Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/2A6685A046C511F0B86F727DDAE4EC9C.roa
File: 2A6685A046C511F0B86F727DDAE4EC9C.roa (raw, json)
Hash identifier: HCT4XLH64I5ImsqzEiVDAlrxg3B90jJrq1xSnA/3dFo=
Subject key identifier: 03:39:38:99:D2:5D:DE:DC:35:9C:AC:02:15:33:C1:51:01:60:F1:33
Certificate issuer: /CN=F362E39EAF/serialNumber=A1368E8BFC80F4EA5AB09716D257211936182851
Certificate serial: 0D44
Authority key identifier: A1:36:8E:8B:FC:80:F4:EA:5A:B0:97:16:D2:57:21:19:36:18:28:51
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/oTaOi_yA9OpasJcW0lchGTYYKFE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/2A6685A046C511F0B86F727DDAE4EC9C.roa
Signing time: Wed 11 Jun 2025 13:08:29 +0000
ROA not before: Tue 24 Jun 2025 13:08:24 +0000
ROA not after: Fri 18 Oct 2030 13:08:24 +0000
asID: 11845
IP address blocks: 102.217.196.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.crl
rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.mft
rsync://rpki.afrinic.net/repository/afrinic/oTaOi_yA9OpasJcW0lchGTYYKFE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 01:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3396 (0xd44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362E39EAF, serialNumber=A1368E8BFC80F4EA5AB09716D257211936182851
Validity
Not Before: Jun 24 13:08:24 2025 GMT
Not After : Oct 18 13:08:24 2030 GMT
Subject: CN=68497fcc-307a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:69:18:01:a7:f6:7c:f1:ef:09:a7:3f:1c:50:
c6:78:66:7e:97:61:4d:da:f9:f3:a7:3b:4e:d2:1c:
ee:47:e9:1b:1f:2b:bc:75:77:b9:2d:6a:2e:24:e4:
f4:45:6a:07:df:61:0c:fd:7f:55:c9:0e:bd:b2:23:
67:a1:d1:78:4d:81:66:b1:5e:d6:fe:f3:d6:29:b1:
39:95:88:a8:ee:af:c5:4a:6b:fc:13:3b:2a:e1:f1:
8e:1f:b1:4b:cf:3b:4f:d5:4a:c3:1b:07:a7:71:71:
3d:ab:57:ec:72:07:07:b4:2b:b4:e6:df:0c:43:9d:
86:2e:c8:c1:80:1a:f8:d6:cb:0b:a1:58:04:13:85:
07:de:db:66:30:84:52:a6:e1:b3:4f:f4:b2:f1:53:
c4:4c:7e:ed:d4:aa:53:c3:93:77:20:89:34:83:c8:
f6:b3:be:06:db:33:b6:cc:ca:6a:2d:65:7f:2d:c7:
44:42:c7:97:f1:f9:d5:40:e2:d2:56:d0:67:43:4b:
d3:01:48:74:72:22:56:4b:29:b3:9c:26:03:64:70:
4c:96:2d:47:85:d9:e6:b6:13:9a:04:37:cd:04:0e:
a6:12:05:57:ab:41:25:f0:2b:8a:d5:d8:bb:87:3e:
2b:2b:b9:7d:e6:f3:6d:42:20:6a:27:7a:be:72:fc:
59:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:39:38:99:D2:5D:DE:DC:35:9C:AC:02:15:33:C1:51:01:60:F1:33
X509v3 Authority Key Identifier:
keyid:A1:36:8E:8B:FC:80:F4:EA:5A:B0:97:16:D2:57:21:19:36:18:28:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/oTaOi_yA9OpasJcW0lchGTYYKFE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/2A6685A046C511F0B86F727DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.217.196.0/22
Signature Algorithm: sha256WithRSAEncryption
63:c9:36:4c:1d:cc:76:30:00:72:32:c3:30:00:10:f8:de:c3:
64:77:1d:54:bf:a8:d3:ca:a9:b9:4e:30:9f:4d:a8:66:8b:b8:
a8:31:91:34:96:88:c9:29:a7:98:56:0e:72:ab:2a:52:4f:48:
f2:be:0a:6d:fb:a9:c8:e3:7c:eb:09:a8:cc:e0:f0:a8:80:66:
bd:a6:1a:8c:63:9c:6a:2f:58:20:eb:9b:7d:1b:7c:c7:d1:07:
a1:33:87:d5:7d:50:b0:88:3b:1c:bf:33:89:5e:79:7a:f0:aa:
dc:81:f9:c2:19:88:48:a0:79:11:35:87:a8:68:fe:b7:9d:c9:
80:8d:9f:3f:2d:08:3a:68:ec:51:4f:7f:d2:d9:39:a3:81:84:
ec:0a:18:b7:39:90:3e:46:f9:73:f8:e6:bf:4b:20:f6:3f:38:
de:f6:6e:21:f9:37:9a:d9:09:c8:e3:33:e8:91:c4:e4:22:a0:
e7:1c:0a:1a:07:e7:e6:72:82:f3:6b:a1:55:d8:4e:89:03:fa:
92:9c:a6:57:27:84:3f:c6:32:3b:17:da:80:d1:01:83:60:43:
b6:2a:cb:47:78:9c:89:25:ec:25:ac:0a:08:78:63:4d:23:e1:
c2:e2:29:f9:83:2c:62:5d:99:68:30:8f:36:c5:7c:05:a1:36:
31:68:66:ed
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDUQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MkUzOUVBRjExMC8GA1UEBRMoQTEzNjhFOEJGQzgwRjRFQTVBQjA5NzE2RDI1NzIx
MTkzNjE4Mjg1MTAeFw0yNTA2MjQxMzA4MjRaFw0zMDEwMTgxMzA4MjRaMBgxFjAU
BgNVBAMTDTY4NDk3ZmNjLTMwN2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC2aRgBp/Z88e8Jpz8cUMZ4Zn6XYU3a+fOnO07SHO5H6RsfK7x1d7ktai4k
5PRFagffYQz9f1XJDr2yI2eh0XhNgWaxXtb+89YpsTmViKjur8VKa/wTOyrh8Y4f
sUvPO0/VSsMbB6dxcT2rV+xyBwe0K7Tm3wxDnYYuyMGAGvjWywuhWAQThQfe22Yw
hFKm4bNP9LLxU8RMfu3UqlPDk3cgiTSDyPazvgbbM7bMymotZX8tx0RCx5fx+dVA
4tJW0GdDS9MBSHRyIlZLKbOcJgNkcEyWLUeF2ea2E5oEN80EDqYSBVerQSXwK4rV
2LuHPisruX3m821CIGoner5y/Fm5AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUAzk4
mdJd3tw1nKwCFTPBUQFg8TMwHwYDVR0jBBgwFoAUoTaOi/yA9OpasJcW0lchGTYY
KFEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjJFMzlFLzIwMDE5MTg0ODBBQjExRTZBMTE3QUU2M0Y4QUVBMjI4L29UYU9p
X3lBOU9wYXNKY1cwbGNoR1RZWUtGRS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL29UYU9pX3lBOU9wYXNKY1cwbGNoR1RZWUtGRS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjJFMzlFLzIwMDE5MTg0ODBBQjExRTZBMTE3QUU2M0Y4
QUVBMjI4LzJBNjY4NUEwNDZDNTExRjBCODZGNzI3RERBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJm2cQwDQYJKoZIhvcNAQEL
BQADggEBAGPJNkwdzHYwAHIywzAAEPjew2R3HVS/qNPKqblOMJ9NqGaLuKgxkTSW
iMkpp5hWDnKrKlJPSPK+Cm37qcjjfOsJqMzg8KiAZr2mGoxjnGovWCDrm30bfMfR
B6Ezh9V9ULCIOxy/M4leeXrwqtyB+cIZiEigeRE1h6ho/redyYCNnz8tCDpo7FFP
f9LZOaOBhOwKGLc5kD5G+XP45r9LIPY/ON72biH5N5rZCcjjM+iRxOQioOccChoH
5+ZygvNroVXYTokD+pKcplcnhD/GMjsX2oDRAYNgQ7Yqy0d4nIkl7CWsCgh4Y00j
4cLiKfmDLGJdmWgwjzbFfAWhNjFoZu0=
-----END CERTIFICATE-----
Generated at Tue Jul 1 18:29:54 2025 by rpki-client