Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364379D/67C6AD4CBF3D11EDA6BF88F1F1222468/BE98A03E46CD11F08B83E8B4DAE4EC9C.roa
File: BE98A03E46CD11F08B83E8B4DAE4EC9C.roa (raw, json)
Hash identifier: GvbT42KDVOWTxS2JfgWWuD/aGjv1HwP9FkaDOKQ86zw=
Subject key identifier: 49:B0:E7:3B:E3:F7:E9:9C:BA:E3:45:F2:AC:41:05:79:02:D9:63:D9
Certificate issuer: /CN=F364379DAF/serialNumber=100CBD464A905A5B568F7ADCEF1F9D20BC752331
Certificate serial: 035E
Authority key identifier: 10:0C:BD:46:4A:90:5A:5B:56:8F:7A:DC:EF:1F:9D:20:BC:75:23:31
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/EAy9RkqQWltWj3rc7x-dILx1IzE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364379D/67C6AD4CBF3D11EDA6BF88F1F1222468/BE98A03E46CD11F08B83E8B4DAE4EC9C.roa
Signing time: Wed 11 Jun 2025 14:09:53 +0000
ROA not before: Wed 11 Jun 2025 14:09:46 +0000
ROA not after: Sun 11 Nov 2035 14:09:46 +0000
asID: 37014
IP address blocks: 41.223.72.0/22 maxlen: 22
41.223.72.0/24 maxlen: 24
41.223.73.0/24 maxlen: 24
41.223.74.0/24 maxlen: 24
41.223.75.0/24 maxlen: 24
102.215.0.0/22 maxlen: 22
102.215.0.0/24 maxlen: 24
102.215.1.0/24 maxlen: 24
102.215.2.0/24 maxlen: 24
102.215.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364379D/67C6AD4CBF3D11EDA6BF88F1F1222468/EAy9RkqQWltWj3rc7x-dILx1IzE.crl
rsync://rpki.afrinic.net/repository/member_repository/F364379D/67C6AD4CBF3D11EDA6BF88F1F1222468/EAy9RkqQWltWj3rc7x-dILx1IzE.mft
rsync://rpki.afrinic.net/repository/afrinic/EAy9RkqQWltWj3rc7x-dILx1IzE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 20 Jun 2025 10:36:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 862 (0x35e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364379DAF, serialNumber=100CBD464A905A5B568F7ADCEF1F9D20BC752331
Validity
Not Before: Jun 11 14:09:46 2025 GMT
Not After : Nov 11 14:09:46 2035 GMT
Subject: CN=68498e31-232a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:60:c2:34:6b:40:ed:5d:91:ad:4a:e3:22:af:
61:51:65:5d:de:d9:1a:ca:cf:3a:51:76:1b:59:d2:
3c:73:0f:cc:64:b8:47:dc:63:af:cd:ae:21:12:62:
0a:71:af:d5:48:03:e9:c7:21:b9:13:0a:71:6f:68:
cf:03:dd:3e:c9:2a:90:f6:dd:56:8c:b6:da:39:0a:
f5:54:07:61:ab:d6:3a:51:57:01:36:91:3a:e9:1c:
d4:37:32:8a:b1:88:9e:69:ca:27:23:92:ac:44:31:
26:7d:91:4c:b5:f1:76:7f:69:66:ca:89:5a:1d:47:
8d:3f:62:eb:c8:e5:bc:f9:65:6b:8a:b8:67:39:80:
7a:b9:bc:c7:6a:78:9c:16:e4:e0:bf:0b:95:b0:55:
42:81:78:a1:6d:f0:9e:82:d2:33:49:e0:f9:e7:84:
79:60:aa:4f:8d:6a:4d:4a:2c:d7:60:96:50:ae:de:
6f:e8:ee:1b:e5:fc:f1:ac:80:4d:98:e8:59:9c:45:
ac:27:5d:15:1d:79:e4:98:7d:df:5a:93:1d:4c:15:
ad:8a:d1:9a:94:4b:66:4c:23:7e:1d:9d:ba:ae:59:
47:f3:b7:b8:80:08:84:32:47:58:95:ed:7c:b9:a2:
d2:68:a1:68:fd:ad:08:20:8a:ce:5b:c8:d4:42:88:
bd:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:B0:E7:3B:E3:F7:E9:9C:BA:E3:45:F2:AC:41:05:79:02:D9:63:D9
X509v3 Authority Key Identifier:
keyid:10:0C:BD:46:4A:90:5A:5B:56:8F:7A:DC:EF:1F:9D:20:BC:75:23:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364379D/67C6AD4CBF3D11EDA6BF88F1F1222468/EAy9RkqQWltWj3rc7x-dILx1IzE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/EAy9RkqQWltWj3rc7x-dILx1IzE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364379D/67C6AD4CBF3D11EDA6BF88F1F1222468/BE98A03E46CD11F08B83E8B4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.223.72.0/22
102.215.0.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:fb:40:a7:25:e4:c0:bb:cf:15:9e:09:64:66:b7:b4:bd:c2:
93:2b:f5:a0:64:ff:17:c9:73:65:c0:6b:09:d6:69:3d:44:ba:
15:d1:cf:d8:fc:70:fa:69:03:7c:8b:6d:af:fc:18:72:0b:bf:
a9:51:0f:e5:a2:6b:7b:70:4b:87:28:6f:f7:59:bd:bd:ba:c4:
21:80:23:76:7e:c6:93:dd:ea:59:7a:4b:c0:c2:59:b1:52:f3:
90:05:d4:50:e8:1d:d9:3c:f8:7b:52:0f:e6:71:0d:ed:45:76:
86:a9:7a:64:68:f8:03:11:84:c0:38:bf:24:60:48:ca:d9:45:
d5:18:df:31:3f:34:6d:04:63:72:67:91:57:09:94:bb:1d:1d:
90:99:9e:47:48:c6:79:36:47:85:cf:9e:7b:f2:f5:f6:99:4d:
ae:32:d3:df:29:1d:67:e0:a4:77:7d:12:35:7e:66:6c:0a:25:
a7:53:98:c7:60:23:00:7e:e2:6b:2a:17:1e:fc:fa:61:8e:67:
1b:87:96:51:60:6d:99:94:c6:a4:95:c6:4f:f0:d2:fb:ae:d9:
2e:36:87:74:68:57:66:0e:f4:29:e2:cd:b5:82:d3:6e:b1:12:
69:2b:6e:12:0e:37:be:70:cb:af:cf:bb:03:2e:20:e8:f7:b4:
9c:01:b8:86
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgICA14wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDM3OURBRjExMC8GA1UEBRMoMTAwQ0JENDY0QTkwNUE1QjU2OEY3QURDRUYxRjlE
MjBCQzc1MjMzMTAeFw0yNTA2MTExNDA5NDZaFw0zNTExMTExNDA5NDZaMBgxFjAU
BgNVBAMTDTY4NDk4ZTMxLTIzMmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDEYMI0a0DtXZGtSuMir2FRZV3e2RrKzzpRdhtZ0jxzD8xkuEfcY6/NriES
Ygpxr9VIA+nHIbkTCnFvaM8D3T7JKpD23VaMtto5CvVUB2Gr1jpRVwE2kTrpHNQ3
MoqxiJ5pyicjkqxEMSZ9kUy18XZ/aWbKiVodR40/YuvI5bz5ZWuKuGc5gHq5vMdq
eJwW5OC/C5WwVUKBeKFt8J6C0jNJ4PnnhHlgqk+Nak1KLNdgllCu3m/o7hvl/PGs
gE2Y6FmcRawnXRUdeeSYfd9akx1MFa2K0ZqUS2ZMI34dnbquWUfzt7iACIQyR1iV
7Xy5otJooWj9rQggis5byNRCiL2PAgMBAAGjggKrMIICpzAdBgNVHQ4EFgQUSbDn
O+P36Zy640XyrEEFeQLZY9kwHwYDVR0jBBgwFoAUEAy9RkqQWltWj3rc7x+dILx1
IzEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQzNzlELzY3QzZBRDRDQkYzRDExRURBNkJGODhGMUYxMjIyNDY4L0VBeTlS
a3FRV2x0V2ozcmM3eC1kSUx4MUl6RS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0VBeTlSa3FRV2x0V2ozcmM3eC1kSUx4MUl6RS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjQzNzlELzY3QzZBRDRDQkYzRDExRURBNkJGODhGMUYx
MjIyNDY4L0JFOThBMDNFNDZDRDExRjA4QjgzRThCNERBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBAIp30gDBAJm1wAwDQYJKoZI
hvcNAQELBQADggEBAJ37QKcl5MC7zxWeCWRmt7S9wpMr9aBk/xfJc2XAawnWaT1E
uhXRz9j8cPppA3yLba/8GHILv6lRD+Wia3twS4cob/dZvb26xCGAI3Z+xpPd6ll6
S8DCWbFS85AF1FDoHdk8+HtSD+ZxDe1FdoapemRo+AMRhMA4vyRgSMrZRdUY3zE/
NG0EY3JnkVcJlLsdHZCZnkdIxnk2R4XPnnvy9faZTa4y098pHWfgpHd9EjV+ZmwK
JadTmMdgIwB+4msqFx78+mGOZxuHllFgbZmUxqSVxk/w0vuu2S42h3RoV2YO9Cni
zbWC026xEmkrbhION75wy6/PuwMuIOj3tJwBuIY=
-----END CERTIFICATE-----
Generated at Thu Jun 19 01:45:37 2025 by rpki-client