Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/E38B0F148CCB11F09E5CAB98DAE4EC9C.roa
File: E38B0F148CCB11F09E5CAB98DAE4EC9C.roa (raw, json)
Hash identifier: zP+j7H6Ah8Fbz2NhwFe6ANVNogHFWycKLsM1nLAxCdE=
Subject key identifier: 53:C6:20:F1:92:4B:F8:64:D2:E3:F0:24:54:87:97:B8:43:A3:E9:C2
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0DFA
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/E38B0F148CCB11F09E5CAB98DAE4EC9C.roa
Signing time: Mon 08 Sep 2025 15:52:58 +0000
ROA not before: Mon 08 Sep 2025 15:52:53 +0000
ROA not after: Sat 05 Sep 2026 15:52:53 +0000
asID: 9009
IP address blocks: 102.135.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3578 (0xdfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Sep 8 15:52:53 2025 GMT
Not After : Sep 5 15:52:53 2026 GMT
Subject: CN=68befbd9-418e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0c:2b:f3:47:4f:a2:c3:fd:84:4a:43:00:75:
a8:74:b3:a1:1b:f0:33:93:7d:e6:e8:d4:46:a6:69:
2f:a1:b1:93:b2:ec:39:65:1f:47:0b:98:82:ee:4b:
7b:46:ef:66:4d:0e:d6:51:cb:ac:1f:61:ad:c4:90:
0a:c2:7d:6f:e8:f1:94:8b:f9:7a:7c:11:b7:7e:7c:
3f:39:da:d6:ea:ed:7c:1a:28:64:1a:23:da:a9:72:
44:6f:78:69:7a:3a:bd:6d:b1:5a:1c:36:c8:2f:90:
7a:e5:3e:10:bd:04:43:4c:91:76:f0:f6:af:d3:f2:
5e:23:2a:fe:16:a6:40:05:e6:a8:f0:19:b7:46:60:
32:9d:42:fa:60:97:47:e3:8b:3b:fa:a2:5f:4a:ab:
4f:6d:55:37:e3:da:09:50:fb:6f:cf:f0:d7:7b:c1:
18:7f:ce:f8:50:9a:65:d4:e1:7e:8d:78:1b:73:28:
82:a0:ca:05:31:31:41:bc:42:51:2d:58:4f:7e:67:
d2:ab:29:b3:ff:2d:04:82:fe:9a:cc:d7:3b:6c:93:
81:d0:a3:11:42:4c:69:6d:48:2d:f9:69:79:9b:8c:
6c:38:10:1c:e7:ba:22:2a:3d:d8:91:72:73:67:9e:
42:e8:7c:2c:1f:a9:fe:0b:c7:8f:79:95:c8:0b:bc:
e8:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:C6:20:F1:92:4B:F8:64:D2:E3:F0:24:54:87:97:B8:43:A3:E9:C2
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/E38B0F148CCB11F09E5CAB98DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.80.0/24
Signature Algorithm: sha256WithRSAEncryption
36:31:b8:45:c6:70:b8:20:f4:64:f1:42:7e:a3:1b:c7:5f:3e:
ba:71:eb:e4:98:6c:65:74:05:c1:46:91:c5:dd:1d:d1:45:73:
95:7c:d7:2d:df:38:1f:0a:b3:07:83:a9:73:76:18:39:46:77:
ff:09:1b:f2:27:63:d9:af:11:36:97:d8:70:50:dc:fd:05:87:
9e:49:80:d5:5d:33:a6:8d:d7:52:6e:eb:9f:af:a0:8a:da:d9:
4e:32:8b:a6:52:a7:48:9b:d8:1b:da:6c:d9:5a:9a:50:7a:ac:
90:5a:ef:32:7b:4b:9c:18:01:92:11:13:d4:77:df:f1:86:7a:
7f:47:50:b9:ca:9d:65:31:eb:47:09:f6:a4:31:93:8c:f8:0e:
2f:fe:a1:9f:d6:03:18:a8:b9:aa:da:c5:dd:dc:33:f2:45:81:
bc:e5:75:7f:39:1b:c6:18:2f:01:59:86:2e:27:15:8a:12:62:
06:b9:7b:96:4a:90:0a:af:ae:5b:fc:8f:1e:0a:6a:9c:2a:82:
d5:e7:31:99:6a:f4:b1:8d:89:cd:b6:98:2f:49:df:30:1a:05:
c0:b6:af:3e:47:d9:a5:40:0d:ea:ef:23:41:50:e7:cc:a5:58:
9d:79:a9:a1:e9:f9:26:dd:2a:c2:53:7f:43:d5:b3:f0:22:8d:
cd:b3:58:48
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDfowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNTA5MDgxNTUyNTNaFw0yNjA5MDUxNTUyNTNaMBgxFjAU
BgNVBAMTDTY4YmVmYmQ5LTQxOGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQClDCvzR0+iw/2ESkMAdah0s6Eb8DOTfebo1EamaS+hsZOy7DllH0cLmILu
S3tG72ZNDtZRy6wfYa3EkArCfW/o8ZSL+Xp8Ebd+fD852tbq7XwaKGQaI9qpckRv
eGl6Or1tsVocNsgvkHrlPhC9BENMkXbw9q/T8l4jKv4WpkAF5qjwGbdGYDKdQvpg
l0fjizv6ol9Kq09tVTfj2glQ+2/P8Nd7wRh/zvhQmmXU4X6NeBtzKIKgygUxMUG8
QlEtWE9+Z9KrKbP/LQSC/prM1ztsk4HQoxFCTGltSC35aXmbjGw4EBznuiIqPdiR
cnNnnkLofCwfqf4Lx495lcgLvOhHAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUU8Yg
8ZJL+GTS4/AkVIeXuEOj6cIwHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3L0UzOEIwRjE0OENDQjExRjA5RTVDQUI5OERBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmh1AwDQYJKoZIhvcNAQEL
BQADggEBADYxuEXGcLgg9GTxQn6jG8dfPrpx6+SYbGV0BcFGkcXdHdFFc5V81y3f
OB8KsweDqXN2GDlGd/8JG/InY9mvETaX2HBQ3P0Fh55JgNVdM6aN11Ju65+voIra
2U4yi6ZSp0ib2BvabNlamlB6rJBa7zJ7S5wYAZIRE9R33/GGen9HULnKnWUx60cJ
9qQxk4z4Di/+oZ/WAxiouaraxd3cM/JFgbzldX85G8YYLwFZhi4nFYoSYga5e5ZK
kAqvrlv8jx4KapwqgtXnMZlq9LGNic22mC9J3zAaBcC2rz5H2aVADervI0FQ58yl
WJ15qaHp+SbdKsJTf0PVs/Aijc2zWEg=
-----END CERTIFICATE-----
Generated at Sun Oct 19 07:13:39 2025 by rpki-client