Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/4AF53F5E9AA911F08CE3409DDAE4EC9C.roa
File: 4AF53F5E9AA911F08CE3409DDAE4EC9C.roa (raw, json)
Hash identifier: wNwn9UibNI2GB9e7qBBKmxbF02L3E6/S++ESMev7QUg=
Subject key identifier: 05:5F:DD:49:DF:47:49:3C:24:AE:FE:82:D7:72:26:81:7F:28:E3:0E
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0E9B
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/4AF53F5E9AA911F08CE3409DDAE4EC9C.roa
Signing time: Fri 26 Sep 2025 07:20:35 +0000
ROA not before: Fri 26 Sep 2025 07:20:30 +0000
ROA not after: Fri 25 Sep 2026 07:20:30 +0000
asID: 9009
IP address blocks: 102.135.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3739 (0xe9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Sep 26 07:20:30 2025 GMT
Not After : Sep 25 07:20:30 2026 GMT
Subject: CN=68d63ec3-bed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:20:c5:bf:5b:e2:90:84:32:06:35:60:d2:36:
ed:6a:dc:7b:eb:26:da:55:00:b2:9d:23:2b:23:76:
a7:dd:0f:98:93:00:fd:87:2b:04:20:b0:c1:4b:f7:
ab:49:39:de:a4:53:72:d0:aa:15:77:08:70:14:24:
0d:fb:60:80:bc:7c:f7:79:ee:8a:fe:13:53:5d:fd:
54:1f:8c:30:f6:9a:f1:20:ef:67:8a:d0:ca:aa:39:
a8:b1:be:cb:05:ef:5f:c2:20:01:31:b5:2e:89:ba:
8f:18:dc:83:20:27:81:83:81:21:b8:3b:f0:75:29:
a1:38:11:f5:f2:74:65:6c:d1:6e:8d:08:9c:e6:aa:
b5:01:eb:bc:4d:33:c5:d3:a5:f2:60:a5:08:2f:aa:
c2:b5:ff:33:c0:f0:69:f7:9d:77:30:4c:0a:ff:dd:
90:29:3c:dd:2e:3b:ce:8e:c8:34:9f:2c:a7:e1:30:
a2:77:d0:e6:e0:ce:58:a4:bd:a6:de:84:f4:23:49:
1a:32:cf:4a:fa:26:e9:d4:ab:58:29:d0:14:51:07:
1c:d0:a6:b5:26:6a:a9:1f:79:63:3c:ee:f0:fb:8a:
f3:04:30:0c:0a:0b:10:4a:ee:3c:fb:ee:74:3f:70:
94:44:57:9a:0b:da:68:24:bb:30:2a:6e:fa:ff:53:
96:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:5F:DD:49:DF:47:49:3C:24:AE:FE:82:D7:72:26:81:7F:28:E3:0E
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/4AF53F5E9AA911F08CE3409DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.10.0/24
Signature Algorithm: sha256WithRSAEncryption
98:f8:4f:07:dc:fc:80:ad:69:52:56:f4:f3:89:e2:ae:69:0c:
bc:e6:38:63:dd:be:a7:bf:0e:3a:56:7e:8c:62:85:14:f6:b7:
6d:31:37:39:3b:13:d9:bf:77:94:23:0b:be:cd:08:fd:9d:0a:
56:79:7b:49:33:ac:38:af:85:fe:1c:c5:9a:1f:76:3e:0c:95:
fd:c9:32:8b:f1:4e:4c:d6:c7:e9:2e:df:a3:44:95:c1:e3:86:
c5:eb:f5:77:0a:c3:a8:9d:0e:aa:2b:b8:1d:b4:cf:11:5a:a3:
ad:2f:3d:ca:dd:60:4b:48:92:ed:8d:5e:0a:6a:05:4c:7e:0d:
ce:6d:6f:32:d5:c1:e5:f7:77:25:7d:38:c8:1d:07:84:1f:bf:
83:3f:a8:63:19:dc:3f:b5:fb:29:a6:01:e2:fa:c0:1b:1f:c3:
d8:5d:7a:71:05:42:e7:a9:89:23:6c:29:e8:b3:5f:85:43:6e:
05:9c:96:32:01:b4:b0:51:c9:2d:0a:84:b3:ea:b0:a1:b4:8b:
e0:ac:50:47:fa:33:c8:8f:dd:c6:e2:c5:ae:9a:93:df:a7:dc:
e0:45:6b:8f:90:cc:65:59:ea:28:64:ff:78:d0:37:cc:83:ba:
da:8a:3b:0e:64:53:3f:46:3d:5a:66:f0:34:38:94:55:71:3f:
8b:89:d6:04
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDpswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNTA5MjYwNzIwMzBaFw0yNjA5MjUwNzIwMzBaMBgxFjAU
BgNVBAMTDTY4ZDYzZWMzLWJlZDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDSIMW/W+KQhDIGNWDSNu1q3HvrJtpVALKdIysjdqfdD5iTAP2HKwQgsMFL
96tJOd6kU3LQqhV3CHAUJA37YIC8fPd57or+E1Nd/VQfjDD2mvEg72eK0MqqOaix
vssF71/CIAExtS6Juo8Y3IMgJ4GDgSG4O/B1KaE4EfXydGVs0W6NCJzmqrUB67xN
M8XTpfJgpQgvqsK1/zPA8Gn3nXcwTAr/3ZApPN0uO86OyDSfLKfhMKJ30Obgzlik
vabehPQjSRoyz0r6JunUq1gp0BRRBxzQprUmaqkfeWM87vD7ivMEMAwKCxBK7jz7
7nQ/cJREV5oL2mgkuzAqbvr/U5ZlAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUBV/d
Sd9HSTwkrv6C13ImgX8o4w4wHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3LzRBRjUzRjVFOUFBOTExRjA4Q0UzNDA5RERBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmhwowDQYJKoZIhvcNAQEL
BQADggEBAJj4Twfc/ICtaVJW9POJ4q5pDLzmOGPdvqe/DjpWfoxihRT2t20xNzk7
E9m/d5QjC77NCP2dClZ5e0kzrDivhf4cxZofdj4Mlf3JMovxTkzWx+ku36NElcHj
hsXr9XcKw6idDqoruB20zxFao60vPcrdYEtIku2NXgpqBUx+Dc5tbzLVweX3dyV9
OMgdB4Qfv4M/qGMZ3D+1+ymmAeL6wBsfw9hdenEFQuepiSNsKeizX4VDbgWcljIB
tLBRyS0KhLPqsKG0i+CsUEf6M8iP3cbixa6ak9+n3OBFa4+QzGVZ6ihk/3jQN8yD
utqKOw5kUz9GPVpm8DQ4lFVxP4uJ1gQ=
-----END CERTIFICATE-----
Generated at Sun Oct 19 07:13:41 2025 by rpki-client