Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C29E6/A03CAAF63D7011F0B10B60D3DAE4EC9C/9CAFF39E3D7911F0A5B06E8EDAE4EC9C.roa
File: 9CAFF39E3D7911F0A5B06E8EDAE4EC9C.roa (raw, json)
Hash identifier: 4NHjoQGTTlHmH8yq4w8j6ZVzPHfLg/g1ZSTAdCi3yzY=
Subject key identifier: BD:88:A4:E3:3D:77:53:0F:2F:36:77:FD:C3:18:C3:92:74:A1:7A:EE
Certificate issuer: /CN=F36C29E6AR/serialNumber=262771898DB48D68D5430FC0E3911EC90365BBF5
Certificate serial: 08
Authority key identifier: 26:27:71:89:8D:B4:8D:68:D5:43:0F:C0:E3:91:1E:C9:03:65:BB:F5
Authority info access: rsync://rpki.afrinic.net/repository/arin/JidxiY20jWjVQw_A45EeyQNlu_U.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C29E6/A03CAAF63D7011F0B10B60D3DAE4EC9C/9CAFF39E3D7911F0A5B06E8EDAE4EC9C.roa
Signing time: Fri 30 May 2025 17:14:58 +0000
ROA not before: Fri 30 May 2025 17:14:53 +0000
ROA not after: Fri 29 May 2026 17:14:53 +0000
asID: 327947
IP address blocks: 129.122.36.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C29E6/A03CAAF63D7011F0B10B60D3DAE4EC9C/JidxiY20jWjVQw_A45EeyQNlu_U.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C29E6/A03CAAF63D7011F0B10B60D3DAE4EC9C/JidxiY20jWjVQw_A45EeyQNlu_U.mft
rsync://rpki.afrinic.net/repository/arin/JidxiY20jWjVQw_A45EeyQNlu_U.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 10 Jun 2025 00:26:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8 (0x8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C29E6AR, serialNumber=262771898DB48D68D5430FC0E3911EC90365BBF5
Validity
Not Before: May 30 17:14:53 2025 GMT
Not After : May 29 17:14:53 2026 GMT
Subject: CN=6839e792-14c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:82:b7:4f:95:6c:7f:bf:08:5f:5b:65:e8:74:
fb:f6:04:a3:95:d3:96:e1:36:23:72:60:8a:cf:3a:
69:6f:eb:ec:8b:c1:64:08:84:93:fb:14:92:ed:ef:
16:ed:70:8c:63:e9:af:15:cb:b2:f0:99:15:54:9d:
b5:51:a4:d1:fa:95:ab:33:5c:22:39:59:45:87:4f:
ed:ec:c9:13:bb:03:44:f6:e8:9a:47:d6:db:e8:84:
f1:1f:5b:ce:1a:1d:3d:d8:a0:bf:b9:78:8f:13:f1:
00:a5:98:32:93:7d:e3:40:10:e5:1a:58:30:5d:86:
38:df:ad:87:96:4b:16:4d:a7:be:34:a6:a5:7a:fd:
96:dd:54:57:03:f6:1e:c0:80:3f:a8:d6:35:3b:4a:
39:77:db:fc:12:a4:bb:03:3a:e1:83:bc:81:17:99:
a6:7a:26:55:01:27:56:9a:db:54:e0:c0:65:17:51:
9c:ff:a7:2a:bd:f1:5e:81:3f:79:13:a7:70:a8:9d:
93:7e:ec:53:db:eb:fc:69:d6:48:bd:f4:7e:1c:d1:
36:5d:53:7c:48:b2:5e:cd:f9:bf:ea:85:ad:3c:64:
89:5c:eb:b9:0b:21:fa:2f:63:cb:8e:ff:7b:f6:92:
e8:f8:89:93:6e:0a:bf:ea:56:d6:87:5d:64:85:3a:
ce:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:88:A4:E3:3D:77:53:0F:2F:36:77:FD:C3:18:C3:92:74:A1:7A:EE
X509v3 Authority Key Identifier:
keyid:26:27:71:89:8D:B4:8D:68:D5:43:0F:C0:E3:91:1E:C9:03:65:BB:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C29E6/A03CAAF63D7011F0B10B60D3DAE4EC9C/JidxiY20jWjVQw_A45EeyQNlu_U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/JidxiY20jWjVQw_A45EeyQNlu_U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C29E6/A03CAAF63D7011F0B10B60D3DAE4EC9C/9CAFF39E3D7911F0A5B06E8EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
129.122.36.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:06:1b:c6:33:b0:ed:73:13:4c:80:b7:6a:fd:ee:83:30:89:
44:fc:6f:e7:50:5a:ec:b8:ec:65:11:41:4e:cb:14:f0:96:41:
b6:48:63:9c:a9:ea:fd:a7:f9:19:f8:c8:ab:79:f5:dd:41:4b:
b7:63:d0:32:f5:0d:e5:1d:e8:6e:18:2f:9f:dd:1d:6d:41:a8:
58:cc:0f:82:8f:d2:da:41:14:f4:71:c6:f9:7d:14:2b:4a:03:
62:be:c4:be:f4:1c:79:09:2b:a9:7d:ee:ce:fa:27:80:e0:c9:
aa:52:fc:73:96:ef:ef:a2:d9:62:f6:2d:1c:f0:5c:97:92:03:
4b:99:bf:e2:64:cf:5c:39:cf:ca:a0:3e:c4:c2:d7:88:b2:9c:
ed:e5:fd:92:da:1e:a4:bd:46:73:2c:5d:8a:6d:2c:6b:44:55:
a0:c9:45:c0:ca:46:9c:66:cf:58:ad:85:1c:6d:9d:48:ed:6a:
0f:c5:d5:c8:c2:9f:1f:45:f2:b9:52:48:e1:cb:2f:ff:93:b8:
92:d7:5e:5b:7f:a4:93:68:63:63:43:7f:7c:80:98:cf:33:09:
48:3a:59:24:89:46:ec:37:8a:80:5d:0b:ab:49:6c:76:0c:48:
74:48:e6:2a:61:c7:14:da:03:d7:f4:89:68:de:9c:ec:53:44:
40:6c:cf:52
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIBCDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZD
MjlFNkFSMTEwLwYDVQQFEygyNjI3NzE4OThEQjQ4RDY4RDU0MzBGQzBFMzkxMUVD
OTAzNjVCQkY1MB4XDTI1MDUzMDE3MTQ1M1oXDTI2MDUyOTE3MTQ1M1owGDEWMBQG
A1UEAxMNNjgzOWU3OTItMTRjMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALiCt0+VbH+/CF9bZeh0+/YEo5XTluE2I3Jgis86aW/r7IvBZAiEk/sUku3v
Fu1wjGPprxXLsvCZFVSdtVGk0fqVqzNcIjlZRYdP7ezJE7sDRPbomkfW2+iE8R9b
zhodPdigv7l4jxPxAKWYMpN940AQ5RpYMF2GON+th5ZLFk2nvjSmpXr9lt1UVwP2
HsCAP6jWNTtKOXfb/BKkuwM64YO8gReZpnomVQEnVprbVODAZRdRnP+nKr3xXoE/
eROncKidk37sU9vr/GnWSL30fhzRNl1TfEiyXs35v+qFrTxkiVzruQsh+i9jy47/
e/aS6PiJk24Kv+pW1oddZIU6zlECAwEAAaOCAqIwggKeMB0GA1UdDgQWBBS9iKTj
PXdTDy82d/3DGMOSdKF67jAfBgNVHSMEGDAWgBQmJ3GJjbSNaNVDD8DjkR7JA2W7
9TAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2QzI5RTYvQTAzQ0FBRjYzRDcwMTFGMEIxMEI2MEQzREFFNEVDOUMvSmlkeGlZ
MjBqV2pWUXdfQTQ1RWV5UU5sdV9VLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2FyaW4v
SmlkeGlZMjBqV2pWUXdfQTQ1RWV5UU5sdV9VLmNlcjBPBgNVHSABAf8ERTBDMEEG
CCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmljLm5l
dC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUFBzAL
hoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2QzI5RTYvQTAzQ0FBRjYzRDcwMTFGMEIxMEI2MEQzREFFNEVD
OUMvOUNBRkYzOUUzRDc5MTFGMEE1QjA2RThFREFFNEVDOUMucm9hMDUGCCsGAQUF
BzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAoF6JDANBgkqhkiG9w0BAQsFAAOC
AQEATAYbxjOw7XMTTIC3av3ugzCJRPxv51Ba7LjsZRFBTssU8JZBtkhjnKnq/af5
GfjIq3n13UFLt2PQMvUN5R3obhgvn90dbUGoWMwPgo/S2kEU9HHG+X0UK0oDYr7E
vvQceQkrqX3uzvongODJqlL8c5bv76LZYvYtHPBcl5IDS5m/4mTPXDnPyqA+xMLX
iLKc7eX9ktoepL1Gcyxdim0sa0RVoMlFwMpGnGbPWK2FHG2dSO1qD8XVyMKfH0Xy
uVJI4csv/5O4ktdeW3+kk2hjY0N/fICYzzMJSDpZJIlG7DeKgF0Lq0lsdgxIdEjm
KmHHFNoD1/SJaN6c7FNEQGzPUg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 19:22:50 2025 by rpki-client