Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36628D0/4F501028C73411EEB4A18965775412E6/06029CE8923411F0959B1BD6DAE4EC9C.roa
File: 06029CE8923411F0959B1BD6DAE4EC9C.roa (raw, json)
Hash identifier: KM6FaZ3N+6xYLUdr8UC2IJ+8T0cxiZ1kpB+SMdMA704=
Subject key identifier: 32:E1:0D:E0:FE:9D:A5:56:DC:5C:3D:57:46:1D:AE:63:03:37:C8:3E
Certificate issuer: /CN=F36628D0AF/serialNumber=CF3F4F9243A61D3BED933CC0F3533CA2BE093BDC
Certificate serial: 0261
Authority key identifier: CF:3F:4F:92:43:A6:1D:3B:ED:93:3C:C0:F3:53:3C:A2:BE:09:3B:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/zz9PkkOmHTvtkzzA81M8or4JO9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36628D0/4F501028C73411EEB4A18965775412E6/06029CE8923411F0959B1BD6DAE4EC9C.roa
Signing time: Mon 15 Sep 2025 13:00:59 +0000
ROA not before: Mon 15 Sep 2025 13:00:53 +0000
ROA not after: Fri 14 Sep 2035 13:00:53 +0000
asID: 329350
IP address blocks: 102.210.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36628D0/4F501028C73411EEB4A18965775412E6/zz9PkkOmHTvtkzzA81M8or4JO9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F36628D0/4F501028C73411EEB4A18965775412E6/zz9PkkOmHTvtkzzA81M8or4JO9w.mft
rsync://rpki.afrinic.net/repository/afrinic/zz9PkkOmHTvtkzzA81M8or4JO9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 19 Sep 2025 04:04:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 609 (0x261)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36628D0AF, serialNumber=CF3F4F9243A61D3BED933CC0F3533CA2BE093BDC
Validity
Not Before: Sep 15 13:00:53 2025 GMT
Not After : Sep 14 13:00:53 2035 GMT
Subject: CN=68c80e0b-7805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:36:c3:87:22:77:dc:84:14:f3:85:dd:da:df:
8c:15:d0:ee:d8:55:92:79:2a:fb:3e:b3:aa:d0:e9:
3e:3b:c5:f2:84:cd:d2:f4:2e:37:bf:8e:d5:8e:7a:
85:47:30:86:67:9d:fd:0f:4f:23:bc:27:17:f9:96:
85:c2:69:9a:43:e0:5c:4b:b1:33:6d:c8:3f:d4:94:
58:72:5e:92:87:35:4c:3f:24:c4:f6:a7:b6:2d:bc:
af:ac:c2:13:92:69:ba:4f:05:b1:98:9d:e7:bd:1e:
c7:4e:25:e8:6d:78:05:83:85:5b:ed:b6:14:5c:cb:
6c:70:e9:0a:f8:12:06:87:a8:0c:92:22:76:3c:93:
08:68:a0:2b:2e:3e:3b:fa:26:56:89:1d:81:a0:40:
93:16:1c:82:7b:d2:d2:08:39:3f:63:70:a5:50:09:
e6:88:a2:e3:cd:63:29:3b:fc:4e:c1:96:72:ce:4e:
54:33:87:23:c3:d5:43:ec:48:1a:81:91:3b:25:f4:
3f:ae:05:f1:dc:8f:7f:7b:e7:aa:e4:9d:16:e9:9a:
c3:f5:08:8d:2e:6b:bd:83:57:e3:40:3a:77:42:8b:
ad:59:65:2c:2f:bd:1e:ca:e5:8d:fc:7d:20:ea:70:
c4:89:36:04:8e:19:61:59:98:21:19:bd:fa:62:9e:
91:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:E1:0D:E0:FE:9D:A5:56:DC:5C:3D:57:46:1D:AE:63:03:37:C8:3E
X509v3 Authority Key Identifier:
keyid:CF:3F:4F:92:43:A6:1D:3B:ED:93:3C:C0:F3:53:3C:A2:BE:09:3B:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36628D0/4F501028C73411EEB4A18965775412E6/zz9PkkOmHTvtkzzA81M8or4JO9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zz9PkkOmHTvtkzzA81M8or4JO9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36628D0/4F501028C73411EEB4A18965775412E6/06029CE8923411F0959B1BD6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.210.210.0/24
Signature Algorithm: sha256WithRSAEncryption
15:a9:7f:74:a4:90:15:4f:46:b0:69:d8:a1:06:f3:92:64:65:
c1:6c:b4:63:bd:d3:d9:d6:64:14:5f:e3:21:bc:09:54:b0:cb:
bb:bb:76:dc:fe:91:c8:1f:e7:81:6a:1c:ce:55:a1:1f:a5:9a:
07:5a:05:c0:3e:4b:be:c4:51:2c:d8:ab:c1:95:d3:ff:c4:6c:
1f:05:9e:13:44:d9:97:8b:00:ba:c0:56:87:fc:72:58:40:f1:
4f:73:bb:61:a2:37:f2:fd:41:f8:e7:3e:9b:ea:67:3b:03:b0:
90:95:fb:44:d7:43:34:5e:ca:70:dd:5d:44:4b:e2:d1:40:d2:
a8:47:3f:af:1e:08:db:98:9d:1c:7d:7e:bd:0f:4d:b5:80:26:
f0:79:36:f4:7c:b1:6d:71:66:ab:29:f5:88:cf:7c:5a:79:16:
80:80:dd:98:9c:77:4d:86:bb:1c:d4:a1:12:64:c2:c7:a7:60:
0b:c2:14:0f:0a:a5:8c:81:69:ff:ce:13:6a:3b:41:56:15:b8:
47:8a:43:7d:11:61:56:d6:d8:e7:77:a1:98:ec:46:41:88:4d:
45:a4:f9:4d:27:37:02:1c:a8:43:f2:18:2e:b8:7b:27:6c:d3:
e0:0a:6c:9b:75:9d:98:67:9e:c4:6a:16:86:bb:28:5f:10:a8:
16:30:e7:75
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAmEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjI4RDBBRjExMC8GA1UEBRMoQ0YzRjRGOTI0M0E2MUQzQkVEOTMzQ0MwRjM1MzND
QTJCRTA5M0JEQzAeFw0yNTA5MTUxMzAwNTNaFw0zNTA5MTQxMzAwNTNaMBgxFjAU
BgNVBAMTDTY4YzgwZTBiLTc4MDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCqNsOHInfchBTzhd3a34wV0O7YVZJ5Kvs+s6rQ6T47xfKEzdL0Lje/jtWO
eoVHMIZnnf0PTyO8Jxf5loXCaZpD4FxLsTNtyD/UlFhyXpKHNUw/JMT2p7YtvK+s
whOSabpPBbGYnee9HsdOJehteAWDhVvtthRcy2xw6Qr4EgaHqAySInY8kwhooCsu
Pjv6JlaJHYGgQJMWHIJ70tIIOT9jcKVQCeaIouPNYyk7/E7BlnLOTlQzhyPD1UPs
SBqBkTsl9D+uBfHcj39756rknRbpmsP1CI0ua72DV+NAOndCi61ZZSwvvR7K5Y38
fSDqcMSJNgSOGWFZmCEZvfpinpHnAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUMuEN
4P6dpVbcXD1XRh2uYwM3yD4wHwYDVR0jBBgwFoAUzz9PkkOmHTvtkzzA81M8or4J
O9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjYyOEQwLzRGNTAxMDI4QzczNDExRUVCNEExODk2NTc3NTQxMkU2L3p6OVBr
a09tSFR2dGt6ekE4MU04b3I0Sk85dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3p6OVBra09tSFR2dGt6ekE4MU04b3I0Sk85dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjYyOEQwLzRGNTAxMDI4QzczNDExRUVCNEExODk2NTc3
NTQxMkU2LzA2MDI5Q0U4OTIzNDExRjA5NTlCMUJENkRBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABm0tIwDQYJKoZIhvcNAQEL
BQADggEBABWpf3SkkBVPRrBp2KEG85JkZcFstGO909nWZBRf4yG8CVSwy7u7dtz+
kcgf54FqHM5VoR+lmgdaBcA+S77EUSzYq8GV0//EbB8FnhNE2ZeLALrAVof8clhA
8U9zu2GiN/L9QfjnPpvqZzsDsJCV+0TXQzReynDdXURL4tFA0qhHP68eCNuYnRx9
fr0PTbWAJvB5NvR8sW1xZqsp9YjPfFp5FoCA3Zicd02GuxzUoRJkwsenYAvCFA8K
pYyBaf/OE2o7QVYVuEeKQ30RYVbW2Od3oZjsRkGITUWk+U0nNwIcqEPyGC64eyds
0+AKbJt1nZhnnsRqFoa7KF8QqBYw53U=
-----END CERTIFICATE-----
Generated at Thu Sep 18 02:16:27 2025 by rpki-client