Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/0B36502EB5CF11F09E324387DAE4EC9C.roa
File: 0B36502EB5CF11F09E324387DAE4EC9C.roa (raw, json)
Hash identifier: FuUSeKXmdp59eIJUnwXj15oz80rdM1YNse2hoVng0XE=
Subject key identifier: A9:E8:38:1A:F4:7E:62:00:01:99:8C:17:1B:07:67:35:71:38:86:60
Certificate issuer: /CN=F36BC80AAF/serialNumber=8C8F8CE2AD55B9366BEC6EDF492CD9C1498E0664
Certificate serial: 054A
Authority key identifier: 8C:8F:8C:E2:AD:55:B9:36:6B:EC:6E:DF:49:2C:D9:C1:49:8E:06:64
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/0B36502EB5CF11F09E324387DAE4EC9C.roa
Signing time: Thu 30 Oct 2025 20:28:50 +0000
ROA not before: Thu 30 Oct 2025 20:28:41 +0000
ROA not after: Wed 31 Oct 2035 20:28:41 +0000
asID: 59895
IP address blocks: 41.77.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.mft
rsync://rpki.afrinic.net/repository/afrinic/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 04 Nov 2025 00:06:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1354 (0x54a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BC80AAF, serialNumber=8C8F8CE2AD55B9366BEC6EDF492CD9C1498E0664
Validity
Not Before: Oct 30 20:28:41 2025 GMT
Not After : Oct 31 20:28:41 2035 GMT
Subject: CN=6903ca82-823f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:28:d8:86:a7:ab:04:34:0a:81:bc:3a:c4:97:
8c:84:39:3f:fa:3f:9c:7c:92:bf:ef:62:5b:dc:c3:
d0:64:5d:e3:d2:8c:62:cd:9d:a2:cf:a9:c0:48:10:
1e:7b:18:62:75:76:51:d3:32:24:01:32:7d:8d:d0:
4c:0c:10:76:b2:3c:dc:f4:24:37:25:27:b8:f3:fd:
ac:a1:55:b5:c5:eb:e5:ad:d9:dd:ba:e7:a7:ed:c7:
a1:a0:bd:5f:5b:fa:32:d6:73:99:bb:55:70:9e:30:
11:fb:ce:f6:e6:e0:31:cd:36:28:c1:01:e2:32:af:
36:d1:8d:6d:75:e2:43:89:74:6c:c5:d5:b0:9e:ca:
f8:c2:4d:21:c8:32:38:a3:ad:a2:fd:e0:78:23:ea:
d5:5c:26:b9:29:df:48:64:c9:04:6d:30:eb:96:0f:
c0:33:f1:74:f1:3e:69:6f:e5:86:fe:f7:51:56:79:
24:08:b5:dd:4f:14:14:15:8d:79:97:fa:7e:57:8e:
88:4c:9b:ab:ff:82:6d:e2:1e:b5:8b:31:c3:fb:9a:
1c:9b:50:39:e0:c5:8a:35:eb:83:7b:61:f6:7b:bb:
09:fe:8e:44:36:a7:75:de:74:88:cb:88:1b:1a:e8:
20:d6:6a:96:b8:d5:1e:65:35:62:2d:1f:0c:6c:3d:
ec:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:E8:38:1A:F4:7E:62:00:01:99:8C:17:1B:07:67:35:71:38:86:60
X509v3 Authority Key Identifier:
keyid:8C:8F:8C:E2:AD:55:B9:36:6B:EC:6E:DF:49:2C:D9:C1:49:8E:06:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/0B36502EB5CF11F09E324387DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.77.142.0/24
Signature Algorithm: sha256WithRSAEncryption
00:1f:bb:e1:6e:ff:04:bc:42:00:b5:8c:f3:e5:6e:30:7c:97:
e0:2a:cb:0c:78:de:f7:d1:5d:61:db:3d:af:5f:2d:e1:11:d8:
24:3b:65:cb:90:5d:11:b0:17:c9:d0:84:d6:ba:cd:9e:38:12:
bb:37:8a:e6:66:35:5b:24:08:dc:8c:12:57:53:21:5d:2e:42:
fc:ae:57:96:10:60:7e:ef:0b:a3:c2:e3:36:14:90:4d:98:62:
88:89:91:ed:a6:60:d7:8e:fe:9c:ba:6c:fd:c2:7a:e9:f9:97:
d4:26:94:85:d5:5e:13:1c:fa:bc:18:4f:4e:4f:ba:8f:69:6b:
2d:1f:a0:bf:6b:1f:32:78:a3:b5:1d:13:14:ed:b6:80:f1:04:
e5:8d:f0:38:67:7a:25:33:44:fd:6e:31:17:cf:a4:e2:fd:b6:
54:49:f1:07:4e:ff:a2:35:3b:c6:2c:af:b2:93:0f:67:00:56:
55:e8:60:d2:bf:23:ef:9f:80:93:74:db:97:df:f2:12:60:dd:
83:a9:3c:01:11:d3:84:64:d4:ef:29:54:87:05:0c:01:b8:1f:
a1:9a:1d:37:c8:a3:3f:95:6b:6f:c7:22:91:c8:da:21:17:45:
01:f2:4b:e8:3d:5a:3d:4d:bd:58:7f:76:21:b8:56:81:ec:5d:
f7:48:9d:f0
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBUowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QkM4MEFBRjExMC8GA1UEBRMoOEM4RjhDRTJBRDU1QjkzNjZCRUM2RURGNDkyQ0Q5
QzE0OThFMDY2NDAeFw0yNTEwMzAyMDI4NDFaFw0zNTEwMzEyMDI4NDFaMBgxFjAU
BgNVBAMTDTY5MDNjYTgyLTgyM2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQChKNiGp6sENAqBvDrEl4yEOT/6P5x8kr/vYlvcw9BkXePSjGLNnaLPqcBI
EB57GGJ1dlHTMiQBMn2N0EwMEHayPNz0JDclJ7jz/ayhVbXF6+Wt2d2656ftx6Gg
vV9b+jLWc5m7VXCeMBH7zvbm4DHNNijBAeIyrzbRjW114kOJdGzF1bCeyvjCTSHI
MjijraL94Hgj6tVcJrkp30hkyQRtMOuWD8Az8XTxPmlv5Yb+91FWeSQItd1PFBQV
jXmX+n5XjohMm6v/gm3iHrWLMcP7mhybUDngxYo164N7YfZ7uwn+jkQ2p3XedIjL
iBsa6CDWapa41R5lNWItHwxsPezPAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUqeg4
GvR+YgABmYwXGwdnNXE4hmAwHwYDVR0jBBgwFoAUjI+M4q1VuTZr7G7fSSzZwUmO
BmQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkJDODBBLzQ3MkVGNUIyRTc1QzExRUM5RDdGOTBEOEYxMjIyNDY4L2pJLU00
cTFWdVRacjdHN2ZTU3pad1VtT0JtUS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2pJLU00cTFWdVRacjdHN2ZTU3pad1VtT0JtUS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkJDODBBLzQ3MkVGNUIyRTc1QzExRUM5RDdGOTBEOEYx
MjIyNDY4LzBCMzY1MDJFQjVDRjExRjA5RTMyNDM4N0RBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAApTY4wDQYJKoZIhvcNAQEL
BQADggEBAAAfu+Fu/wS8QgC1jPPlbjB8l+Aqywx43vfRXWHbPa9fLeER2CQ7ZcuQ
XRGwF8nQhNa6zZ44Ers3iuZmNVskCNyMEldTIV0uQvyuV5YQYH7vC6PC4zYUkE2Y
YoiJke2mYNeO/py6bP3Ceun5l9QmlIXVXhMc+rwYT05Puo9pay0foL9rHzJ4o7Ud
ExTttoDxBOWN8DhneiUzRP1uMRfPpOL9tlRJ8QdO/6I1O8Ysr7KTD2cAVlXoYNK/
I++fgJN025ff8hJg3YOpPAER04Rk1O8pVIcFDAG4H6GaHTfIoz+Va2/HIpHI2iEX
RQHyS+g9Wj1NvVh/diG4VoHsXfdInfA=
-----END CERTIFICATE-----
Generated at Sun Nov 2 09:04:16 2025 by rpki-client