Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369E9B3/EE40A58A558C11EFAFCCFBA0762E951A/CF1798702D2311F0B44678ECDAE4EC9C.roa
File: CF1798702D2311F0B44678ECDAE4EC9C.roa (raw, json)
Hash identifier: 5LtiI+kpHrtx1PW0UuMcO5zsttEu1oGZjrXgXm+py4Y=
Subject key identifier: 98:42:CE:79:DA:40:E1:CD:07:E4:61:43:AF:01:88:54:12:61:51:53
Certificate issuer: /CN=F369E9B3AF/serialNumber=F574B16BA86AD96E00DEDACD6341F9A824EA47A7
Certificate serial: 012C
Authority key identifier: F5:74:B1:6B:A8:6A:D9:6E:00:DE:DA:CD:63:41:F9:A8:24:EA:47:A7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/9XSxa6hq2W4A3trNY0H5qCTqR6c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369E9B3/EE40A58A558C11EFAFCCFBA0762E951A/CF1798702D2311F0B44678ECDAE4EC9C.roa
Signing time: Fri 09 May 2025 22:20:28 +0000
ROA not before: Sat 10 May 2025 22:20:22 +0000
ROA not after: Mon 30 Mar 2026 22:20:22 +0000
asID: 329472
IP address blocks: 102.206.104.0/22 maxlen: 24
Validation: Failed, certificate is not yet valid
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 300 (0x12c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369E9B3AF, serialNumber=F574B16BA86AD96E00DEDACD6341F9A824EA47A7
Validity
Not Before: May 10 22:20:22 2025 GMT
Not After : Mar 30 22:20:22 2026 GMT
Subject: CN=681e7fab-cff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f5:e3:9a:60:fb:2b:da:79:40:26:92:7e:4e:
5f:0f:6e:8b:eb:0f:f8:90:04:30:da:10:38:20:ac:
7e:d4:c3:5d:9f:f8:a4:1c:5d:0a:79:52:52:43:e8:
1e:ba:09:33:1a:48:49:17:e8:79:30:81:aa:52:77:
8c:c3:f3:af:23:bd:a5:b3:49:12:72:49:2b:80:bc:
c2:89:38:ec:c2:5e:e6:7f:59:e7:cd:e0:d4:a6:b3:
e1:7a:d7:eb:ab:0a:c7:0d:68:2c:c9:a7:86:7e:01:
76:e8:36:29:60:14:6b:67:01:bf:fb:cb:12:26:a3:
35:03:b5:b9:17:b8:3b:3f:37:92:8e:3a:f8:bd:b0:
cc:2a:ce:65:05:81:c5:33:9e:d6:1d:3c:73:ca:1b:
9c:82:93:01:03:6b:66:60:67:99:2c:de:4a:2e:98:
b6:94:78:35:bb:e0:7b:12:5d:37:11:39:77:bc:b7:
c4:8e:7d:2f:f1:41:da:67:e3:63:08:30:49:e7:d0:
0f:29:3a:88:36:83:91:b2:7e:d3:42:e8:6a:6e:6c:
6b:38:05:1d:ce:07:99:72:d2:64:d5:e8:cb:24:7b:
22:22:cb:95:37:9c:38:4a:56:63:39:31:f5:2f:f3:
08:cd:12:b7:39:ee:20:84:28:ad:a9:a5:aa:b2:e0:
1c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:42:CE:79:DA:40:E1:CD:07:E4:61:43:AF:01:88:54:12:61:51:53
X509v3 Authority Key Identifier:
keyid:F5:74:B1:6B:A8:6A:D9:6E:00:DE:DA:CD:63:41:F9:A8:24:EA:47:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369E9B3/EE40A58A558C11EFAFCCFBA0762E951A/9XSxa6hq2W4A3trNY0H5qCTqR6c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9XSxa6hq2W4A3trNY0H5qCTqR6c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369E9B3/EE40A58A558C11EFAFCCFBA0762E951A/CF1798702D2311F0B44678ECDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.206.104.0/22
Signature Algorithm: sha256WithRSAEncryption
55:70:01:fe:c8:dd:60:c5:05:e7:e3:5b:da:09:30:24:62:97:
d2:3a:5c:c3:35:5c:eb:46:3a:3a:56:e4:db:f1:a4:29:24:64:
b5:4b:eb:c1:a0:31:e6:b1:18:1a:e0:59:fb:29:11:29:dd:e5:
b1:25:00:b3:c9:c5:50:c0:9c:83:42:10:53:64:ad:c8:6a:2d:
86:72:c7:a5:59:36:77:43:46:25:07:d0:e9:47:e9:35:aa:59:
4e:9c:37:25:45:6b:f8:0f:ef:47:67:30:7d:a6:6c:e9:b6:fc:
a0:d6:91:80:36:c0:cc:76:73:f2:a6:d2:8c:e5:e8:5e:33:a6:
1b:ae:3f:fc:35:ab:e9:c1:53:e7:c5:fe:b3:aa:89:06:0b:fe:
e6:fc:ed:ce:a3:fd:08:48:b6:7e:b7:f5:b2:2a:6d:d4:2f:99:
84:9e:98:e1:7c:c8:5c:2e:2d:23:76:7c:16:bf:fc:9a:ee:c5:
8a:8c:53:09:10:93:21:66:8c:a5:01:66:f3:ec:15:15:87:c6:
52:46:fa:07:22:fa:28:1a:18:cb:0d:74:3e:f7:94:54:78:a5:
20:1e:a7:fd:f6:3f:4e:11:65:c9:d5:c6:dc:4c:f4:f9:26:36:
a2:48:9d:a2:f2:49:62:c7:dd:d9:c9:84:87:02:dc:d7:5a:1b:
fb:a6:a5:35
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICASwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OUU5QjNBRjExMC8GA1UEBRMoRjU3NEIxNkJBODZBRDk2RTAwREVEQUNENjM0MUY5
QTgyNEVBNDdBNzAeFw0yNTA1MTAyMjIwMjJaFw0yNjAzMzAyMjIwMjJaMBgxFjAU
BgNVBAMTDTY4MWU3ZmFiLWNmZjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDe9eOaYPsr2nlAJpJ+Tl8PbovrD/iQBDDaEDggrH7Uw12f+KQcXQp5UlJD
6B66CTMaSEkX6HkwgapSd4zD868jvaWzSRJySSuAvMKJOOzCXuZ/WefN4NSms+F6
1+urCscNaCzJp4Z+AXboNilgFGtnAb/7yxImozUDtbkXuDs/N5KOOvi9sMwqzmUF
gcUzntYdPHPKG5yCkwEDa2ZgZ5ks3koumLaUeDW74HsSXTcROXe8t8SOfS/xQdpn
42MIMEnn0A8pOog2g5GyftNC6GpubGs4BR3OB5ly0mTV6MskeyIiy5U3nDhKVmM5
MfUv8wjNErc57iCEKK2ppaqy4BzNAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUmELO
edpA4c0H5GFDrwGIVBJhUVMwHwYDVR0jBBgwFoAU9XSxa6hq2W4A3trNY0H5qCTq
R6cwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjlFOUIzL0VFNDBBNThBNTU4QzExRUZBRkNDRkJBMDc2MkU5NTFBLzlYU3hh
NmhxMlc0QTN0ck5ZMEg1cUNUcVI2Yy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzlYU3hhNmhxMlc0QTN0ck5ZMEg1cUNUcVI2Yy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjlFOUIzL0VFNDBBNThBNTU4QzExRUZBRkNDRkJBMDc2
MkU5NTFBL0NGMTc5ODcwMkQyMzExRjBCNDQ2NzhFQ0RBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJmzmgwDQYJKoZIhvcNAQEL
BQADggEBAFVwAf7I3WDFBefjW9oJMCRil9I6XMM1XOtGOjpW5NvxpCkkZLVL68Gg
MeaxGBrgWfspESnd5bElALPJxVDAnINCEFNkrchqLYZyx6VZNndDRiUH0OlH6TWq
WU6cNyVFa/gP70dnMH2mbOm2/KDWkYA2wMx2c/Km0ozl6F4zphuuP/w1q+nBU+fF
/rOqiQYL/ub87c6j/QhItn639bIqbdQvmYSemOF8yFwuLSN2fBa//JruxYqMUwkQ
kyFmjKUBZvPsFRWHxlJG+gci+igaGMsNdD73lFR4pSAep/32P04RZcnVxtxM9Pkm
NqJInaLySWLH3dnJhIcC3NdaG/umpTU=
-----END CERTIFICATE-----
Generated at Sat May 10 09:44:28 2025 by rpki-client