Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D5F5A/2173E83ADAA611ED8227D4C42F6D8C1D/5B36715A92FF11F084841C7BDAE4EC9C.roa
File: 5B36715A92FF11F084841C7BDAE4EC9C.roa (raw, json)
Hash identifier: Y8PSOzjedh9cWf7Fh5eBNpi+rFoGWqu8tq9b4nzoOjg=
Subject key identifier: 5F:31:23:2B:45:BC:BA:65:44:D6:6B:BE:98:DF:1B:C8:A6:C2:79:93
Certificate issuer: /CN=F36D5F5AAF/serialNumber=28293436D4D6DA3A93A60ECA3FBEC77D8DC38F61
Certificate serial: 03A4
Authority key identifier: 28:29:34:36:D4:D6:DA:3A:93:A6:0E:CA:3F:BE:C7:7D:8D:C3:8F:61
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/KCk0NtTW2jqTpg7KP77HfY3Dj2E.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D5F5A/2173E83ADAA611ED8227D4C42F6D8C1D/5B36715A92FF11F084841C7BDAE4EC9C.roa
Signing time: Tue 16 Sep 2025 13:16:30 +0000
ROA not before: Tue 16 Sep 2025 13:16:25 +0000
ROA not after: Wed 16 Sep 2026 13:16:25 +0000
asID: 37276
IP address blocks: 197.215.208.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D5F5A/2173E83ADAA611ED8227D4C42F6D8C1D/KCk0NtTW2jqTpg7KP77HfY3Dj2E.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D5F5A/2173E83ADAA611ED8227D4C42F6D8C1D/KCk0NtTW2jqTpg7KP77HfY3Dj2E.mft
rsync://rpki.afrinic.net/repository/afrinic/KCk0NtTW2jqTpg7KP77HfY3Dj2E.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 18 Sep 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 932 (0x3a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D5F5AAF, serialNumber=28293436D4D6DA3A93A60ECA3FBEC77D8DC38F61
Validity
Not Before: Sep 16 13:16:25 2025 GMT
Not After : Sep 16 13:16:25 2026 GMT
Subject: CN=68c9632d-e589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:32:a5:84:c7:26:b1:c0:45:49:3e:24:59:6e:
c9:8c:df:dd:bb:a7:31:7d:a3:eb:fa:b9:82:0b:42:
28:8c:c1:64:65:04:32:3f:16:6a:cf:a7:0b:b7:13:
96:d0:06:49:7a:d8:2b:35:53:88:ae:cf:fb:b4:04:
26:d4:af:6b:d7:6d:25:e3:11:c8:55:d5:c7:07:81:
a4:b3:a5:fe:75:7b:e1:49:2f:6c:28:b4:b1:15:7c:
1d:d8:8d:45:67:ab:b6:3d:d8:36:66:7b:5d:96:75:
62:6c:cb:f1:bd:19:81:85:c0:43:0f:15:93:e2:d4:
4d:35:1c:25:c3:4b:ff:9a:4c:06:37:82:e3:ef:8a:
32:d7:df:09:78:1c:a6:6e:2b:d3:43:b6:05:52:66:
d1:67:d7:64:05:59:59:7b:5b:82:af:df:13:7a:1b:
b7:8d:7e:0e:0f:f4:93:fa:91:ae:20:b2:6f:40:ae:
a8:3a:bb:61:1c:67:2f:a4:27:f2:55:80:e7:0f:7a:
35:98:81:32:50:0f:61:14:3d:18:d9:29:41:56:d4:
35:e5:9f:88:75:e1:7f:59:42:0a:c5:16:e8:cf:83:
fc:90:a1:73:71:ec:99:7f:40:d2:b7:42:b3:87:01:
ef:33:13:d1:fb:69:f3:7a:4f:ad:cf:ff:86:02:0b:
22:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:31:23:2B:45:BC:BA:65:44:D6:6B:BE:98:DF:1B:C8:A6:C2:79:93
X509v3 Authority Key Identifier:
keyid:28:29:34:36:D4:D6:DA:3A:93:A6:0E:CA:3F:BE:C7:7D:8D:C3:8F:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D5F5A/2173E83ADAA611ED8227D4C42F6D8C1D/KCk0NtTW2jqTpg7KP77HfY3Dj2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KCk0NtTW2jqTpg7KP77HfY3Dj2E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D5F5A/2173E83ADAA611ED8227D4C42F6D8C1D/5B36715A92FF11F084841C7BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
197.215.208.0/21
Signature Algorithm: sha256WithRSAEncryption
0f:ac:91:fa:3b:5b:ad:f4:81:06:82:e9:91:e0:bf:fc:6e:1b:
d4:cc:7c:06:d1:dc:c1:c1:39:38:74:77:fb:be:55:8a:8f:75:
55:06:29:b5:64:66:be:bd:01:17:9c:c3:76:06:4e:db:8a:f1:
02:0c:d1:6e:11:64:e4:33:57:a2:1d:97:fd:cc:b6:92:34:fe:
f1:1d:b3:bc:d1:66:a5:0d:0d:ed:cf:05:10:08:ca:e5:b2:9f:
aa:18:6d:e4:bc:35:45:ef:e2:a9:b8:25:46:27:40:64:7c:42:
86:3b:63:c5:df:e1:a0:88:dd:b6:87:d5:58:5a:2e:42:2c:be:
70:56:64:99:16:ee:e7:bd:2e:42:b2:44:8f:a8:b1:66:7e:04:
57:cf:c1:76:40:69:80:2a:a7:2b:92:3d:cd:d7:bb:63:a4:97:
6b:85:e7:c7:06:68:de:9f:47:57:35:7e:03:be:58:f3:64:52:
03:2a:6d:9e:14:20:68:a4:19:75:df:5b:1c:36:1f:dc:e9:b0:
d2:ef:af:13:29:d5:de:94:80:76:02:b7:0a:9e:93:2e:6b:90:
7e:bc:19:9c:73:ed:1f:4c:e1:b2:ca:ec:5b:d3:ea:16:cd:69:
a8:06:70:d1:ca:20:77:99:12:68:88:aa:f6:05:07:db:05:c8:
51:0b:a4:c2
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICA6QwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RDVGNUFBRjExMC8GA1UEBRMoMjgyOTM0MzZENEQ2REEzQTkzQTYwRUNBM0ZCRUM3
N0Q4REMzOEY2MTAeFw0yNTA5MTYxMzE2MjVaFw0yNjA5MTYxMzE2MjVaMBgxFjAU
BgNVBAMTDTY4Yzk2MzJkLWU1ODkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDEMqWExyaxwEVJPiRZbsmM3927pzF9o+v6uYILQiiMwWRlBDI/FmrPpwu3
E5bQBkl62Cs1U4iuz/u0BCbUr2vXbSXjEchV1ccHgaSzpf51e+FJL2wotLEVfB3Y
jUVnq7Y92DZme12WdWJsy/G9GYGFwEMPFZPi1E01HCXDS/+aTAY3guPvijLX3wl4
HKZuK9NDtgVSZtFn12QFWVl7W4Kv3xN6G7eNfg4P9JP6ka4gsm9Arqg6u2EcZy+k
J/JVgOcPejWYgTJQD2EUPRjZKUFW1DXln4h14X9ZQgrFFujPg/yQoXNx7Jl/QNK3
QrOHAe8zE9H7afN6T63P/4YCCyJ9AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUXzEj
K0W8umVE1mu+mN8byKbCeZMwHwYDVR0jBBgwFoAUKCk0NtTW2jqTpg7KP77HfY3D
j2EwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkQ1RjVBLzIxNzNFODNBREFBNjExRUQ4MjI3RDRDNDJGNkQ4QzFEL0tDazBO
dFRXMmpxVHBnN0tQNzdIZlkzRGoyRS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0tDazBOdFRXMmpxVHBnN0tQNzdIZlkzRGoyRS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkQ1RjVBLzIxNzNFODNBREFBNjExRUQ4MjI3RDRDNDJG
NkQ4QzFELzVCMzY3MTVBOTJGRjExRjA4NDg0MUM3QkRBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAPF19AwDQYJKoZIhvcNAQEL
BQADggEBAA+skfo7W630gQaC6ZHgv/xuG9TMfAbR3MHBOTh0d/u+VYqPdVUGKbVk
Zr69ARecw3YGTtuK8QIM0W4RZOQzV6Idl/3MtpI0/vEds7zRZqUNDe3PBRAIyuWy
n6oYbeS8NUXv4qm4JUYnQGR8QoY7Y8Xf4aCI3baH1VhaLkIsvnBWZJkW7ue9LkKy
RI+osWZ+BFfPwXZAaYAqpyuSPc3Xu2Okl2uF58cGaN6fR1c1fgO+WPNkUgMqbZ4U
IGikGXXfWxw2H9zpsNLvrxMp1d6UgHYCtwqeky5rkH68GZxz7R9M4bLK7FvT6hbN
aagGcNHKIHeZEmiIqvYFB9sFyFELpMI=
-----END CERTIFICATE-----
Generated at Tue Sep 16 23:07:03 2025 by rpki-client