Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364EFD6/57F2CD8872C311F0A0E953DDDAE4EC9C/9541AB3072C511F0B751A3EADAE4EC9C.roa
File: 9541AB3072C511F0B751A3EADAE4EC9C.roa (raw, json)
Hash identifier: vPBn+oWUe69PAp7QQWCoYxx3fdMV6cty84al8xby7/E=
Subject key identifier: 5F:A1:53:A4:5B:58:B1:74:9C:E6:91:49:15:99:7A:33:97:B8:C1:D4
Certificate issuer: /CN=F364EFD6AF/serialNumber=50AE14B67E0A9AFF28A02F456C7E2F3A3D6CD282
Certificate serial: 02
Authority key identifier: 50:AE:14:B6:7E:0A:9A:FF:28:A0:2F:45:6C:7E:2F:3A:3D:6C:D2:82
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/UK4Utn4Kmv8ooC9FbH4vOj1s0oI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364EFD6/57F2CD8872C311F0A0E953DDDAE4EC9C/9541AB3072C511F0B751A3EADAE4EC9C.roa
Signing time: Wed 06 Aug 2025 13:02:19 +0000
ROA not before: Wed 06 Aug 2025 13:02:14 +0000
ROA not after: Wed 01 Dec 2049 13:02:14 +0000
asID: 329597
IP address blocks: 102.205.28.0/22 maxlen: 24
2c0f:6ec0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364EFD6/57F2CD8872C311F0A0E953DDDAE4EC9C/UK4Utn4Kmv8ooC9FbH4vOj1s0oI.crl
rsync://rpki.afrinic.net/repository/member_repository/F364EFD6/57F2CD8872C311F0A0E953DDDAE4EC9C/UK4Utn4Kmv8ooC9FbH4vOj1s0oI.mft
rsync://rpki.afrinic.net/repository/afrinic/UK4Utn4Kmv8ooC9FbH4vOj1s0oI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364EFD6AF, serialNumber=50AE14B67E0A9AFF28A02F456C7E2F3A3D6CD282
Validity
Not Before: Aug 6 13:02:14 2025 GMT
Not After : Dec 1 13:02:14 2049 GMT
Subject: CN=6893525b-4644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d0:71:6d:ac:e5:f7:a5:77:b1:b9:e2:7c:46:
64:ab:29:29:d7:d3:3b:d2:30:3e:57:f5:69:73:fb:
38:8e:cb:68:ea:55:6e:14:ec:e2:84:42:44:a7:87:
79:37:c1:74:22:75:cb:da:ef:78:67:d0:44:14:0f:
be:c4:2c:64:42:bc:52:68:94:15:06:5b:46:68:d4:
2d:3b:7f:55:63:a2:3b:cb:d8:e4:ef:87:af:93:2e:
da:55:f2:ad:01:52:11:44:64:b7:f5:ff:ef:b0:d5:
00:40:0b:ab:18:40:82:4c:2d:49:ae:ec:e2:67:2b:
4e:f2:69:ab:4f:18:ea:b8:17:09:a4:34:b4:c1:cf:
78:7f:c4:9a:ed:4d:a8:c1:d9:e7:6f:6a:07:3f:ff:
de:30:87:2e:d7:27:4c:8f:16:b1:a7:12:7b:c3:a4:
af:6c:06:8d:ab:2f:f5:bf:9c:03:b0:f5:1e:ec:71:
8b:8d:70:41:bc:6f:f8:10:ce:54:85:11:04:0d:1b:
f3:20:ff:52:a3:79:4c:45:f1:19:d9:08:2f:50:a9:
74:97:ff:ca:1c:c6:20:77:43:71:ea:0d:f8:30:32:
cb:6d:c7:3b:1e:62:31:86:49:0a:d3:74:f8:b8:10:
4a:c3:64:f1:1f:dc:5a:2c:06:c6:3b:07:d6:48:2e:
09:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A1:53:A4:5B:58:B1:74:9C:E6:91:49:15:99:7A:33:97:B8:C1:D4
X509v3 Authority Key Identifier:
keyid:50:AE:14:B6:7E:0A:9A:FF:28:A0:2F:45:6C:7E:2F:3A:3D:6C:D2:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364EFD6/57F2CD8872C311F0A0E953DDDAE4EC9C/UK4Utn4Kmv8ooC9FbH4vOj1s0oI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/UK4Utn4Kmv8ooC9FbH4vOj1s0oI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364EFD6/57F2CD8872C311F0A0E953DDDAE4EC9C/9541AB3072C511F0B751A3EADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.205.28.0/22
IPv6:
2c0f:6ec0::/32
Signature Algorithm: sha256WithRSAEncryption
4b:99:98:21:76:5d:0c:1a:f3:81:81:37:16:b6:87:6b:6f:29:
41:cd:1f:0c:1e:e7:fb:7e:70:27:cc:9b:42:a7:02:f4:52:63:
16:4b:9c:c3:a3:65:54:e0:51:8c:11:d4:9f:bc:16:e6:c8:ea:
bd:c4:b5:0f:93:32:83:10:e0:11:2d:63:4f:70:90:49:30:dd:
c9:b3:58:d1:fa:f5:2d:66:2b:6f:a2:07:81:00:8c:67:e9:38:
c6:cf:54:ad:b9:6c:1c:c3:45:9e:c2:04:b0:1d:05:87:f0:c4:
e5:c9:fa:0e:5b:79:80:79:5b:c2:dc:81:b4:69:a5:fc:a3:46:
63:7d:4c:d5:b8:62:b1:df:3c:b0:40:4a:f7:ac:bd:ae:7c:ca:
14:c8:4a:c0:6c:2b:fa:55:a1:14:16:20:ac:71:84:1a:89:e6:
36:1d:c7:04:93:86:8a:56:43:b2:98:56:84:ac:db:5f:cd:9a:
c9:19:24:4e:a9:cd:54:63:6c:c5:1a:c7:82:b9:f6:8e:22:6d:
8d:0b:dc:f1:95:de:3f:bb:52:c3:4c:be:9b:ff:e9:31:84:73:
82:e6:c9:62:7f:f5:69:13:b3:bf:d1:aa:ee:d6:4c:40:2f:c9:
c0:5f:2f:7f:b7:93:f7:0d:67:16:27:cf:fd:bc:f5:aa:ef:13:
fc:4f:26:71
-----BEGIN CERTIFICATE-----
MIIFkTCCBHmgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY0
RUZENkFGMTEwLwYDVQQFEyg1MEFFMTRCNjdFMEE5QUZGMjhBMDJGNDU2QzdFMkYz
QTNENkNEMjgyMB4XDTI1MDgwNjEzMDIxNFoXDTQ5MTIwMTEzMDIxNFowGDEWMBQG
A1UEAxMNNjg5MzUyNWItNDY0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALjQcW2s5feld7G54nxGZKspKdfTO9IwPlf1aXP7OI7LaOpVbhTs4oRCRKeH
eTfBdCJ1y9rveGfQRBQPvsQsZEK8UmiUFQZbRmjULTt/VWOiO8vY5O+Hr5Mu2lXy
rQFSEURkt/X/77DVAEALqxhAgkwtSa7s4mcrTvJpq08Y6rgXCaQ0tMHPeH/Emu1N
qMHZ529qBz//3jCHLtcnTI8WsacSe8Okr2wGjasv9b+cA7D1Huxxi41wQbxv+BDO
VIURBA0b8yD/UqN5TEXxGdkIL1CpdJf/yhzGIHdDceoN+DAyy23HOx5iMYZJCtN0
+LgQSsNk8R/cWiwGxjsH1kguCaECAwEAAaOCArQwggKwMB0GA1UdDgQWBBRfoVOk
W1ixdJzmkUkVmXozl7jB1DAfBgNVHSMEGDAWgBRQrhS2fgqa/yigL0Vsfi86PWzS
gjAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NEVGRDYvNTdGMkNEODg3MkMzMTFGMEEwRTk1M0REREFFNEVDOUMvVUs0VXRu
NEttdjhvb0M5RmJINHZPajFzMG9JLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvVUs0VXRuNEttdjhvb0M5RmJINHZPajFzMG9JLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NEVGRDYvNTdGMkNEODg3MkMzMTFGMEEwRTk1M0REREFF
NEVDOUMvOTU0MUFCMzA3MkM1MTFGMEI3NTFBM0VBREFFNEVDOUMucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAmbNHDANBAIAAjAHAwUALA9u
wDANBgkqhkiG9w0BAQsFAAOCAQEAS5mYIXZdDBrzgYE3FraHa28pQc0fDB7n+35w
J8ybQqcC9FJjFkucw6NlVOBRjBHUn7wW5sjqvcS1D5MygxDgES1jT3CQSTDdybNY
0fr1LWYrb6IHgQCMZ+k4xs9UrblsHMNFnsIEsB0Fh/DE5cn6Dlt5gHlbwtyBtGml
/KNGY31M1bhisd88sEBK96y9rnzKFMhKwGwr+lWhFBYgrHGEGonmNh3HBJOGilZD
sphWhKzbX82ayRkkTqnNVGNsxRrHgrn2jiJtjQvc8ZXeP7tSw0y+m//pMYRzgubJ
Yn/1aROzv9Gq7tZMQC/JwF8vf7eT9w1nFifP/bz1qu8T/E8mcQ==
-----END CERTIFICATE-----
Generated at Sun Aug 24 00:27:05 2025 by rpki-client