Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B2F5B6A64B7B11F09F7C6BB3DAE4EC9C.roa
File: B2F5B6A64B7B11F09F7C6BB3DAE4EC9C.roa (raw, json)
Hash identifier: RCx2YpRZFK0zHOHbb9yGtSX5OenHqPpS+i341jKPQXg=
Subject key identifier: 29:20:FC:49:CF:21:33:2D:7E:5F:DF:33:87:EA:EE:29:7B:CB:22:FF
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1502
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B2F5B6A64B7B11F09F7C6BB3DAE4EC9C.roa
Signing time: Tue 17 Jun 2025 13:05:11 +0000
ROA not before: Tue 17 Jun 2025 13:05:05 +0000
ROA not after: Thu 17 Jun 2027 13:05:05 +0000
asID: 22516
IP address blocks: 102.129.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 00:07:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5378 (0x1502)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jun 17 13:05:05 2025 GMT
Not After : Jun 17 13:05:05 2027 GMT
Subject: CN=68516807-92d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b2:9b:6d:f2:91:57:a7:a6:37:b1:33:d8:6b:
28:e1:ae:85:70:d4:63:fd:7e:78:8e:ac:aa:6a:f0:
22:fa:bc:55:57:cf:11:d5:d3:8e:7e:77:11:45:b0:
2c:b1:8c:ca:b1:1e:59:f6:58:06:95:40:fb:69:ee:
9b:9f:54:f6:d6:0e:c3:4e:ec:d8:53:7c:e3:cc:8f:
bc:9e:40:1c:59:27:5d:3a:1d:5e:b2:2e:96:16:e9:
c2:13:8f:a1:11:84:7f:6e:9c:1d:87:0e:f6:29:1c:
7c:6f:22:20:f4:47:45:a7:77:95:cf:4e:a3:2c:30:
c8:7a:3e:b7:23:53:1c:cc:e6:c6:2b:01:7f:68:29:
95:60:a2:c7:9f:80:d7:d1:03:87:4c:72:af:7e:d5:
98:d8:8b:b7:54:57:2f:01:81:4e:63:bf:70:03:6e:
e5:55:a7:93:15:db:f9:4c:3e:4d:f0:70:71:68:ed:
56:60:22:1a:14:09:4e:82:fe:97:c1:fa:a3:51:16:
ad:6f:71:93:d2:59:eb:46:b9:39:7e:96:7f:e9:d6:
1e:9b:b4:1d:d6:60:cf:2a:ee:a3:13:94:c9:d6:92:
58:89:43:a2:90:a2:89:42:b6:97:ff:5c:f4:4e:43:
46:93:d1:42:16:6e:ec:c5:3f:33:3c:86:d8:b0:c7:
d9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:20:FC:49:CF:21:33:2D:7E:5F:DF:33:87:EA:EE:29:7B:CB:22:FF
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B2F5B6A64B7B11F09F7C6BB3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.191.0/24
Signature Algorithm: sha256WithRSAEncryption
99:d0:d8:5e:21:1b:24:b0:e1:f4:74:f3:a8:da:b4:0b:60:e3:
ac:ce:ff:ab:1b:2b:ba:87:c7:0e:22:f7:0b:9d:13:a6:40:04:
b0:b2:57:03:2d:a0:83:90:dd:76:a4:df:41:f9:c1:06:cb:a1:
11:3b:58:a9:1e:3e:21:98:41:f5:49:2c:3e:42:3e:27:49:e3:
a6:e8:14:3c:9a:10:c9:20:68:f1:83:e4:d6:63:52:e5:cc:6f:
9c:e9:4d:50:6f:23:f7:42:86:9e:79:96:22:d0:cb:62:d6:82:
3e:0b:79:ad:b9:c5:de:1d:54:b8:c3:80:d6:c0:05:86:1d:47:
89:12:54:2a:f4:63:45:29:d4:3d:8b:1f:6e:9c:35:40:05:f8:
6f:65:33:cd:8e:fc:03:22:24:0c:08:d6:f8:4d:02:86:aa:23:
9d:78:b7:71:10:66:03:dd:5a:e5:6d:24:1e:10:29:09:be:29:
ec:03:f2:f5:6b:63:ee:79:c1:da:da:f5:bd:e9:7b:81:df:e5:
34:e1:63:47:50:f9:fe:67:5b:52:f0:48:48:5a:b1:cf:8a:31:
71:ac:41:d2:eb:af:2c:20:2c:9e:fd:b0:d9:7f:cf:88:27:e3:
b6:0f:6f:cc:6f:84:ea:1f:d8:2c:13:c4:85:4d:33:66:68:2e:
9e:7d:b1:4f
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICFQIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yNTA2MTcxMzA1MDVaFw0yNzA2MTcxMzA1MDVaMBgxFjAU
BgNVBAMTDTY4NTE2ODA3LTkyZDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCdsptt8pFXp6Y3sTPYayjhroVw1GP9fniOrKpq8CL6vFVXzxHV045+dxFF
sCyxjMqxHln2WAaVQPtp7pufVPbWDsNO7NhTfOPMj7yeQBxZJ106HV6yLpYW6cIT
j6ERhH9unB2HDvYpHHxvIiD0R0Wnd5XPTqMsMMh6PrcjUxzM5sYrAX9oKZVgosef
gNfRA4dMcq9+1ZjYi7dUVy8BgU5jv3ADbuVVp5MV2/lMPk3wcHFo7VZgIhoUCU6C
/pfB+qNRFq1vcZPSWetGuTl+ln/p1h6btB3WYM8q7qMTlMnWkliJQ6KQoolCtpf/
XPROQ0aT0UIWbuzFPzM8htiwx9k3AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUKSD8
Sc8hMy1+X98zh+ruKXvLIv8wHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4L0IyRjVCNkE2NEI3QjExRjA5RjdDNkJCM0RBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgb8wDQYJKoZIhvcNAQEL
BQADggEBAJnQ2F4hGySw4fR086jatAtg46zO/6sbK7qHxw4i9wudE6ZABLCyVwMt
oIOQ3Xak30H5wQbLoRE7WKkePiGYQfVJLD5CPidJ46boFDyaEMkgaPGD5NZjUuXM
b5zpTVBvI/dChp55liLQy2LWgj4Lea25xd4dVLjDgNbABYYdR4kSVCr0Y0Up1D2L
H26cNUAF+G9lM82O/AMiJAwI1vhNAoaqI514t3EQZgPdWuVtJB4QKQm+KewD8vVr
Y+55wdra9b3pe4Hf5TThY0dQ+f5nW1LwSEhasc+KMXGsQdLrrywgLJ79sNl/z4gn
47YPb8xvhOof2CwTxIVNM2ZoLp59sU8=
-----END CERTIFICATE-----
Generated at Tue Jul 1 03:50:35 2025 by rpki-client