjBPBgNVHSABAf8ERTBDMEEG
CCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmljLm5l
dC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUFBzAL
hoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2QjVFRTcvRUQ3MDY2NTI2QjkwMTFGMDgxOUNDNjgxREFFNEVD
OUMvMkNFRDMwQTI2QjkyMTFGMEI1NUI2NDhBREFFNEVDOUMucm9hMDUGCCsGAQUF
BzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA9WW2DANBgkqhkiG9w0BAQsFAAOC
AQEAQzDGYIFapQUfGH6f9VsfPxu2m5qt9GXJLOqiKMXyXJ2WML0HiedSo17gbi7Q
WFuysttYWo4PTXUoTFWcjViQxeWuD+eNzx7uNhE2zK9sxXQM20VfkG7SOYmFlrFa
6MvCdtFfqh2I/oXlD5OI8h1vSs9Sc14ZFVyQmy2+9z2TZPTht4S+/faAdh92ZDU/
/RThR8mfWOreHTr8otHAyo6Ud6L6FS94OCNiMuLpMKNDjltFBKX6gycgze8oSBxB
1yQTS0N0fsvT1LmF1PfsR2dTV/ItxOdcF40DiE2XlK06HTz+Ya8KKhBpidJVulOX
Rl+K+TSt4L0XjBOF+NFv2lWlyQ==
-----END CERTIFICATE-----
Generated at Sat Aug 2 13:51:32 2025 by rpki-client