Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/9F53591E8A5511F0BDC94FA8DAE4EC9C.roa
File: 9F53591E8A5511F0BDC94FA8DAE4EC9C.roa (raw, json)
Hash identifier: +smh31TCN0uVyn9OzTjukPH5iBi7EzbwO9KLrED0yWA=
Subject key identifier: 75:11:90:CC:F5:9C:23:07:FC:26:FF:23:F5:85:B1:9D:22:D4:AA:CC
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0DD5
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/9F53591E8A5511F0BDC94FA8DAE4EC9C.roa
Signing time: Fri 05 Sep 2025 12:41:20 +0000
ROA not before: Fri 05 Sep 2025 12:41:15 +0000
ROA not after: Sat 05 Sep 2026 12:41:15 +0000
asID: 208185
IP address blocks: 102.135.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 09 Sep 2025 00:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3541 (0xdd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Sep 5 12:41:15 2025 GMT
Not After : Sep 5 12:41:15 2026 GMT
Subject: CN=68bada70-330c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3a:b8:e0:90:ed:60:9e:e1:e6:ea:f8:ba:cf:
92:1c:31:84:e1:93:d0:b6:86:20:75:4b:91:ca:0c:
ca:c7:ad:69:20:e7:ed:f5:56:b5:25:96:8c:0e:27:
92:1a:13:c7:40:85:79:4c:e0:f4:b0:21:7a:70:ef:
2b:03:81:7a:65:3d:79:90:58:a9:d3:da:32:c3:0f:
28:4a:96:e3:55:4f:f0:90:69:5e:65:43:cb:cb:6b:
6f:8c:e8:1d:dd:b2:6a:01:98:14:7a:a1:02:18:8d:
85:99:c7:5f:04:94:8b:e9:25:eb:ad:3d:c2:cf:ae:
c1:24:b5:dc:24:0e:f7:a9:c0:8c:86:7e:93:ee:69:
cc:eb:6f:f5:31:8e:1c:37:9e:66:69:12:59:05:ec:
27:fc:f5:6e:b3:d2:f4:10:9c:d5:95:9f:b3:ae:aa:
ce:85:b4:68:81:98:8b:c6:00:a3:8a:d6:c9:4d:8e:
46:c2:47:15:71:4f:0c:04:83:9f:82:2a:05:5c:6f:
1d:4d:c1:d0:07:ee:1c:99:79:8e:6e:a0:7e:12:8f:
6f:cf:67:86:7a:30:a4:00:0a:52:2e:7b:ca:20:53:
78:60:2f:27:4a:42:da:92:1b:13:87:f3:c0:36:0b:
bb:00:d3:40:39:1e:e6:18:89:97:5b:e3:64:e1:54:
d0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:11:90:CC:F5:9C:23:07:FC:26:FF:23:F5:85:B1:9D:22:D4:AA:CC
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/9F53591E8A5511F0BDC94FA8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.10.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:82:64:1a:a8:5d:98:29:74:67:66:d2:69:bb:43:8f:5a:57:
61:d8:3c:56:93:a1:5c:77:8c:aa:bf:b3:28:b9:f8:08:31:ba:
6b:dd:1c:45:8a:fb:66:13:bb:65:e3:70:a7:e2:e5:6d:27:6b:
5d:6a:0d:78:5d:d3:47:7c:e5:54:69:82:44:1b:0b:50:ee:bb:
50:3a:ba:e0:eb:b0:ae:e5:69:38:3b:c3:77:8b:11:08:bb:72:
b4:c2:8c:e4:29:ef:9f:c9:14:b9:6c:1a:9d:9f:92:71:ce:54:
1e:35:39:78:e3:16:8c:40:4a:01:40:1d:4c:7c:7b:1d:58:81:
6a:4e:f5:5c:d6:ab:0f:1b:f9:ba:a7:6b:4c:66:62:fe:ab:13:
04:91:84:f4:46:80:19:45:53:54:a8:95:3f:01:42:8b:e3:41:
df:c5:ca:59:65:82:62:f2:b9:c1:ab:01:86:08:0a:e5:dc:c6:
af:68:b9:86:5b:07:87:40:67:9c:30:ec:1e:9e:21:65:e6:b5:
08:9b:73:76:ab:49:ca:32:65:c0:b1:86:cc:95:c5:c7:1a:64:
1b:54:cb:5d:f9:b6:67:a5:6e:59:3b:5e:47:14:fe:c7:e2:1e:
ba:a4:15:33:3d:cc:a7:c6:7b:16:d6:ae:54:14:c3:1e:b7:18:
76:94:73:97
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDdUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNTA5MDUxMjQxMTVaFw0yNjA5MDUxMjQxMTVaMBgxFjAU
BgNVBAMTDTY4YmFkYTcwLTMzMGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQClOrjgkO1gnuHm6vi6z5IcMYThk9C2hiB1S5HKDMrHrWkg5+31VrUllowO
J5IaE8dAhXlM4PSwIXpw7ysDgXplPXmQWKnT2jLDDyhKluNVT/CQaV5lQ8vLa2+M
6B3dsmoBmBR6oQIYjYWZx18ElIvpJeutPcLPrsEktdwkDvepwIyGfpPuaczrb/Ux
jhw3nmZpElkF7Cf89W6z0vQQnNWVn7Ouqs6FtGiBmIvGAKOK1slNjkbCRxVxTwwE
g5+CKgVcbx1NwdAH7hyZeY5uoH4Sj2/PZ4Z6MKQAClIue8ogU3hgLydKQtqSGxOH
88A2C7sA00A5HuYYiZdb42ThVNALAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUdRGQ
zPWcIwf8Jv8j9YWxnSLUqswwHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3LzlGNTM1OTFFOEE1NTExRjBCREM5NEZBOERBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmhwowDQYJKoZIhvcNAQEL
BQADggEBAJyCZBqoXZgpdGdm0mm7Q49aV2HYPFaToVx3jKq/syi5+AgxumvdHEWK
+2YTu2XjcKfi5W0na11qDXhd00d85VRpgkQbC1Duu1A6uuDrsK7laTg7w3eLEQi7
crTCjOQp75/JFLlsGp2fknHOVB41OXjjFoxASgFAHUx8ex1YgWpO9VzWqw8b+bqn
a0xmYv6rEwSRhPRGgBlFU1SolT8BQovjQd/FylllgmLyucGrAYYICuXcxq9ouYZb
B4dAZ5ww7B6eIWXmtQibc3arScoyZcCxhsyVxccaZBtUy135tmelblk7XkcU/sfi
HrqkFTM9zKfGexbWrlQUwx63GHaUc5c=
-----END CERTIFICATE-----
Generated at Sun Sep 7 08:54:50 2025 by rpki-client