Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/5C6C3732961311F09C7786E5DAE4EC9C.roa
File: 5C6C3732961311F09C7786E5DAE4EC9C.roa (raw, json)
Hash identifier: TO7I+Kzt4nXRptosDUenWy4Gs/4EXBwEnFnG/Z9KBM4=
Subject key identifier: B0:09:3F:EA:B9:56:27:FD:F8:BA:E6:01:BF:6A:17:AC:03:32:9E:E1
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 15F7
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/5C6C3732961311F09C7786E5DAE4EC9C.roa
Signing time: Sat 20 Sep 2025 11:17:15 +0000
ROA not before: Sat 20 Sep 2025 11:17:10 +0000
ROA not after: Mon 20 Sep 2027 11:17:10 +0000
asID: 9304
IP address blocks: 102.129.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5623 (0x15f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Sep 20 11:17:10 2025 GMT
Not After : Sep 20 11:17:10 2027 GMT
Subject: CN=68ce8d3b-1fb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:21:8e:13:e7:dc:cf:8b:ed:6c:8f:c4:05:d9:
6d:2c:d0:65:66:9f:85:65:43:aa:ba:40:5e:af:3b:
49:ee:3b:7c:0d:6f:59:1b:20:b0:64:48:d5:a4:c5:
98:d4:e7:a2:96:fc:40:d1:ef:cb:b9:96:aa:fb:c5:
7c:8b:b4:fc:24:be:61:8f:97:05:59:ee:53:6a:44:
bd:0f:b3:e8:47:7b:16:66:b9:21:94:43:31:2a:50:
27:47:f6:0f:04:80:9e:1e:ff:fa:c7:89:e7:a4:83:
e4:82:98:16:71:7c:a1:ec:0f:15:73:de:df:d6:7f:
17:85:9d:17:4c:69:3c:01:7c:b0:f2:55:fd:8f:83:
d6:e0:fe:c9:df:06:80:ad:ec:fd:82:03:d2:a4:dd:
37:f9:62:43:9f:85:c0:fb:b6:fd:1a:d1:e7:e8:ac:
e4:00:02:de:da:2c:40:ad:c5:20:b8:e2:74:3f:b3:
fc:d2:8a:39:e6:6a:f9:b9:eb:c8:f7:80:ad:42:24:
32:d9:66:9e:75:dd:3c:87:38:cb:47:75:bd:10:f6:
d7:f7:fc:d6:ed:ef:cd:a7:7e:ca:a8:6e:31:73:8c:
85:be:99:fb:18:a1:40:55:f5:13:41:1c:b6:bb:b2:
26:56:9f:02:ff:19:3f:72:48:db:a8:47:d8:30:4e:
5e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:09:3F:EA:B9:56:27:FD:F8:BA:E6:01:BF:6A:17:AC:03:32:9E:E1
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/5C6C3732961311F09C7786E5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.250.0/24
Signature Algorithm: sha256WithRSAEncryption
54:e6:f4:a5:07:25:cd:da:fe:f6:78:be:dd:c7:a6:c2:03:55:
35:a5:62:fd:85:24:d2:83:3f:39:7c:23:ca:c9:94:63:eb:69:
08:bd:d3:1c:31:66:e8:98:e9:23:be:03:bb:2e:36:b3:97:42:
57:74:b6:6e:b9:7c:82:de:64:55:45:8d:53:5f:be:36:28:a1:
c8:83:93:8d:fe:c7:5f:ee:53:f5:55:e3:51:a8:f3:52:32:68:
ea:76:0c:50:90:1d:cd:3e:9a:e7:d8:c1:cc:9b:2f:dd:9f:fc:
6c:f7:4e:25:b3:45:ea:15:86:3b:13:ef:db:06:5f:2b:04:98:
18:e1:32:68:a5:5b:c4:20:39:ff:78:1a:d9:c1:c3:33:2d:a5:
bb:7b:4c:ed:ec:9c:d5:ce:17:1e:b6:78:73:54:14:6c:2b:01:
1a:52:e8:4d:5a:f3:99:c6:a9:9e:26:4b:32:03:b6:e6:c0:c7:
64:d2:e2:1d:81:7e:b6:9b:e6:bc:a8:25:06:43:00:66:db:e3:
1d:29:de:b1:23:49:64:c3:90:11:13:2b:c5:c0:c2:36:d7:93:
09:26:c2:7b:fd:ae:1c:fc:18:c1:c5:93:25:e8:34:49:31:36:
7c:5a:b8:6b:d7:49:82:d9:df:5d:33:a1:e7:45:de:60:95:12:
5c:04:24:b5
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICFfcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yNTA5MjAxMTE3MTBaFw0yNzA5MjAxMTE3MTBaMBgxFjAU
BgNVBAMTDTY4Y2U4ZDNiLTFmYjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDcIY4T59zPi+1sj8QF2W0s0GVmn4VlQ6q6QF6vO0nuO3wNb1kbILBkSNWk
xZjU56KW/EDR78u5lqr7xXyLtPwkvmGPlwVZ7lNqRL0Ps+hHexZmuSGUQzEqUCdH
9g8EgJ4e//rHieekg+SCmBZxfKHsDxVz3t/WfxeFnRdMaTwBfLDyVf2Pg9bg/snf
BoCt7P2CA9Kk3Tf5YkOfhcD7tv0a0eforOQAAt7aLECtxSC44nQ/s/zSijnmavm5
68j3gK1CJDLZZp513TyHOMtHdb0Q9tf3/Nbt782nfsqobjFzjIW+mfsYoUBV9RNB
HLa7siZWnwL/GT9ySNuoR9gwTl7NAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUsAk/
6rlWJ/34uuYBv2oXrAMynuEwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4LzVDNkMzNzMyOTYxMzExRjA5Qzc3ODZFNURBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgfowDQYJKoZIhvcNAQEL
BQADggEBAFTm9KUHJc3a/vZ4vt3HpsIDVTWlYv2FJNKDPzl8I8rJlGPraQi90xwx
ZuiY6SO+A7suNrOXQld0tm65fILeZFVFjVNfvjYoociDk43+x1/uU/VV41Go81Iy
aOp2DFCQHc0+mufYwcybL92f/Gz3TiWzReoVhjsT79sGXysEmBjhMmilW8QgOf94
GtnBwzMtpbt7TO3snNXOFx62eHNUFGwrARpS6E1a85nGqZ4mSzIDtubAx2TS4h2B
frab5ryoJQZDAGbb4x0p3rEjSWTDkBETK8XAwjbXkwkmwnv9rhz8GMHFkyXoNEkx
NnxauGvXSYLZ310zoedF3mCVElwEJLU=
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:34:25 2025 by rpki-client