Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/F5DC7A8C8CCA11F085E60194DAE4EC9C.roa
File: F5DC7A8C8CCA11F085E60194DAE4EC9C.roa (raw, json)
Hash identifier: eeu+V/GEUh/3e8zrz5TUgeHC79IZXHPrxMyjNW02Diw=
Subject key identifier: 85:B5:C2:F3:0F:A7:77:04:5B:79:25:AF:E2:0B:E0:BF:3B:A3:43:23
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0DEA
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/F5DC7A8C8CCA11F085E60194DAE4EC9C.roa
Signing time: Mon 08 Sep 2025 15:46:19 +0000
ROA not before: Mon 08 Sep 2025 15:46:14 +0000
ROA not after: Sat 05 Sep 2026 15:46:14 +0000
asID: 9009
IP address blocks: 102.135.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3562 (0xdea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Sep 8 15:46:14 2025 GMT
Not After : Sep 5 15:46:14 2026 GMT
Subject: CN=68befa4b-19f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:17:98:20:5f:5e:f4:62:72:c9:20:c9:f9:27:
5e:45:b9:72:c2:c8:cd:62:a8:07:10:2a:9b:c4:94:
f6:f8:c8:01:35:34:66:84:50:e6:1d:f7:8d:7b:88:
44:c6:c0:d7:38:f3:ee:44:a4:ff:e6:81:c6:11:72:
0b:d6:0e:f0:20:2d:92:0e:66:42:f0:e1:60:9a:fa:
0f:ed:07:6e:97:52:7b:b4:3f:bf:9e:56:94:fa:1a:
cb:06:25:db:0f:b9:47:50:d1:15:72:de:34:45:03:
f2:b5:62:53:c5:8b:7a:3c:1e:55:10:b7:12:69:43:
61:4a:a3:97:a6:64:15:7e:15:16:a4:0c:14:09:a5:
36:c5:4c:35:ab:43:13:f6:be:48:06:fc:0e:72:9c:
1b:e7:70:db:7c:23:65:20:98:59:c8:df:7f:78:87:
6b:41:d2:1d:28:ee:1f:40:cd:a1:17:fb:cb:3f:ed:
af:e3:ca:82:e8:38:78:36:ac:6d:be:4c:2c:91:34:
1a:b2:63:1e:3e:0e:78:7b:c0:9f:49:d3:93:f1:42:
d7:aa:7a:21:e8:a2:40:da:a5:ac:2a:cf:8f:82:e0:
09:b3:e7:21:91:d2:0f:d5:91:ab:ad:eb:a9:aa:1f:
9b:e6:20:6a:d7:7a:64:f7:35:5a:62:53:b4:ad:7d:
20:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:B5:C2:F3:0F:A7:77:04:5B:79:25:AF:E2:0B:E0:BF:3B:A3:43:23
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/F5DC7A8C8CCA11F085E60194DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.69.0/24
Signature Algorithm: sha256WithRSAEncryption
37:db:25:d8:e7:de:2e:2b:00:44:03:8d:a8:6a:27:49:72:bb:
f9:f4:0a:7b:f1:80:99:1c:08:43:40:3d:80:b2:ce:a6:2f:c1:
01:c6:3d:56:28:ed:ad:1a:3f:48:92:e1:df:4b:86:06:81:33:
63:32:48:28:29:d0:d4:22:51:1b:5b:61:18:8b:da:5b:30:62:
86:94:58:29:85:90:4f:e0:7f:27:3a:8c:3b:39:4d:4a:86:00:
e8:b6:a8:ad:87:e5:06:81:84:fa:3f:b3:b9:ff:80:94:2e:93:
b7:20:cf:0e:c2:ff:ed:6a:d5:f9:25:60:65:9a:42:7c:8f:c9:
e2:d0:5a:19:8e:48:46:0f:f8:96:aa:94:e3:d8:a2:36:db:31:
57:5d:5c:2e:55:2f:d6:3f:b8:6f:51:c2:9e:22:e2:d2:e8:49:
ca:87:9a:03:ff:26:0e:85:63:0d:ce:38:6f:e0:2b:65:32:4a:
e3:cd:32:1b:ae:b0:29:99:7c:11:82:66:0e:d7:c2:f2:39:23:
94:9f:7b:c9:81:fc:81:a9:2f:93:eb:ed:0b:49:58:10:89:73:
dd:31:72:ba:f6:be:dd:e0:d3:75:37:41:ce:74:a4:14:dc:8b:
a7:79:2f:0d:68:64:11:33:29:85:22:76:8c:92:4a:0b:09:ff:
17:f6:da:4c
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDeowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNTA5MDgxNTQ2MTRaFw0yNjA5MDUxNTQ2MTRaMBgxFjAU
BgNVBAMTDTY4YmVmYTRiLTE5ZjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDNF5ggX170YnLJIMn5J15FuXLCyM1iqAcQKpvElPb4yAE1NGaEUOYd9417
iETGwNc48+5EpP/mgcYRcgvWDvAgLZIOZkLw4WCa+g/tB26XUnu0P7+eVpT6GssG
JdsPuUdQ0RVy3jRFA/K1YlPFi3o8HlUQtxJpQ2FKo5emZBV+FRakDBQJpTbFTDWr
QxP2vkgG/A5ynBvncNt8I2UgmFnI3394h2tB0h0o7h9AzaEX+8s/7a/jyoLoOHg2
rG2+TCyRNBqyYx4+Dnh7wJ9J05PxQteqeiHookDapawqz4+C4Amz5yGR0g/Vkaut
66mqH5vmIGrXemT3NVpiU7StfSCpAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUhbXC
8w+ndwRbeSWv4gvgvzujQyMwHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3L0Y1REM3QThDOENDQTExRjA4NUU2MDE5NERBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmh0UwDQYJKoZIhvcNAQEL
BQADggEBADfbJdjn3i4rAEQDjahqJ0lyu/n0CnvxgJkcCENAPYCyzqYvwQHGPVYo
7a0aP0iS4d9LhgaBM2MySCgp0NQiURtbYRiL2lswYoaUWCmFkE/gfyc6jDs5TUqG
AOi2qK2H5QaBhPo/s7n/gJQuk7cgzw7C/+1q1fklYGWaQnyPyeLQWhmOSEYP+Jaq
lOPYojbbMVddXC5VL9Y/uG9Rwp4i4tLoScqHmgP/Jg6FYw3OOG/gK2UySuPNMhuu
sCmZfBGCZg7XwvI5I5Sfe8mB/IGpL5Pr7QtJWBCJc90xcrr2vt3g03U3Qc50pBTc
i6d5Lw1oZBEzKYUidoySSgsJ/xf22kw=
-----END CERTIFICATE-----
Generated at Sun Oct 19 07:13:41 2025 by rpki-client