Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36993D4/4A734B822FCB11F09C9B0DBCDAE4EC9C/13E4DE8C30AC11F0AE6D139CDAE4EC9C.roa
File: 13E4DE8C30AC11F0AE6D139CDAE4EC9C.roa (raw, json)
Hash identifier: WbFTeA4PMTVD0fXbeP2ec+8+4PF17WQg0dVXFVp7fgM=
Subject key identifier: B3:75:17:CA:8B:38:44:FA:D7:98:49:8D:88:00:F8:9D:E2:B1:04:F2
Certificate issuer: /CN=F36993D4AF/serialNumber=0856527A9D22026CFE8111BA338725FC1E86CAA0
Certificate serial: 0B
Authority key identifier: 08:56:52:7A:9D:22:02:6C:FE:81:11:BA:33:87:25:FC:1E:86:CA:A0
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CFZSep0iAmz-gRG6M4cl_B6GyqA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36993D4/4A734B822FCB11F09C9B0DBCDAE4EC9C/13E4DE8C30AC11F0AE6D139CDAE4EC9C.roa
Signing time: Wed 14 May 2025 10:13:28 +0000
ROA not before: Wed 14 May 2025 10:13:23 +0000
ROA not after: Fri 31 May 2030 10:13:23 +0000
asID: 328482
IP address blocks: 102.67.152.0/22 maxlen: 22
102.67.152.0/24 maxlen: 24
102.67.153.0/24 maxlen: 24
102.67.154.0/24 maxlen: 24
102.67.155.0/24 maxlen: 24
2c0f:ed90::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36993D4/4A734B822FCB11F09C9B0DBCDAE4EC9C/CFZSep0iAmz-gRG6M4cl_B6GyqA.crl
rsync://rpki.afrinic.net/repository/member_repository/F36993D4/4A734B822FCB11F09C9B0DBCDAE4EC9C/CFZSep0iAmz-gRG6M4cl_B6GyqA.mft
rsync://rpki.afrinic.net/repository/afrinic/CFZSep0iAmz-gRG6M4cl_B6GyqA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 18 Jun 2025 00:06:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11 (0xb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36993D4AF, serialNumber=0856527A9D22026CFE8111BA338725FC1E86CAA0
Validity
Not Before: May 14 10:13:23 2025 GMT
Not After : May 31 10:13:23 2030 GMT
Subject: CN=68246cc8-8d91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:f7:9f:40:ba:5f:62:79:b5:15:42:50:06:a2:
12:e0:d9:c6:d9:aa:3a:69:28:20:60:89:da:b9:28:
52:76:78:44:93:db:53:2d:41:55:19:68:c4:83:64:
bb:95:57:04:dc:38:33:11:b0:c7:6f:c7:fc:d9:53:
9b:b0:ca:85:50:e4:fc:2f:a7:da:ab:db:29:37:d2:
9a:4e:05:fa:8e:4a:ea:fe:df:ab:88:94:3e:5e:46:
fa:6e:cc:79:27:e6:5e:d9:a8:f6:7e:63:d6:db:3a:
83:7d:69:82:96:dd:3f:a3:10:b3:30:aa:89:8c:59:
10:ad:42:96:79:1b:87:45:1b:c3:58:85:8b:66:eb:
ab:f0:c6:7c:e2:f3:ad:5d:ff:b8:15:c0:70:ea:28:
a7:fd:cf:dd:65:f0:bb:e9:be:99:4e:3d:87:60:e4:
db:17:b4:45:55:41:5e:86:2b:cd:1c:2e:e8:ce:61:
dc:e2:4d:2d:1e:9e:03:dd:6f:6a:a9:e7:ab:c1:55:
28:a8:b8:9a:08:92:1c:c4:a8:5b:7f:ab:bb:2b:cb:
87:22:9c:34:0f:d9:63:1f:7e:54:2a:43:20:0a:cb:
9e:79:0b:36:62:d8:11:68:c2:de:e4:97:df:96:c8:
6f:93:d2:4b:ca:c0:0d:6c:63:62:92:7e:44:1e:bf:
2b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:75:17:CA:8B:38:44:FA:D7:98:49:8D:88:00:F8:9D:E2:B1:04:F2
X509v3 Authority Key Identifier:
keyid:08:56:52:7A:9D:22:02:6C:FE:81:11:BA:33:87:25:FC:1E:86:CA:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36993D4/4A734B822FCB11F09C9B0DBCDAE4EC9C/CFZSep0iAmz-gRG6M4cl_B6GyqA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CFZSep0iAmz-gRG6M4cl_B6GyqA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36993D4/4A734B822FCB11F09C9B0DBCDAE4EC9C/13E4DE8C30AC11F0AE6D139CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.67.152.0/22
IPv6:
2c0f:ed90::/32
Signature Algorithm: sha256WithRSAEncryption
1f:0c:eb:13:d6:03:bb:4a:01:06:3b:ae:9c:d9:a4:d8:ad:ef:
5a:5b:69:13:a0:a1:3b:b1:f5:1f:09:78:61:a6:92:fc:52:df:
70:a7:8a:0b:60:40:00:99:ce:ed:9b:2d:cb:25:45:2c:5d:5d:
2b:31:ac:8d:54:a9:96:9c:b0:c9:27:11:38:3a:66:ee:f8:05:
c6:7a:92:ae:83:0b:40:04:47:ff:05:5c:07:54:7d:04:a5:8e:
7b:63:04:2c:d1:ac:e0:be:00:6a:37:ef:7e:35:a8:2e:e0:bc:
a6:05:f4:d1:5e:e7:d3:10:f4:d1:3d:cf:cd:34:69:c4:da:0e:
c6:5a:ac:fe:b4:60:27:ac:da:ea:82:87:6f:9c:7f:72:aa:6e:
bc:fb:64:c1:d1:45:c0:1a:45:cb:67:78:b5:b7:4f:d0:27:55:
d3:ee:89:8c:57:48:f6:80:4e:67:f9:18:5a:d9:88:4e:ad:fd:
0e:7b:15:bb:fa:be:19:15:0d:c6:8e:03:f9:19:fb:0e:df:98:
29:2e:f6:18:0c:f4:b0:f7:e9:05:83:d5:fb:a0:7d:89:df:f6:
e0:e2:c6:40:3d:d8:1a:5c:ae:1a:dd:13:4c:65:9b:f3:14:23:
72:3c:e0:df:ad:59:06:b1:41:1a:75:e6:c8:06:5c:30:79:10:
7a:29:43:59
-----BEGIN CERTIFICATE-----
MIIFkTCCBHmgAwIBAgIBCzANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY5
OTNENEFGMTEwLwYDVQQFEygwODU2NTI3QTlEMjIwMjZDRkU4MTExQkEzMzg3MjVG
QzFFODZDQUEwMB4XDTI1MDUxNDEwMTMyM1oXDTMwMDUzMTEwMTMyM1owGDEWMBQG
A1UEAxMNNjgyNDZjYzgtOGQ5MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAO/3n0C6X2J5tRVCUAaiEuDZxtmqOmkoIGCJ2rkoUnZ4RJPbUy1BVRloxINk
u5VXBNw4MxGwx2/H/NlTm7DKhVDk/C+n2qvbKTfSmk4F+o5K6v7fq4iUPl5G+m7M
eSfmXtmo9n5j1ts6g31pgpbdP6MQszCqiYxZEK1Clnkbh0Ubw1iFi2brq/DGfOLz
rV3/uBXAcOoop/3P3WXwu+m+mU49h2Dk2xe0RVVBXoYrzRwu6M5h3OJNLR6eA91v
aqnnq8FVKKi4mgiSHMSoW3+ruyvLhyKcNA/ZYx9+VCpDIArLnnkLNmLYEWjC3uSX
35bIb5PSS8rADWxjYpJ+RB6/K7sCAwEAAaOCArQwggKwMB0GA1UdDgQWBBSzdRfK
izhE+teYSY2IAPid4rEE8jAfBgNVHSMEGDAWgBQIVlJ6nSICbP6BEbozhyX8HobK
oDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2OTkzRDQvNEE3MzRCODIyRkNCMTFGMDlDOUIwREJDREFFNEVDOUMvQ0ZaU2Vw
MGlBbXotZ1JHNk00Y2xfQjZHeXFBLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvQ0ZaU2VwMGlBbXotZ1JHNk00Y2xfQjZHeXFBLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OTkzRDQvNEE3MzRCODIyRkNCMTFGMDlDOUIwREJDREFF
NEVDOUMvMTNFNERFOEMzMEFDMTFGMEFFNkQxMzlDREFFNEVDOUMucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAmZDmDANBAIAAjAHAwUALA/t
kDANBgkqhkiG9w0BAQsFAAOCAQEAHwzrE9YDu0oBBjuunNmk2K3vWltpE6ChO7H1
Hwl4YaaS/FLfcKeKC2BAAJnO7ZstyyVFLF1dKzGsjVSplpywyScRODpm7vgFxnqS
roMLQARH/wVcB1R9BKWOe2MELNGs4L4AajfvfjWoLuC8pgX00V7n0xD00T3PzTRp
xNoOxlqs/rRgJ6za6oKHb5x/cqpuvPtkwdFFwBpFy2d4tbdP0CdV0+6JjFdI9oBO
Z/kYWtmITq39DnsVu/q+GRUNxo4D+Rn7Dt+YKS72GAz0sPfpBYPV+6B9id/24OLG
QD3YGlyuGt0TTGWb8xQjcjzg361ZBrFBGnXmyAZcMHkQeilDWQ==
-----END CERTIFICATE-----
Generated at Mon Jun 16 17:43:41 2025 by rpki-client