Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C5C48/902C8B843C6411F0ADBE878DDAE4EC9C/7810FC3C3C6511F09E134B93DAE4EC9C.roa
File: 7810FC3C3C6511F09E134B93DAE4EC9C.roa (raw, json)
Hash identifier: f1/GvpZGuXTR7gHR1RFHDPtCJrb5runsWbtXK95Q83A=
Subject key identifier: 9F:42:50:C0:6B:43:43:8F:C7:21:A5:2B:05:1E:13:BA:F6:07:D7:7B
Certificate issuer: /CN=F36C5C48AF/serialNumber=C83FD0E15D143C37F9947497CF866F8FAE7470B9
Certificate serial: 03
Authority key identifier: C8:3F:D0:E1:5D:14:3C:37:F9:94:74:97:CF:86:6F:8F:AE:74:70:B9
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/yD_Q4V0UPDf5lHSXz4Zvj650cLk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C5C48/902C8B843C6411F0ADBE878DDAE4EC9C/7810FC3C3C6511F09E134B93DAE4EC9C.roa
Signing time: Thu 29 May 2025 08:18:16 +0000
ROA not before: Thu 29 May 2025 08:18:11 +0000
ROA not after: Mon 31 Dec 2035 08:18:11 +0000
asID: 329515
IP address blocks: 102.207.94.0/23 maxlen: 23
102.207.94.0/24 maxlen: 24
102.207.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C5C48/902C8B843C6411F0ADBE878DDAE4EC9C/yD_Q4V0UPDf5lHSXz4Zvj650cLk.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C5C48/902C8B843C6411F0ADBE878DDAE4EC9C/yD_Q4V0UPDf5lHSXz4Zvj650cLk.mft
rsync://rpki.afrinic.net/repository/afrinic/yD_Q4V0UPDf5lHSXz4Zvj650cLk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Jun 2025 05:22:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C5C48AF, serialNumber=C83FD0E15D143C37F9947497CF866F8FAE7470B9
Validity
Not Before: May 29 08:18:11 2025 GMT
Not After : Dec 31 08:18:11 2035 GMT
Subject: CN=68381847-cae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f5:50:e8:64:50:a0:89:02:c5:2d:b3:b4:6a:
28:37:be:3a:af:38:a3:bc:8d:9c:b3:6e:cb:71:ec:
53:dc:8f:dc:54:09:ad:f4:4e:d6:39:3d:11:0c:f5:
7a:d0:cc:f4:ef:6d:19:e1:b9:a5:58:61:03:d6:df:
1f:f0:24:91:ce:e0:a4:e0:5f:2c:25:6e:f5:33:c0:
bf:63:1d:f2:a5:0e:ce:8f:98:2c:53:d5:44:fc:ae:
fa:bc:67:ba:89:93:fb:1e:52:b8:11:4f:04:1d:b4:
03:41:74:05:3c:f8:67:7d:c6:05:56:96:6a:07:16:
e1:0b:8b:ed:90:fc:65:7e:14:bb:4d:0e:57:c8:04:
a7:12:97:54:3c:e6:71:6b:f0:55:ab:14:bc:1c:ac:
22:9e:8e:b0:55:70:ac:ed:28:b8:78:07:64:ab:2a:
54:98:f5:03:18:cc:35:ea:ef:cc:02:53:63:cb:5d:
1e:0b:6c:d3:d3:ac:47:42:25:3f:c6:bc:91:fd:36:
ba:80:ef:5d:4f:97:d7:a8:41:a8:98:a0:ab:49:ec:
d5:3a:1d:04:e0:3f:e3:47:5c:42:a2:66:d5:d5:98:
c1:82:85:ce:23:f5:dc:79:a3:11:eb:40:d9:88:af:
49:9f:04:8d:44:1a:89:b2:bb:39:5a:f0:a8:cc:58:
58:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:42:50:C0:6B:43:43:8F:C7:21:A5:2B:05:1E:13:BA:F6:07:D7:7B
X509v3 Authority Key Identifier:
keyid:C8:3F:D0:E1:5D:14:3C:37:F9:94:74:97:CF:86:6F:8F:AE:74:70:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C5C48/902C8B843C6411F0ADBE878DDAE4EC9C/yD_Q4V0UPDf5lHSXz4Zvj650cLk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yD_Q4V0UPDf5lHSXz4Zvj650cLk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C5C48/902C8B843C6411F0ADBE878DDAE4EC9C/7810FC3C3C6511F09E134B93DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.207.94.0/23
Signature Algorithm: sha256WithRSAEncryption
83:cf:9b:3f:17:a2:d1:0b:a6:79:0d:d4:59:fd:96:74:6d:e8:
80:13:fc:1c:66:51:2c:12:8a:4c:dc:37:91:95:bc:2b:dc:4f:
a6:1e:bf:d5:67:80:49:25:0e:e8:2b:2c:ff:16:6c:2a:a3:30:
83:92:1f:ee:ff:51:c6:4f:7d:10:3b:c8:9c:2e:a6:46:19:12:
f2:7c:9e:b7:1f:e2:8a:7e:7b:ad:17:93:25:0b:34:ce:04:4c:
88:fa:ad:07:4d:95:7f:ff:9f:3e:52:22:e9:df:03:5b:80:d6:
9f:ce:56:f5:0f:2b:68:7b:e1:65:aa:76:3f:6e:02:63:76:57:
87:c3:b6:bf:46:29:f5:6e:ea:f8:ea:22:dd:99:82:57:75:e6:
40:d1:9e:d8:e7:08:75:b8:20:32:94:c9:0a:14:5f:8b:0e:6e:
ca:9a:3b:d7:06:ea:f5:b7:ba:71:a0:60:12:03:ab:0f:ee:31:
5c:73:22:95:a2:27:12:04:06:b9:c1:e2:00:cc:3d:b9:7b:2b:
82:05:d6:40:38:93:ec:cd:2f:9d:46:4a:91:a0:4f:76:43:56:
67:2b:f0:4b:ab:4b:1b:46:6b:4c:32:cc:72:38:20:cf:8c:60:
87:16:03:3e:eb:63:82:be:88:ff:14:7f:34:88:6e:c2:52:09:
53:cf:41:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 01:47:05 2025 by rpki-client