Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36576E8/C3808986FC6111ECB17E22ABF1222468/40EAC0D62BD411F0A36BE4B8DAE4EC9C.roa
File: 40EAC0D62BD411F0A36BE4B8DAE4EC9C.roa (raw, json)
Hash identifier: 9fvE1IFZCB+MmUfnvjTiAQ0VJX4n1Jw5PnZOQzfgAA8=
Subject key identifier: 5B:D8:74:38:47:65:A6:CE:AF:02:BB:C7:0B:A3:72:B3:25:66:49:F5
Certificate issuer: /CN=F36576E8AF/serialNumber=DBF68C9C5C01D68EBC0C90DEE4C0749DA23A2FD6
Certificate serial: 0446
Authority key identifier: DB:F6:8C:9C:5C:01:D6:8E:BC:0C:90:DE:E4:C0:74:9D:A2:3A:2F:D6
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/2_aMnFwB1o68DJDe5MB0naI6L9Y.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36576E8/C3808986FC6111ECB17E22ABF1222468/40EAC0D62BD411F0A36BE4B8DAE4EC9C.roa
Signing time: Thu 08 May 2025 06:18:27 +0000
ROA not before: Thu 08 May 2025 06:18:23 +0000
ROA not after: Mon 07 May 2035 06:18:23 +0000
asID: 327991
IP address blocks: 102.206.216.0/23 maxlen: 23
102.206.218.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36576E8/C3808986FC6111ECB17E22ABF1222468/2_aMnFwB1o68DJDe5MB0naI6L9Y.crl
rsync://rpki.afrinic.net/repository/member_repository/F36576E8/C3808986FC6111ECB17E22ABF1222468/2_aMnFwB1o68DJDe5MB0naI6L9Y.mft
rsync://rpki.afrinic.net/repository/afrinic/2_aMnFwB1o68DJDe5MB0naI6L9Y.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 20 May 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1094 (0x446)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36576E8AF, serialNumber=DBF68C9C5C01D68EBC0C90DEE4C0749DA23A2FD6
Validity
Not Before: May 8 06:18:23 2025 GMT
Not After : May 7 06:18:23 2035 GMT
Subject: CN=681c4cb3-83c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a2:f8:87:7f:94:f9:b2:ce:2e:f4:e0:b0:fd:
aa:f1:4c:35:fc:36:10:1b:26:c7:a9:a5:9a:0f:61:
56:18:e6:68:c7:2d:6c:42:00:f8:57:96:a7:8b:b9:
32:65:99:27:6e:32:e4:fc:84:8f:fd:b3:29:b9:b0:
ea:a8:1d:c2:71:a6:b7:02:ad:92:f2:1e:1c:c5:d0:
26:fc:dc:06:1a:0b:6e:86:ee:0a:a0:47:3f:fc:53:
8c:ed:f4:ff:b9:53:06:77:2f:67:8b:5b:3d:36:da:
37:e3:f8:97:a3:9c:95:6f:47:85:fc:7e:33:9e:95:
d1:0d:7e:ea:bb:bd:ea:ea:e8:3a:dd:cf:a3:14:09:
ce:92:2e:36:4d:8b:16:9f:80:20:a2:dd:46:18:f0:
df:d7:ba:a5:2e:ce:b8:7d:40:3b:69:79:5f:34:7b:
77:6e:de:20:82:6a:75:41:07:3d:b0:7f:78:e9:52:
8e:df:7e:76:88:24:68:a0:00:52:6b:12:9e:b3:ee:
03:af:86:23:81:15:44:31:74:87:94:01:ed:4d:24:
a7:f9:77:e9:2c:bb:ef:8f:ef:0d:54:f6:b5:a7:7d:
9f:ab:1d:c5:5c:16:7b:7d:44:aa:9d:45:6b:49:73:
ba:be:b4:84:c5:13:8c:f0:1a:8b:42:09:25:a8:71:
91:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:D8:74:38:47:65:A6:CE:AF:02:BB:C7:0B:A3:72:B3:25:66:49:F5
X509v3 Authority Key Identifier:
keyid:DB:F6:8C:9C:5C:01:D6:8E:BC:0C:90:DE:E4:C0:74:9D:A2:3A:2F:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36576E8/C3808986FC6111ECB17E22ABF1222468/2_aMnFwB1o68DJDe5MB0naI6L9Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2_aMnFwB1o68DJDe5MB0naI6L9Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36576E8/C3808986FC6111ECB17E22ABF1222468/40EAC0D62BD411F0A36BE4B8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.206.216.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:a3:13:0d:57:1a:b2:76:97:ab:21:34:e5:3f:68:ff:01:ef:
a0:b7:67:db:ee:79:50:41:9c:50:81:b5:bc:26:b4:05:01:db:
61:b0:12:87:ba:cd:3e:8a:3f:8b:fe:28:15:a8:d4:75:d2:54:
a6:87:5f:51:00:a8:9d:ba:a0:ce:8b:a2:27:1e:ff:ba:11:e1:
bf:f8:c1:bf:5a:86:e6:a0:dc:96:28:40:6a:5b:74:bd:d9:08:
e0:5c:1d:7b:d3:4b:bd:24:18:ae:b7:ee:58:c5:fa:2c:0a:54:
59:dd:0f:80:84:1c:ac:e4:e3:39:dd:45:dd:7f:5e:75:40:f9:
a6:f8:78:0a:83:65:a5:19:60:80:d2:1a:5f:6d:95:49:18:24:
7a:de:17:7c:33:71:6b:2b:b2:43:b0:e2:fa:be:83:fc:f3:86:
9c:12:2c:f5:a7:46:7e:9b:c4:0a:de:40:8d:6d:42:0b:5d:8c:
95:d1:29:b7:bc:98:d7:df:58:75:0f:ac:34:35:8c:a9:0a:ea:
74:ed:67:b2:89:9a:75:d0:87:e1:3d:09:72:05:f5:00:f6:e9:
75:e9:0d:65:3d:2f:1e:52:f9:cd:53:2e:6e:fb:ec:b0:4d:17:
6b:c6:72:69:ac:93:50:47:a4:69:93:33:cc:16:8c:ca:7f:d0:
6d:c5:f5:b3
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBEYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTc2RThBRjExMC8GA1UEBRMoREJGNjhDOUM1QzAxRDY4RUJDMEM5MERFRTRDMDc0
OURBMjNBMkZENjAeFw0yNTA1MDgwNjE4MjNaFw0zNTA1MDcwNjE4MjNaMBgxFjAU
BgNVBAMTDTY4MWM0Y2IzLTgzYzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDToviHf5T5ss4u9OCw/arxTDX8NhAbJseppZoPYVYY5mjHLWxCAPhXlqeL
uTJlmSduMuT8hI/9sym5sOqoHcJxprcCrZLyHhzF0Cb83AYaC26G7gqgRz/8U4zt
9P+5UwZ3L2eLWz022jfj+JejnJVvR4X8fjOeldENfuq7verq6Drdz6MUCc6SLjZN
ixafgCCi3UYY8N/XuqUuzrh9QDtpeV80e3du3iCCanVBBz2wf3jpUo7ffnaIJGig
AFJrEp6z7gOvhiOBFUQxdIeUAe1NJKf5d+ksu++P7w1U9rWnfZ+rHcVcFnt9RKqd
RWtJc7q+tITFE4zwGotCCSWocZFzAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUW9h0
OEdlps6vArvHC6NysyVmSfUwHwYDVR0jBBgwFoAU2/aMnFwB1o68DJDe5MB0naI6
L9YwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjU3NkU4L0MzODA4OTg2RkM2MTExRUNCMTdFMjJBQkYxMjIyNDY4LzJfYU1u
RndCMW82OERKRGU1TUIwbmFJNkw5WS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzJfYU1uRndCMW82OERKRGU1TUIwbmFJNkw5WS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjU3NkU4L0MzODA4OTg2RkM2MTExRUNCMTdFMjJBQkYx
MjIyNDY4LzQwRUFDMEQ2MkJENDExRjBBMzZCRTRCOERBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJmztgwDQYJKoZIhvcNAQEL
BQADggEBAJujEw1XGrJ2l6shNOU/aP8B76C3Z9vueVBBnFCBtbwmtAUB22GwEoe6
zT6KP4v+KBWo1HXSVKaHX1EAqJ26oM6Loice/7oR4b/4wb9ahuag3JYoQGpbdL3Z
COBcHXvTS70kGK637ljF+iwKVFndD4CEHKzk4zndRd1/XnVA+ab4eAqDZaUZYIDS
Gl9tlUkYJHreF3wzcWsrskOw4vq+g/zzhpwSLPWnRn6bxAreQI1tQgtdjJXRKbe8
mNffWHUPrDQ1jKkK6nTtZ7KJmnXQh+E9CXIF9QD26XXpDWU9Lx5S+c1TLm777LBN
F2vGcmmsk1BHpGmTM8wWjMp/0G3F9bM=
-----END CERTIFICATE-----
Generated at Sun May 18 07:44:13 2025 by rpki-client