Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/C98DCA528C8A11F09DBC687ADAE4EC9C.roa
File: C98DCA528C8A11F09DBC687ADAE4EC9C.roa (raw, json)
Hash identifier: lPGIjKORdAxL12V2QPnSjI5QzZMDwb5zeQTjEWUYt7g=
Subject key identifier: 9A:80:6A:A7:0C:5F:31:DF:46:F3:BC:2E:C8:0D:4A:21:EF:47:F0:CE
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0DE6
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/C98DCA528C8A11F09DBC687ADAE4EC9C.roa
Signing time: Mon 08 Sep 2025 08:06:57 +0000
ROA not before: Mon 08 Sep 2025 08:06:50 +0000
ROA not after: Sat 05 Sep 2026 08:06:50 +0000
asID: 9009
IP address blocks: 102.135.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3558 (0xde6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Sep 8 08:06:50 2025 GMT
Not After : Sep 5 08:06:50 2026 GMT
Subject: CN=68be8ea1-e235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a8:5e:d0:7f:b6:1a:c7:43:b5:9d:bc:87:1b:
e1:37:63:c1:9e:12:05:65:07:5e:82:b5:63:48:05:
86:ae:66:d3:5b:aa:6a:51:4d:dc:5b:24:02:8f:8d:
e9:f7:cd:5f:0f:7f:0f:97:eb:9e:3e:81:99:49:59:
a0:d4:4e:7f:65:a0:9d:78:c6:9b:1a:2b:db:b4:2c:
6d:25:72:8c:1a:8a:a1:f6:bb:b2:f0:da:3d:65:c6:
65:43:17:15:64:4c:04:1b:70:4c:7c:00:8e:52:35:
ce:4b:61:01:0d:5c:2b:20:69:1b:8b:f0:ab:c3:7c:
73:16:28:b9:8d:1f:d6:ef:62:a5:f1:b4:e0:56:d0:
23:9a:66:9e:dc:cf:c3:3c:a6:6a:ed:cd:4c:6e:f3:
f5:a4:44:21:58:fd:3e:22:d9:39:c0:f0:97:bf:83:
89:7a:cf:67:9e:e7:be:2f:28:b5:0a:6f:6b:cf:0f:
d3:a8:51:3b:1f:89:1c:c2:9f:50:92:4a:18:16:88:
56:55:35:ea:fe:37:fa:44:04:1d:09:25:8c:ec:26:
7c:ee:a7:b1:a2:42:ad:76:6a:83:6c:8c:09:47:ff:
46:95:74:98:3f:71:0c:3c:aa:e3:6a:6c:4c:17:8d:
fd:3b:f5:67:2c:7b:42:21:3c:10:f8:a1:fa:e3:e5:
25:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:80:6A:A7:0C:5F:31:DF:46:F3:BC:2E:C8:0D:4A:21:EF:47:F0:CE
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/C98DCA528C8A11F09DBC687ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.67.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:32:81:2f:dc:4e:87:c4:24:8c:97:8c:f3:48:4a:e0:5b:59:
fe:80:e0:44:66:79:af:cb:79:6d:ae:38:db:9a:e8:83:cd:bd:
93:67:d7:65:67:6b:9e:40:0a:7f:94:56:73:ed:16:43:6a:9d:
06:4c:b1:bd:1c:16:13:95:fa:ed:8e:7b:42:cd:0a:d3:b7:13:
c4:07:ab:0b:b2:6a:01:6c:7c:a2:45:35:aa:40:76:a0:f1:1c:
da:77:e0:29:fd:00:b9:ef:df:e8:20:a0:fd:25:e7:f8:4c:d6:
43:34:fb:df:e2:21:9f:81:a8:04:98:f1:e6:d0:34:a0:54:81:
29:ea:cd:35:54:eb:8f:cc:54:1e:a7:06:10:26:92:ea:43:aa:
a3:a4:c7:49:aa:27:8a:d9:48:15:d0:66:23:3d:58:71:e1:38:
18:75:e7:8c:d7:8c:d9:76:a7:00:10:a9:ed:2a:c9:24:1e:02:
5b:ac:75:e0:15:9c:af:ac:53:cb:07:e3:49:9c:1a:84:ce:21:
58:3d:e8:ce:2f:b7:22:1e:f2:3e:56:a5:3e:2d:51:26:f9:bd:
5f:ff:53:22:3e:27:22:e0:58:1e:b7:10:36:16:ec:88:1e:ae:
47:fc:59:56:a8:f4:c2:22:0b:55:32:32:46:7e:24:20:13:38:
3c:9b:ed:a2
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDeYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNTA5MDgwODA2NTBaFw0yNjA5MDUwODA2NTBaMBgxFjAU
BgNVBAMTDTY4YmU4ZWExLWUyMzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDQqF7Qf7Yax0O1nbyHG+E3Y8GeEgVlB16CtWNIBYauZtNbqmpRTdxbJAKP
jen3zV8Pfw+X654+gZlJWaDUTn9loJ14xpsaK9u0LG0lcowaiqH2u7Lw2j1lxmVD
FxVkTAQbcEx8AI5SNc5LYQENXCsgaRuL8KvDfHMWKLmNH9bvYqXxtOBW0COaZp7c
z8M8pmrtzUxu8/WkRCFY/T4i2TnA8Je/g4l6z2ee574vKLUKb2vPD9OoUTsfiRzC
n1CSShgWiFZVNer+N/pEBB0JJYzsJnzup7GiQq12aoNsjAlH/0aVdJg/cQw8quNq
bEwXjf079Wcse0IhPBD4ofrj5SVhAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUmoBq
pwxfMd9G87wuyA1KIe9H8M4wHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3L0M5OERDQTUyOEM4QTExRjA5REJDNjg3QURBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmh0MwDQYJKoZIhvcNAQEL
BQADggEBAHsygS/cTofEJIyXjPNISuBbWf6A4ERmea/LeW2uONua6IPNvZNn12Vn
a55ACn+UVnPtFkNqnQZMsb0cFhOV+u2Oe0LNCtO3E8QHqwuyagFsfKJFNapAdqDx
HNp34Cn9ALnv3+ggoP0l5/hM1kM0+9/iIZ+BqASY8ebQNKBUgSnqzTVU64/MVB6n
BhAmkupDqqOkx0mqJ4rZSBXQZiM9WHHhOBh154zXjNl2pwAQqe0qySQeAlusdeAV
nK+sU8sH40mcGoTOIVg96M4vtyIe8j5WpT4tUSb5vV//UyI+JyLgWB63EDYW7Ige
rkf8WVao9MIiC1UyMkZ+JCATODyb7aI=
-----END CERTIFICATE-----
Generated at Sun Oct 19 07:13:39 2025 by rpki-client