Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/F426C5DA5E3511F08C38F3E8DAE4EC9C.roa
File: F426C5DA5E3511F08C38F3E8DAE4EC9C.roa (raw, json)
Hash identifier: 1sDWYH3f/HWstXqg5Qsn8hl+mqkD2R6cYH7ovhfNSnY=
Subject key identifier: EA:40:63:11:00:B8:AB:06:66:01:28:BC:3D:80:16:FD:FC:6A:E3:88
Certificate issuer: /CN=F361ED63AF/serialNumber=3824AC5EE00439EEDA21A1A10109E8BF76E4FAB8
Certificate serial: 0607
Authority key identifier: 38:24:AC:5E:E0:04:39:EE:DA:21:A1:A1:01:09:E8:BF:76:E4:FA:B8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/OCSsXuAEOe7aIaGhAQnov3bk-rg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/F426C5DA5E3511F08C38F3E8DAE4EC9C.roa
Signing time: Fri 11 Jul 2025 09:03:47 +0000
ROA not before: Fri 11 Jul 2025 09:03:42 +0000
ROA not after: Wed 10 Jul 2030 09:03:42 +0000
asID: 22355
IP address blocks: 41.85.0.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.crl
rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.mft
rsync://rpki.afrinic.net/repository/afrinic/OCSsXuAEOe7aIaGhAQnov3bk-rg.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 03 Aug 2025 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1543 (0x607)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F361ED63AF, serialNumber=3824AC5EE00439EEDA21A1A10109E8BF76E4FAB8
Validity
Not Before: Jul 11 09:03:42 2025 GMT
Not After : Jul 10 09:03:42 2030 GMT
Subject: CN=6870d373-a3f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c2:7a:d2:02:91:22:9b:4f:53:ac:16:52:a3:
7e:d0:04:18:d8:55:71:09:67:7f:84:8e:6f:88:65:
0b:91:8c:53:a6:e9:f6:c5:21:c5:1e:1c:c2:65:4a:
52:cf:b0:89:d1:29:8e:22:a4:c7:15:b5:dd:2a:6b:
1b:c4:e6:86:3d:6a:e1:f4:13:dd:71:b4:b0:18:23:
54:f8:e4:5e:73:d1:3d:16:46:ab:4a:e6:43:8b:d8:
8f:73:bd:3f:19:44:cc:02:29:06:52:45:5c:78:9b:
55:4a:d7:d2:b0:01:58:c2:c1:aa:1b:5d:2f:a4:96:
a1:23:d3:04:30:5d:4d:a4:6a:43:87:6c:4b:ac:10:
48:4e:04:6a:5d:56:c5:49:a4:05:0f:e4:b2:20:0a:
76:4a:4b:85:aa:fa:7c:bc:b6:be:dc:69:08:8b:95:
28:0c:1d:ac:62:ce:53:97:8d:cf:73:1d:9f:bd:b4:
86:47:2a:38:a2:53:c7:05:db:bb:00:41:bc:b4:64:
5b:65:90:06:f8:cf:ca:2d:98:8c:88:20:f7:c9:8b:
ad:69:28:6c:21:31:e6:57:6a:1b:e5:b1:4a:c2:fc:
bb:4e:e5:43:f5:36:04:79:a6:64:92:9c:99:2d:00:
bf:b5:19:95:25:e3:dd:5b:e3:cc:b7:02:71:33:b2:
14:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:40:63:11:00:B8:AB:06:66:01:28:BC:3D:80:16:FD:FC:6A:E3:88
X509v3 Authority Key Identifier:
keyid:38:24:AC:5E:E0:04:39:EE:DA:21:A1:A1:01:09:E8:BF:76:E4:FA:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OCSsXuAEOe7aIaGhAQnov3bk-rg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/F426C5DA5E3511F08C38F3E8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.85.0.0/17
Signature Algorithm: sha256WithRSAEncryption
50:95:b0:70:f2:e5:76:36:4f:b9:c4:17:a8:44:87:3c:96:9e:
2f:01:00:a3:7d:ce:a7:b0:32:8c:ec:cc:b3:19:c4:c6:cf:58:
97:e9:03:c3:06:b1:7c:19:20:c2:84:08:d6:59:6b:7a:cb:dc:
2b:41:1a:7e:2a:6b:9c:38:42:9a:7f:7e:e7:99:21:6f:50:66:
13:e9:fb:e4:91:11:e1:f3:b3:a4:94:d5:05:77:06:1b:a7:65:
9a:80:9a:d8:2a:d7:b0:1b:14:0f:32:11:0f:f5:18:35:39:4e:
09:8d:ef:01:fa:73:dd:63:15:11:30:aa:da:ad:b5:f7:77:8e:
e2:d6:cd:dd:22:4d:80:dc:98:5d:10:c4:60:38:e5:22:9c:a2:
e7:6e:ff:e4:58:92:fa:ff:42:bf:de:d0:05:52:73:ee:d1:63:
dc:f6:b2:96:bc:9b:c0:20:22:01:6f:16:cb:f9:4f:1e:ad:21:
08:4b:df:58:f1:73:13:30:45:f6:f8:48:0d:e8:a8:aa:a0:03:
f8:e2:62:32:38:5a:fc:16:b5:66:e4:a4:91:84:0d:a4:9b:f4:
92:75:ca:7d:5f:bd:11:a5:80:6a:44:a7:17:9b:d4:03:cf:52:
03:f0:dc:5a:b7:b1:6f:fd:d1:24:07:c0:06:e5:7f:30:98:da:
f5:0a:78:96
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBgcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MUVENjNBRjExMC8GA1UEBRMoMzgyNEFDNUVFMDA0MzlFRURBMjFBMUExMDEwOUU4
QkY3NkU0RkFCODAeFw0yNTA3MTEwOTAzNDJaFw0zMDA3MTAwOTAzNDJaMBgxFjAU
BgNVBAMTDTY4NzBkMzczLWEzZjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDGwnrSApEim09TrBZSo37QBBjYVXEJZ3+Ejm+IZQuRjFOm6fbFIcUeHMJl
SlLPsInRKY4ipMcVtd0qaxvE5oY9auH0E91xtLAYI1T45F5z0T0WRqtK5kOL2I9z
vT8ZRMwCKQZSRVx4m1VK19KwAVjCwaobXS+klqEj0wQwXU2kakOHbEusEEhOBGpd
VsVJpAUP5LIgCnZKS4Wq+ny8tr7caQiLlSgMHaxizlOXjc9zHZ+9tIZHKjiiU8cF
27sAQby0ZFtlkAb4z8otmIyIIPfJi61pKGwhMeZXahvlsUrC/LtO5UP1NgR5pmSS
nJktAL+1GZUl491b48y3AnEzshSTAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU6kBj
EQC4qwZmASi8PYAW/fxq44gwHwYDVR0jBBgwFoAUOCSsXuAEOe7aIaGhAQnov3bk
+rgwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjFFRDYzL0JDNzJENkI2Q0FBNDExRUI5QzJBNEE1MkY4QUVBMjI4L09DU3NY
dUFFT2U3YUlhR2hBUW5vdjNiay1yZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL09DU3NYdUFFT2U3YUlhR2hBUW5vdjNiay1yZy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjFFRDYzL0JDNzJENkI2Q0FBNDExRUI5QzJBNEE1MkY4
QUVBMjI4L0Y0MjZDNURBNUUzNTExRjA4QzM4RjNFOERBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAcpVQAwDQYJKoZIhvcNAQEL
BQADggEBAFCVsHDy5XY2T7nEF6hEhzyWni8BAKN9zqewMozszLMZxMbPWJfpA8MG
sXwZIMKECNZZa3rL3CtBGn4qa5w4Qpp/fueZIW9QZhPp++SREeHzs6SU1QV3Bhun
ZZqAmtgq17AbFA8yEQ/1GDU5TgmN7wH6c91jFREwqtqttfd3juLWzd0iTYDcmF0Q
xGA45SKcoudu/+RYkvr/Qr/e0AVSc+7RY9z2spa8m8AgIgFvFsv5Tx6tIQhL31jx
cxMwRfb4SA3oqKqgA/jiYjI4WvwWtWbkpJGEDaSb9JJ1yn1fvRGlgGpEpxeb1APP
UgPw3Fq3sW/90SQHwAblfzCY2vUKeJY=
-----END CERTIFICATE-----
Generated at Fri Aug 1 18:09:49 2025 by rpki-client