Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/CE4BCABC92F211F092681FAADAE4EC9C.roa
File: CE4BCABC92F211F092681FAADAE4EC9C.roa (raw, json)
Hash identifier: wOcPUGj+IifBOmDnUh1xML+YQ7k6ZOPo0AnGHXDzB84=
Subject key identifier: 6A:24:8F:E5:63:72:C6:A2:C9:90:B3:75:E0:E2:34:28:50:8F:8E:CB
Certificate issuer: /CN=F36B3234AF/serialNumber=03FE5D726F34E93CE1A95D94518E12237AC3E2C6
Certificate serial: 0655
Authority key identifier: 03:FE:5D:72:6F:34:E9:3C:E1:A9:5D:94:51:8E:12:23:7A:C3:E2:C6
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/A_5dcm806TzhqV2UUY4SI3rD4sY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/CE4BCABC92F211F092681FAADAE4EC9C.roa
Signing time: Tue 16 Sep 2025 11:46:39 +0000
ROA not before: Tue 16 Sep 2025 11:46:35 +0000
ROA not after: Sat 15 Sep 2035 11:46:35 +0000
asID: 5536
IP address blocks: 102.218.130.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.mft
rsync://rpki.afrinic.net/repository/afrinic/A_5dcm806TzhqV2UUY4SI3rD4sY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 20 Sep 2025 00:06:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1621 (0x655)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B3234AF, serialNumber=03FE5D726F34E93CE1A95D94518E12237AC3E2C6
Validity
Not Before: Sep 16 11:46:35 2025 GMT
Not After : Sep 15 11:46:35 2035 GMT
Subject: CN=68c94e1f-4c01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:47:8a:86:32:ee:49:e3:c9:10:ba:d6:cb:1b:
9b:bf:27:5b:c0:cb:13:1d:bd:ef:d2:76:12:f8:d8:
01:45:69:78:82:8d:82:8b:4a:98:6f:be:3e:99:62:
a3:f2:e3:e0:fb:e1:05:64:c6:fb:a0:d6:dc:f5:a7:
ef:da:12:ae:e3:77:51:fb:a2:4b:b1:5b:14:14:84:
a6:1b:90:af:0a:71:e0:3d:0f:3f:72:6e:91:de:ff:
20:1d:72:c7:c8:e5:2e:eb:94:fb:df:ea:af:d0:74:
69:41:ad:cd:a5:9f:16:57:8f:cc:70:06:4e:9a:ab:
73:11:f4:50:a4:b3:bf:6b:dd:2a:7e:5d:aa:ee:09:
bd:96:28:40:4b:d5:e5:0a:ef:bf:44:36:dc:2a:0e:
4d:2d:a9:fd:08:de:07:93:96:0d:29:63:9e:6f:79:
34:d4:e0:f2:75:31:3c:e9:24:2a:80:4c:26:4a:f2:
6f:f5:e6:45:7d:57:5f:1c:46:a8:f5:81:a0:57:3c:
28:d9:32:57:df:5d:4c:e3:5f:70:d0:0c:91:67:b1:
79:50:ee:ee:f5:71:25:13:cb:84:1a:56:9a:b2:66:
69:04:a1:24:3c:c8:57:90:cf:e5:18:ea:34:e1:b2:
f0:e8:2c:81:88:cb:ec:aa:d6:bd:0c:ad:8c:b5:cd:
dc:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:24:8F:E5:63:72:C6:A2:C9:90:B3:75:E0:E2:34:28:50:8F:8E:CB
X509v3 Authority Key Identifier:
keyid:03:FE:5D:72:6F:34:E9:3C:E1:A9:5D:94:51:8E:12:23:7A:C3:E2:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/A_5dcm806TzhqV2UUY4SI3rD4sY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/CE4BCABC92F211F092681FAADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.218.130.0/24
Signature Algorithm: sha256WithRSAEncryption
21:93:39:d3:f0:75:e7:8d:56:7f:1b:93:1a:d5:83:77:25:71:
dc:04:3b:e8:58:d9:82:48:92:eb:85:64:de:96:b2:f8:e9:69:
7f:01:69:cb:76:78:2b:7b:7a:c0:ca:e0:de:76:f3:ea:c0:92:
a5:a4:2a:75:61:11:69:9c:da:27:0e:4c:f0:ad:70:2d:3f:e3:
77:4e:c7:61:cc:8b:0e:ac:a6:d5:7d:af:ac:de:0b:94:c4:f3:
27:b4:45:67:ba:fd:f2:93:1a:a0:df:11:fa:e4:b6:98:05:06:
2f:61:d1:0d:b5:55:11:29:49:9a:4c:44:7d:ee:83:5f:fe:a1:
0e:f2:46:7c:f3:b7:24:96:9e:7d:a1:21:2a:22:89:0b:b1:4e:
d4:0d:80:0f:77:5d:51:ad:2e:02:a4:8a:19:82:7e:2c:4c:f5:
22:63:d5:9e:77:64:76:e9:08:b1:c1:2a:ed:ce:ac:58:04:24:
98:ad:29:5d:9d:18:65:af:9f:0c:8b:5e:79:1a:6d:be:20:ae:
59:42:57:6b:c0:29:ae:45:ea:ad:de:f9:20:4c:17:d4:24:2e:
88:47:ff:29:87:27:b6:cb:c2:0b:35:23:25:f9:59:ce:d2:2a:
e9:7b:58:5d:d1:ae:66:04:76:d6:41:94:3d:b0:4f:1c:62:89:
2f:bf:d2:bf
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBlUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QjMyMzRBRjExMC8GA1UEBRMoMDNGRTVENzI2RjM0RTkzQ0UxQTk1RDk0NTE4RTEy
MjM3QUMzRTJDNjAeFw0yNTA5MTYxMTQ2MzVaFw0zNTA5MTUxMTQ2MzVaMBgxFjAU
BgNVBAMTDTY4Yzk0ZTFmLTRjMDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDKR4qGMu5J48kQutbLG5u/J1vAyxMdve/SdhL42AFFaXiCjYKLSphvvj6Z
YqPy4+D74QVkxvug1tz1p+/aEq7jd1H7okuxWxQUhKYbkK8KceA9Dz9ybpHe/yAd
csfI5S7rlPvf6q/QdGlBrc2lnxZXj8xwBk6aq3MR9FCks79r3Sp+XaruCb2WKEBL
1eUK779ENtwqDk0tqf0I3geTlg0pY55veTTU4PJ1MTzpJCqATCZK8m/15kV9V18c
Rqj1gaBXPCjZMlffXUzjX3DQDJFnsXlQ7u71cSUTy4QaVpqyZmkEoSQ8yFeQz+UY
6jThsvDoLIGIy+yq1r0MrYy1zdxlAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUaiSP
5WNyxqLJkLN14OI0KFCPjsswHwYDVR0jBBgwFoAUA/5dcm806TzhqV2UUY4SI3rD
4sYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkIzMjM0LzlFMTIxQzBDMjQxMDExRUNCMkQwNjk1NkQ4QTAxNENFL0FfNWRj
bTgwNlR6aHFWMlVVWTRTSTNyRDRzWS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0FfNWRjbTgwNlR6aHFWMlVVWTRTSTNyRDRzWS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkIzMjM0LzlFMTIxQzBDMjQxMDExRUNCMkQwNjk1NkQ4
QTAxNENFL0NFNEJDQUJDOTJGMjExRjA5MjY4MUZBQURBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABm2oIwDQYJKoZIhvcNAQEL
BQADggEBACGTOdPwdeeNVn8bkxrVg3clcdwEO+hY2YJIkuuFZN6WsvjpaX8Bact2
eCt7esDK4N528+rAkqWkKnVhEWmc2icOTPCtcC0/43dOx2HMiw6sptV9r6zeC5TE
8ye0RWe6/fKTGqDfEfrktpgFBi9h0Q21VREpSZpMRH3ug1/+oQ7yRnzztySWnn2h
ISoiiQuxTtQNgA93XVGtLgKkihmCfixM9SJj1Z53ZHbpCLHBKu3OrFgEJJitKV2d
GGWvnwyLXnkabb4grllCV2vAKa5F6q3e+SBMF9QkLohH/ymHJ7bLwgs1IyX5Wc7S
Kul7WF3RrmYEdtZBlD2wTxxiiS+/0r8=
-----END CERTIFICATE-----
Generated at Thu Sep 18 03:36:16 2025 by rpki-client