Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/802F17ACB5D011F0A862F28FDAE4EC9C.roa
File: 802F17ACB5D011F0A862F28FDAE4EC9C.roa (raw, json)
Hash identifier: cEa5rc+b8uoRQm6lEKjcwEO4AN3MwGfJNjZVLfnNXsQ=
Subject key identifier: 16:CA:EE:54:A9:0B:E4:E0:4D:C3:53:C2:ED:E5:B6:A5:BF:00:70:E2
Certificate issuer: /CN=F36BC80AAF/serialNumber=8C8F8CE2AD55B9366BEC6EDF492CD9C1498E0664
Certificate serial: 0552
Authority key identifier: 8C:8F:8C:E2:AD:55:B9:36:6B:EC:6E:DF:49:2C:D9:C1:49:8E:06:64
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/802F17ACB5D011F0A862F28FDAE4EC9C.roa
Signing time: Thu 30 Oct 2025 20:39:16 +0000
ROA not before: Thu 30 Oct 2025 20:39:11 +0000
ROA not after: Wed 31 Oct 2035 20:39:11 +0000
asID: 59895
IP address blocks: 41.215.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.mft
rsync://rpki.afrinic.net/repository/afrinic/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 04 Nov 2025 00:06:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1362 (0x552)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BC80AAF, serialNumber=8C8F8CE2AD55B9366BEC6EDF492CD9C1498E0664
Validity
Not Before: Oct 30 20:39:11 2025 GMT
Not After : Oct 31 20:39:11 2035 GMT
Subject: CN=6903ccf4-c20d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:65:8f:c0:e7:ef:59:44:35:a4:aa:d4:0f:ca:
09:7c:1c:8b:a6:64:c8:c3:2e:53:dd:80:d0:1f:12:
d4:a0:50:ec:48:ec:1c:f4:1b:33:de:9a:e1:da:9c:
3b:d7:09:ea:53:51:83:18:93:07:79:92:6b:cb:fd:
c9:b5:e3:ef:37:7a:4a:c4:c6:b5:1f:80:92:37:00:
a0:af:6b:2f:bf:6f:4b:c7:d2:40:1d:1a:16:41:18:
0a:20:17:25:30:78:b6:ba:32:1d:2f:82:6a:38:fd:
11:d7:d6:d7:59:42:cb:57:84:87:bc:bb:f8:16:d0:
c0:ef:5f:78:e1:68:28:72:54:8c:f7:6b:e8:1c:8b:
27:39:b3:ee:7b:88:17:ca:62:f1:ef:12:a9:bd:f9:
a3:bc:ef:2e:1b:71:7a:44:e4:da:47:03:a2:94:ee:
67:12:b9:2a:61:f0:cd:e3:49:2f:00:7f:42:6d:66:
11:95:46:35:c2:24:6f:be:80:c7:2c:38:1b:c6:d8:
a0:a7:0a:9c:2d:ec:f8:00:6a:4e:79:9c:e8:56:e3:
f3:07:19:81:08:e5:61:7d:fa:d2:35:c2:31:c8:ea:
9b:36:5c:69:f7:e6:9c:d1:33:d7:eb:c0:cf:78:6e:
5c:9b:86:55:78:5c:66:bf:48:79:b0:35:1d:3d:73:
e6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:CA:EE:54:A9:0B:E4:E0:4D:C3:53:C2:ED:E5:B6:A5:BF:00:70:E2
X509v3 Authority Key Identifier:
keyid:8C:8F:8C:E2:AD:55:B9:36:6B:EC:6E:DF:49:2C:D9:C1:49:8E:06:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/802F17ACB5D011F0A862F28FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.215.241.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:a2:65:8f:35:20:d4:b5:b8:64:7e:6c:ec:fa:f3:87:fd:e8:
3f:ed:79:36:d8:a1:39:21:5a:4f:b5:33:d7:c2:a7:09:c1:fa:
2e:07:dd:df:34:49:ef:80:04:1c:89:c5:55:49:26:7b:9d:60:
b2:35:21:b7:ea:7b:ff:af:db:80:de:c7:db:ac:b9:0c:09:af:
2a:a9:f6:92:55:e7:b6:18:a1:3c:00:2f:c7:e3:6d:f2:40:15:
3b:87:7c:20:8a:84:f7:ae:a8:71:f4:cc:db:6b:58:e2:ae:19:
28:6b:f4:89:80:da:d3:aa:4e:20:a2:37:21:8a:79:e0:9b:07:
c0:39:58:fb:6d:d1:5f:53:a9:19:83:6b:c7:98:5f:77:2f:00:
fb:44:84:91:3c:07:06:21:f2:7f:20:ac:5f:46:ef:46:29:67:
3a:6a:c9:98:ab:4c:65:c2:81:10:69:28:84:6c:fb:25:62:1b:
10:ed:03:ff:d6:29:7f:02:40:c8:1b:2c:78:32:17:97:f3:ca:
a2:8b:bf:1a:33:1b:6f:96:d8:11:80:10:99:60:31:7f:29:e2:
28:ec:41:b8:c9:79:f4:f5:6a:76:7e:bf:b5:76:e1:ed:e9:3f:
31:8b:0f:ed:5a:92:1b:30:12:e2:c0:be:a6:61:ab:6f:67:6d:
18:b1:a1:3d
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBVIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QkM4MEFBRjExMC8GA1UEBRMoOEM4RjhDRTJBRDU1QjkzNjZCRUM2RURGNDkyQ0Q5
QzE0OThFMDY2NDAeFw0yNTEwMzAyMDM5MTFaFw0zNTEwMzEyMDM5MTFaMBgxFjAU
BgNVBAMTDTY5MDNjY2Y0LWMyMGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCvZY/A5+9ZRDWkqtQPygl8HIumZMjDLlPdgNAfEtSgUOxI7Bz0GzPemuHa
nDvXCepTUYMYkwd5kmvL/cm14+83ekrExrUfgJI3AKCvay+/b0vH0kAdGhZBGAog
FyUweLa6Mh0vgmo4/RHX1tdZQstXhIe8u/gW0MDvX3jhaChyVIz3a+gciyc5s+57
iBfKYvHvEqm9+aO87y4bcXpE5NpHA6KU7mcSuSph8M3jSS8Af0JtZhGVRjXCJG++
gMcsOBvG2KCnCpwt7PgAak55nOhW4/MHGYEI5WF9+tI1wjHI6ps2XGn35pzRM9fr
wM94blybhlV4XGa/SHmwNR09c+ZfAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUFsru
VKkL5OBNw1PC7eW2pb8AcOIwHwYDVR0jBBgwFoAUjI+M4q1VuTZr7G7fSSzZwUmO
BmQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkJDODBBLzQ3MkVGNUIyRTc1QzExRUM5RDdGOTBEOEYxMjIyNDY4L2pJLU00
cTFWdVRacjdHN2ZTU3pad1VtT0JtUS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2pJLU00cTFWdVRacjdHN2ZTU3pad1VtT0JtUS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkJDODBBLzQ3MkVGNUIyRTc1QzExRUM5RDdGOTBEOEYx
MjIyNDY4LzgwMkYxN0FDQjVEMDExRjBBODYyRjI4RkRBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAp1/EwDQYJKoZIhvcNAQEL
BQADggEBAJuiZY81INS1uGR+bOz684f96D/teTbYoTkhWk+1M9fCpwnB+i4H3d80
Se+ABByJxVVJJnudYLI1Ibfqe/+v24Dex9usuQwJryqp9pJV57YYoTwAL8fjbfJA
FTuHfCCKhPeuqHH0zNtrWOKuGShr9ImA2tOqTiCiNyGKeeCbB8A5WPtt0V9TqRmD
a8eYX3cvAPtEhJE8BwYh8n8grF9G70YpZzpqyZirTGXCgRBpKIRs+yViGxDtA//W
KX8CQMgbLHgyF5fzyqKLvxozG2+W2BGAEJlgMX8p4ijsQbjJefT1anZ+v7V24e3p
PzGLD+1akhswEuLAvqZhq29nbRixoT0=
-----END CERTIFICATE-----
Generated at Sun Nov 2 09:04:17 2025 by rpki-client