Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E0157E165C8111F0BE41268FDAE4EC9C.roa
File: E0157E165C8111F0BE41268FDAE4EC9C.roa (raw, json)
Hash identifier: puqlOlHyOSYiXgQU9bls8RU6H3pPSA3vuxR0E4eJY7U=
Subject key identifier: 11:CB:9C:8E:9E:C5:67:24:86:4B:E3:84:78:5F:64:99:71:03:17:F3
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 154A
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E0157E165C8111F0BE41268FDAE4EC9C.roa
Signing time: Wed 09 Jul 2025 05:02:13 +0000
ROA not before: Wed 09 Jul 2025 05:02:08 +0000
ROA not after: Fri 09 Jul 2027 05:02:08 +0000
asID: 834
IP address blocks: 102.165.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 02 Aug 2025 07:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5450 (0x154a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jul 9 05:02:08 2025 GMT
Not After : Jul 9 05:02:08 2027 GMT
Subject: CN=686df7d5-3ef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f3:87:32:e7:5a:44:2e:c8:d6:e6:3c:74:7e:
16:e7:d2:eb:32:78:0d:de:7e:88:c7:7f:36:ae:fc:
e4:d2:d0:ca:ec:e9:2e:7c:61:2e:55:4c:b9:56:26:
00:2a:bc:06:a3:1c:a1:a8:6e:9b:63:96:82:f6:99:
92:8e:88:46:8b:c7:22:61:36:20:39:9e:96:91:a9:
fe:c3:ba:43:14:37:e0:e9:71:38:e4:c4:7b:4b:92:
05:96:b5:38:6f:7e:fc:1b:42:61:54:44:be:7e:65:
28:bb:d7:78:72:8a:36:f1:bc:ea:23:e0:23:98:42:
0d:7f:fc:e5:53:80:a1:cb:d9:73:87:68:03:6a:b6:
34:41:30:16:35:ce:88:e2:2e:91:42:5c:cc:c2:73:
53:d4:41:c7:ec:37:63:05:33:76:28:89:4d:4e:81:
61:1d:11:f6:4b:92:aa:ce:b9:c3:9a:0c:e6:2e:91:
ad:38:1f:07:58:5b:52:6d:20:82:dc:8d:81:87:f5:
ac:2c:12:53:f1:f9:11:f9:f1:67:11:a6:52:9d:23:
4c:b7:48:b0:7e:8a:7b:63:ec:1e:25:36:34:a8:37:
4a:46:0f:e1:a0:66:20:7e:00:69:26:a9:3f:6b:01:
59:5e:27:1f:87:03:f8:71:4e:da:0c:33:f2:ee:98:
8a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:CB:9C:8E:9E:C5:67:24:86:4B:E3:84:78:5F:64:99:71:03:17:F3
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E0157E165C8111F0BE41268FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.9.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:2f:d9:66:56:75:ec:ed:d5:a4:6a:e3:e8:7d:39:98:b8:38:
7e:14:b5:ad:85:1d:9a:c7:ae:c0:c3:7a:b9:ce:d6:78:a3:f9:
58:16:48:b8:8e:28:a7:62:98:19:ac:e6:c1:c9:86:2f:e9:c3:
85:91:e1:26:f7:4c:69:57:89:4c:22:00:59:2c:03:2a:75:af:
c3:99:51:86:78:ef:8a:a3:4a:75:3b:8e:c8:3f:59:c3:b5:af:
e1:8f:d0:e2:b9:da:31:e9:c9:35:32:ba:1d:ee:d1:fe:ca:0f:
cf:34:54:50:74:2b:a5:4f:fe:7f:81:3b:55:62:92:09:dc:67:
9b:0e:df:bd:47:6a:d0:09:57:e2:13:0c:ab:63:f6:22:08:51:
a8:25:1b:b5:ed:c8:11:f3:92:e7:57:a0:3d:58:d4:39:41:e7:
c8:23:5b:32:c7:88:0e:1c:ae:84:0d:22:94:1b:56:ad:83:a8:
67:4b:4f:7b:50:35:d2:64:2c:27:87:bc:3a:15:02:60:f4:5b:
94:7e:5f:43:ac:10:7c:11:88:6d:b9:e3:e4:ad:f7:ca:69:61:
13:16:79:97:d9:39:df:96:8a:3a:16:d8:14:f2:36:7e:92:73:
cb:df:83:89:b8:fa:cf:85:bc:1f:4c:d0:9f:70:97:ec:8b:bc:
f8:8f:c6:79
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICFUowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yNTA3MDkwNTAyMDhaFw0yNzA3MDkwNTAyMDhaMBgxFjAU
BgNVBAMTDTY4NmRmN2Q1LTNlZjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCg84cy51pELsjW5jx0fhbn0usyeA3efojHfzau/OTS0Mrs6S58YS5VTLlW
JgAqvAajHKGobptjloL2mZKOiEaLxyJhNiA5npaRqf7DukMUN+DpcTjkxHtLkgWW
tThvfvwbQmFURL5+ZSi713hyijbxvOoj4COYQg1//OVTgKHL2XOHaANqtjRBMBY1
zojiLpFCXMzCc1PUQcfsN2MFM3YoiU1OgWEdEfZLkqrOucOaDOYuka04HwdYW1Jt
IILcjYGH9awsElPx+RH58WcRplKdI0y3SLB+intj7B4lNjSoN0pGD+GgZiB+AGkm
qT9rAVleJx+HA/hxTtoMM/LumIq9AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUEcuc
jp7FZySGS+OEeF9kmXEDF/MwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4L0UwMTU3RTE2NUM4MTExRjBCRTQxMjY4RkRBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmpQkwDQYJKoZIhvcNAQEL
BQADggEBAAov2WZWdezt1aRq4+h9OZi4OH4Uta2FHZrHrsDDernO1nij+VgWSLiO
KKdimBms5sHJhi/pw4WR4Sb3TGlXiUwiAFksAyp1r8OZUYZ474qjSnU7jsg/WcO1
r+GP0OK52jHpyTUyuh3u0f7KD880VFB0K6VP/n+BO1VikgncZ5sO371HatAJV+IT
DKtj9iIIUaglG7XtyBHzkudXoD1Y1DlB58gjWzLHiA4croQNIpQbVq2DqGdLT3tQ
NdJkLCeHvDoVAmD0W5R+X0OsEHwRiG254+St98ppYRMWeZfZOd+WijoW2BTyNn6S
c8vfg4m4+s+FvB9M0J9wl+yLvPiPxnk=
-----END CERTIFICATE-----
Generated at Thu Jul 31 23:31:58 2025 by rpki-client