Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/91B4EA9E661911F08FE3A9E4DAE4EC9C.roa
File: 91B4EA9E661911F08FE3A9E4DAE4EC9C.roa (raw, json)
Hash identifier: 5XnoJGhUsq7eY6YCrtX9tMjAdZwGbdGRv213jIF5shg=
Subject key identifier: 15:6E:5E:E7:15:C1:F8:5E:B5:6E:14:C0:D9:1A:0A:C2:88:B8:4D:56
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0C8A
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/91B4EA9E661911F08FE3A9E4DAE4EC9C.roa
Signing time: Mon 21 Jul 2025 10:00:46 +0000
ROA not before: Mon 21 Jul 2025 10:00:41 +0000
ROA not after: Tue 21 Jul 2026 10:00:41 +0000
asID: 398704
IP address blocks: 196.251.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 25 Jul 2025 00:09:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3210 (0xc8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Jul 21 10:00:41 2025 GMT
Not After : Jul 21 10:00:41 2026 GMT
Subject: CN=687e0fce-cc3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ec:9e:74:96:13:10:77:76:27:f8:77:34:28:
c1:d9:2e:8d:11:c3:21:5b:6c:d0:80:03:dd:cf:98:
88:58:a9:a2:b3:81:b3:0c:6a:50:70:61:2f:b3:57:
35:10:15:84:fd:f4:7f:83:3a:6f:a0:ab:1b:60:1c:
cc:79:01:a5:d1:5f:9b:36:5f:91:b3:c5:2e:55:c4:
4c:07:15:2f:e4:f2:e2:d5:46:b5:d6:f6:f7:81:35:
e6:cd:c7:fd:1b:d0:b1:16:e2:9f:a0:e3:c5:b4:21:
9b:e0:5a:80:43:86:61:e9:d4:db:5a:76:ac:e7:38:
a4:41:a5:55:f7:56:78:de:9e:68:99:89:e0:a6:a5:
8a:92:a3:e2:12:dd:e7:88:11:07:e3:42:63:a0:59:
b6:9a:62:35:63:93:84:66:41:7b:c0:ea:ce:80:5f:
a2:82:13:2a:32:b9:12:ec:35:e2:74:15:51:f4:c4:
c2:16:c1:d1:55:86:28:b3:3a:33:6b:f8:ae:fa:b0:
ed:4f:b1:eb:d1:62:46:39:31:0b:8e:84:da:ed:5d:
f7:29:51:b2:3d:24:2d:d2:4f:72:69:75:e6:72:e5:
16:29:67:f7:7f:04:da:57:04:89:99:a8:c9:d4:a4:
c9:8b:58:b5:f7:fb:2a:51:44:ec:6b:e6:e5:4b:7a:
c2:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:6E:5E:E7:15:C1:F8:5E:B5:6E:14:C0:D9:1A:0A:C2:88:B8:4D:56
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/91B4EA9E661911F08FE3A9E4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.105.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:d7:85:c3:60:0d:c8:24:61:b7:04:44:34:e8:97:15:fa:b6:
be:93:77:74:ea:9c:6b:3d:d8:2a:2a:6f:3a:0a:2b:a7:73:ab:
95:5b:af:3c:74:3b:88:1d:ac:22:24:02:2e:b3:e0:4b:8f:fc:
62:53:88:0d:0c:91:f8:d1:a9:2a:1a:dd:81:bd:5a:b2:8e:97:
65:4c:e6:5d:b0:4d:1b:47:f6:ae:80:f0:8c:1b:69:04:e3:09:
8d:96:2e:82:d9:6b:f4:4d:43:c7:50:ef:1e:11:fd:36:df:61:
53:0e:11:6b:82:54:b1:e7:f2:b6:ce:d3:f2:d4:ab:8b:e3:c7:
c3:50:a2:d9:8d:af:d3:92:18:f1:3b:dd:86:21:07:58:43:10:
10:70:c7:0e:67:c8:47:19:de:4b:5b:73:f2:2c:2b:87:9b:38:
9f:b8:2d:f8:9b:16:11:51:74:c1:af:26:d0:fa:28:cd:55:9e:
5a:8d:52:24:7f:c5:f7:3c:f9:e5:fd:78:05:2e:a8:91:6d:66:
57:b0:25:df:22:9c:0f:02:5c:7c:e7:29:27:da:7d:f4:3d:aa:
7b:46:9f:61:d3:58:68:14:ea:97:07:99:7c:9d:d6:47:d5:4e:
f1:9d:56:79:72:b9:26:80:62:94:f0:6d:25:b6:14:05:da:52:
95:26:3c:41
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDIowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNTA3MjExMDAwNDFaFw0yNjA3MjExMDAwNDFaMBgxFjAU
BgNVBAMTDTY4N2UwZmNlLWNjM2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCg7J50lhMQd3Yn+Hc0KMHZLo0RwyFbbNCAA93PmIhYqaKzgbMMalBwYS+z
VzUQFYT99H+DOm+gqxtgHMx5AaXRX5s2X5GzxS5VxEwHFS/k8uLVRrXW9veBNebN
x/0b0LEW4p+g48W0IZvgWoBDhmHp1NtadqznOKRBpVX3VnjenmiZieCmpYqSo+IS
3eeIEQfjQmOgWbaaYjVjk4RmQXvA6s6AX6KCEyoyuRLsNeJ0FVH0xMIWwdFVhiiz
OjNr+K76sO1PsevRYkY5MQuOhNrtXfcpUbI9JC3ST3JpdeZy5RYpZ/d/BNpXBImZ
qMnUpMmLWLX3+ypRROxr5uVLesLnAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUFW5e
5xXB+F61bhTA2RoKwoi4TVYwHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3LzkxQjRFQTlFNjYxOTExRjA4RkUzQTlFNERBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADE+2kwDQYJKoZIhvcNAQEL
BQADggEBAKDXhcNgDcgkYbcERDTolxX6tr6Td3TqnGs92CoqbzoKK6dzq5Vbrzx0
O4gdrCIkAi6z4EuP/GJTiA0MkfjRqSoa3YG9WrKOl2VM5l2wTRtH9q6A8IwbaQTj
CY2WLoLZa/RNQ8dQ7x4R/TbfYVMOEWuCVLHn8rbO0/LUq4vjx8NQotmNr9OSGPE7
3YYhB1hDEBBwxw5nyEcZ3ktbc/IsK4ebOJ+4LfibFhFRdMGvJtD6KM1VnlqNUiR/
xfc8+eX9eAUuqJFtZlewJd8inA8CXHznKSfaffQ9qntGn2HTWGgU6pcHmXyd1kfV
TvGdVnlyuSaAYpTwbSW2FAXaUpUmPEE=
-----END CERTIFICATE-----
Generated at Wed Jul 23 23:56:10 2025 by rpki-client