Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C29E6/A03CAAF63D7011F0B10B60D3DAE4EC9C/769DF53E62F911F0B689408BDAE4EC9C.roa
File: 769DF53E62F911F0B689408BDAE4EC9C.roa (raw, json)
Hash identifier: ospWEmJm0KjlyVSuVRA2Nj2ovkBvN0XSO0C/zL8q2U8=
Subject key identifier: DA:D6:2E:AD:9B:29:BE:B5:AA:35:E4:A6:07:48:18:83:70:93:37:26
Certificate issuer: /CN=F36C29E6AR/serialNumber=262771898DB48D68D5430FC0E3911EC90365BBF5
Certificate serial: 47
Authority key identifier: 26:27:71:89:8D:B4:8D:68:D5:43:0F:C0:E3:91:1E:C9:03:65:BB:F5
Authority info access: rsync://rpki.afrinic.net/repository/arin/JidxiY20jWjVQw_A45EeyQNlu_U.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C29E6/A03CAAF63D7011F0B10B60D3DAE4EC9C/769DF53E62F911F0B689408BDAE4EC9C.roa
Signing time: Thu 17 Jul 2025 10:33:23 +0000
ROA not before: Thu 17 Jul 2025 10:33:16 +0000
ROA not after: Fri 29 May 2026 10:33:16 +0000
asID: 327947
IP address blocks: 129.122.15.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C29E6/A03CAAF63D7011F0B10B60D3DAE4EC9C/JidxiY20jWjVQw_A45EeyQNlu_U.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C29E6/A03CAAF63D7011F0B10B60D3DAE4EC9C/JidxiY20jWjVQw_A45EeyQNlu_U.mft
rsync://rpki.afrinic.net/repository/arin/JidxiY20jWjVQw_A45EeyQNlu_U.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Jul 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71 (0x47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C29E6AR, serialNumber=262771898DB48D68D5430FC0E3911EC90365BBF5
Validity
Not Before: Jul 17 10:33:16 2025 GMT
Not After : May 29 10:33:16 2026 GMT
Subject: CN=6878d173-d982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:5f:8b:6b:67:20:3b:5f:e5:6c:e2:38:70:3c:
db:12:70:8f:a0:a3:f2:cc:e0:0b:fb:5c:44:b0:01:
54:d2:dd:fd:67:ba:a2:d0:fd:e0:84:f4:bb:47:8a:
59:c1:55:60:b2:88:89:c8:96:95:60:be:da:70:63:
1c:25:a2:ce:f4:c0:02:b6:41:1d:8d:be:2d:97:16:
c0:e2:ca:9b:50:b1:d4:f1:ab:14:0f:9f:33:35:5f:
9e:ef:90:9e:65:d8:0f:d3:1b:51:20:fa:0d:eb:4d:
ad:5a:ca:f7:0b:33:f7:76:5f:30:d4:db:ca:47:d7:
ce:d9:fc:d1:9d:78:f9:77:d0:5a:29:31:b0:f6:98:
85:51:44:7d:46:26:c3:c7:e8:0b:6d:11:ef:71:82:
bd:a5:10:3d:54:26:d8:78:82:3f:62:7b:20:fe:96:
c5:f5:33:d9:78:2c:5d:6e:dc:4f:b8:ff:9a:0b:d2:
d2:37:22:69:30:3e:bd:3e:44:1c:13:d8:d0:ef:70:
94:8b:e7:35:b9:93:0f:61:e1:e0:90:6f:9b:e4:c8:
0b:91:f7:de:84:f3:11:74:ff:d5:15:90:34:fa:c6:
fb:48:04:ff:f4:c4:ee:ab:5e:d3:ae:f7:04:3a:2b:
c5:53:e0:c3:46:7a:3f:e1:2b:bf:3a:1e:2c:c2:77:
48:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:D6:2E:AD:9B:29:BE:B5:AA:35:E4:A6:07:48:18:83:70:93:37:26
X509v3 Authority Key Identifier:
keyid:26:27:71:89:8D:B4:8D:68:D5:43:0F:C0:E3:91:1E:C9:03:65:BB:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C29E6/A03CAAF63D7011F0B10B60D3DAE4EC9C/JidxiY20jWjVQw_A45EeyQNlu_U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/JidxiY20jWjVQw_A45EeyQNlu_U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C29E6/A03CAAF63D7011F0B10B60D3DAE4EC9C/769DF53E62F911F0B689408BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
129.122.15.0/24
Signature Algorithm: sha256WithRSAEncryption
76:a2:36:4d:df:fd:3a:70:89:d4:34:c4:73:f4:00:fc:23:28:
63:fa:6c:e0:c0:b7:2a:5f:f7:19:36:65:05:60:8a:89:53:1d:
64:67:0d:41:d7:c8:13:3f:47:f1:f7:d9:ce:e4:72:8c:6f:f8:
08:e4:67:28:72:95:ad:e6:07:03:dc:99:8b:9a:6c:60:92:c6:
78:e4:5d:8d:1a:1d:26:0a:3a:a8:cd:1f:33:98:f7:92:43:69:
6b:1a:58:91:59:48:a2:7e:b1:14:df:b5:1a:ee:a3:24:3e:92:
3e:97:b4:e8:f0:55:42:27:6a:61:eb:27:27:c0:31:77:51:d7:
8d:ca:1c:57:52:ff:2d:b1:c1:14:a8:7d:64:44:93:d9:7c:c9:
6d:f7:f7:51:81:9b:a2:0f:63:5c:03:f4:34:84:d4:07:fb:bc:
10:13:89:06:24:00:9c:45:8a:f3:a3:8e:ce:1a:fb:99:d2:d2:
41:f1:8c:b3:db:98:4a:e6:71:62:8c:73:3b:6d:cd:c6:f1:8e:
eb:91:84:a5:19:0f:68:dc:d5:b3:79:4d:49:69:c4:44:1f:20:
97:23:b4:32:7b:5c:f8:d2:cc:c5:28:09:6c:b2:c3:fc:27:5b:
97:4e:ae:14:35:78:49:4e:bc:9a:64:2c:cf:d1:f3:e2:55:6f:
2c:57:39:30
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIBRzANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZD
MjlFNkFSMTEwLwYDVQQFEygyNjI3NzE4OThEQjQ4RDY4RDU0MzBGQzBFMzkxMUVD
OTAzNjVCQkY1MB4XDTI1MDcxNzEwMzMxNloXDTI2MDUyOTEwMzMxNlowGDEWMBQG
A1UEAxMNNjg3OGQxNzMtZDk4MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANhfi2tnIDtf5WziOHA82xJwj6Cj8szgC/tcRLABVNLd/We6otD94IT0u0eK
WcFVYLKIiciWlWC+2nBjHCWizvTAArZBHY2+LZcWwOLKm1Cx1PGrFA+fMzVfnu+Q
nmXYD9MbUSD6DetNrVrK9wsz93ZfMNTbykfXztn80Z14+XfQWikxsPaYhVFEfUYm
w8foC20R73GCvaUQPVQm2HiCP2J7IP6WxfUz2XgsXW7cT7j/mgvS0jciaTA+vT5E
HBPY0O9wlIvnNbmTD2Hh4JBvm+TIC5H33oTzEXT/1RWQNPrG+0gE//TE7qte0673
BDorxVPgw0Z6P+ErvzoeLMJ3SCECAwEAAaOCAqIwggKeMB0GA1UdDgQWBBTa1i6t
mym+tao15KYHSBiDcJM3JjAfBgNVHSMEGDAWgBQmJ3GJjbSNaNVDD8DjkR7JA2W7
9TAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2QzI5RTYvQTAzQ0FBRjYzRDcwMTFGMEIxMEI2MEQzREFFNEVDOUMvSmlkeGlZ
MjBqV2pWUXdfQTQ1RWV5UU5sdV9VLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2FyaW4v
SmlkeGlZMjBqV2pWUXdfQTQ1RWV5UU5sdV9VLmNlcjBPBgNVHSABAf8ERTBDMEEG
CCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmljLm5l
dC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUFBzAL
hoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2QzI5RTYvQTAzQ0FBRjYzRDcwMTFGMEIxMEI2MEQzREFFNEVD
OUMvNzY5REY1M0U2MkY5MTFGMEI2ODk0MDhCREFFNEVDOUMucm9hMDUGCCsGAQUF
BzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAIF6DzANBgkqhkiG9w0BAQsFAAOC
AQEAdqI2Td/9OnCJ1DTEc/QA/CMoY/ps4MC3Kl/3GTZlBWCKiVMdZGcNQdfIEz9H
8ffZzuRyjG/4CORnKHKVreYHA9yZi5psYJLGeORdjRodJgo6qM0fM5j3kkNpaxpY
kVlIon6xFN+1Gu6jJD6SPpe06PBVQidqYesnJ8Axd1HXjcocV1L/LbHBFKh9ZEST
2XzJbff3UYGbog9jXAP0NITUB/u8EBOJBiQAnEWK86OOzhr7mdLSQfGMs9uYSuZx
YoxzO23NxvGO65GEpRkPaNzVs3lNSWnERB8glyO0Mntc+NLMxSgJbLLD/Cdbl06u
FDV4SU68mmQsz9Hz4lVvLFc5MA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 07:52:51 2025 by rpki-client