Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/54E0B51E488511F080DF8EEADAE4EC9C.roa
File: 54E0B51E488511F080DF8EEADAE4EC9C.roa (raw, json)
Hash identifier: xuJuwfnjdoQZ83xh7OzG+p/2cET7IrO/0ym2Gggy2bQ=
Subject key identifier: 19:FD:59:A7:41:9F:3D:AE:35:46:4B:A0:3D:FA:F9:1A:2A:6B:09:00
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0B58
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/54E0B51E488511F080DF8EEADAE4EC9C.roa
Signing time: Fri 13 Jun 2025 18:36:34 +0000
ROA not before: Fri 13 Jun 2025 18:36:29 +0000
ROA not after: Sat 13 Jun 2026 18:36:29 +0000
asID: 29802
IP address blocks: 102.135.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 01 Jul 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2904 (0xb58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Jun 13 18:36:29 2025 GMT
Not After : Jun 13 18:36:29 2026 GMT
Subject: CN=684c6fb2-977b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fe:60:0a:8f:dd:ea:1d:2f:da:56:80:32:d4:
27:94:e4:f8:81:5b:dc:fc:8d:04:91:56:61:3b:4d:
fc:1e:d5:33:7d:84:c9:5f:f7:ab:bc:c3:18:b3:58:
47:f2:3c:92:73:c1:c5:c6:0a:15:14:f7:cb:aa:60:
90:4f:8d:d9:a2:38:de:66:6e:43:7d:1d:ce:05:09:
d1:36:f6:51:15:e0:d2:77:2d:e6:4b:06:60:f2:94:
d3:fd:d8:89:c5:f7:33:9f:ee:ec:c2:c7:5b:2f:d8:
ac:ac:83:d6:46:ec:f9:a5:eb:f6:5d:3e:3e:ff:1e:
42:84:03:0d:45:4c:d6:e1:ba:d8:e9:00:8b:82:ef:
06:d6:57:9a:e6:b0:6a:40:5c:3c:72:18:a0:8c:ec:
e3:34:24:5b:e7:30:cb:79:4a:25:1a:ed:b7:0e:74:
d6:67:08:1b:10:99:c8:97:72:a4:af:be:f5:38:ae:
8f:b8:e9:ac:3a:94:41:fa:04:01:86:50:eb:da:cc:
ff:a2:ab:e5:27:9c:5a:f1:62:5d:ec:38:58:17:36:
7b:05:52:37:65:2e:02:d2:a3:95:ac:eb:07:f1:1e:
df:ae:29:97:e5:12:f8:0b:21:c1:70:42:19:d9:cb:
b3:a0:ea:ae:58:70:0b:a6:ea:e5:0a:45:c1:a8:89:
3f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:FD:59:A7:41:9F:3D:AE:35:46:4B:A0:3D:FA:F9:1A:2A:6B:09:00
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/54E0B51E488511F080DF8EEADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.21.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:45:12:ec:ce:c6:53:4c:51:e8:0f:2f:d3:a8:88:b1:82:35:
1b:d9:76:a4:36:df:32:fe:e2:f9:f0:fa:24:a3:ee:83:5e:51:
df:bd:7c:6b:68:64:42:b2:44:16:d7:73:d7:26:aa:24:9a:dd:
0b:bf:3e:4a:6f:2c:56:d3:3c:5c:28:a2:5b:b8:58:33:68:d1:
04:f7:ee:98:58:b7:4c:25:e2:57:93:bd:d0:bf:bf:ff:3f:a5:
90:5d:68:1a:7b:9f:ec:4f:e4:7d:28:56:69:14:3b:ee:05:94:
49:38:15:b1:d3:7a:9e:e9:43:af:a0:68:59:54:37:a1:47:5e:
1f:b0:ae:c4:f9:32:72:ce:cf:27:93:94:a2:a5:70:9a:29:c2:
05:5c:a7:e4:f0:86:d7:c0:09:97:ed:d5:45:1b:37:36:34:8a:
68:4d:f0:f9:30:e9:c6:e4:77:44:1c:75:42:20:5a:b6:25:2a:
3e:e6:04:8b:db:fb:c2:cb:fd:a0:87:df:59:a8:79:f6:64:2d:
47:4e:10:0e:54:cf:2c:b8:3f:ba:89:d8:69:3d:04:fb:c6:cb:
17:a0:c6:f8:9b:28:b4:ce:dc:eb:33:41:7a:77:9a:9c:37:e4:
fd:3d:01:73:91:b3:27:b3:d4:cd:a4:e0:a6:3d:7d:18:34:62:
a4:85:59:82
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICC1gwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNTA2MTMxODM2MjlaFw0yNjA2MTMxODM2MjlaMBgxFjAU
BgNVBAMTDTY4NGM2ZmIyLTk3N2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDG/mAKj93qHS/aVoAy1CeU5PiBW9z8jQSRVmE7Tfwe1TN9hMlf96u8wxiz
WEfyPJJzwcXGChUU98uqYJBPjdmiON5mbkN9Hc4FCdE29lEV4NJ3LeZLBmDylNP9
2InF9zOf7uzCx1sv2Kysg9ZG7Pml6/ZdPj7/HkKEAw1FTNbhutjpAIuC7wbWV5rm
sGpAXDxyGKCM7OM0JFvnMMt5SiUa7bcOdNZnCBsQmciXcqSvvvU4ro+46aw6lEH6
BAGGUOvazP+iq+UnnFrxYl3sOFgXNnsFUjdlLgLSo5Ws6wfxHt+uKZflEvgLIcFw
QhnZy7Og6q5YcAum6uUKRcGoiT9VAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUGf1Z
p0GfPa41RkugPfr5GiprCQAwHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3LzU0RTBCNTFFNDg4NTExRjA4MERGOEVFQURBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmhxUwDQYJKoZIhvcNAQEL
BQADggEBAMFFEuzOxlNMUegPL9OoiLGCNRvZdqQ23zL+4vnw+iSj7oNeUd+9fGto
ZEKyRBbXc9cmqiSa3Qu/PkpvLFbTPFwoolu4WDNo0QT37phYt0wl4leTvdC/v/8/
pZBdaBp7n+xP5H0oVmkUO+4FlEk4FbHTep7pQ6+gaFlUN6FHXh+wrsT5MnLOzyeT
lKKlcJopwgVcp+TwhtfACZft1UUbNzY0imhN8Pkw6cbkd0QcdUIgWrYlKj7mBIvb
+8LL/aCH31moefZkLUdOEA5Uzyy4P7qJ2Gk9BPvGyxegxvibKLTO3OszQXp3mpw3
5P09AXORsyez1M2k4KY9fRg0YqSFWYI=
-----END CERTIFICATE-----
Generated at Sun Jun 29 09:30:02 2025 by rpki-client