Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DE5F0/05A7CBCC892D11EE938A0A154AD9E6FC/5D0CA6DA8B4C11F0B2436DDDDAE4EC9C.roa
File: 5D0CA6DA8B4C11F0B2436DDDDAE4EC9C.roa (raw, json)
Hash identifier: Ra9ioWH8m0JON7faI4MqWl7L3OBqBQaOD8Z/MCluy1M=
Subject key identifier: D7:FA:C5:24:B5:B3:50:D3:95:33:06:39:64:F0:BB:61:03:E2:6B:7A
Certificate issuer: /CN=F36DE5F0AF/serialNumber=BA2F5924438729C5C7BA808073761CEC347E3CBA
Certificate serial: 02AD
Authority key identifier: BA:2F:59:24:43:87:29:C5:C7:BA:80:80:73:76:1C:EC:34:7E:3C:BA
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ui9ZJEOHKcXHuoCAc3Yc7DR-PLo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DE5F0/05A7CBCC892D11EE938A0A154AD9E6FC/5D0CA6DA8B4C11F0B2436DDDDAE4EC9C.roa
Signing time: Sat 06 Sep 2025 18:07:35 +0000
ROA not before: Sat 06 Sep 2025 18:07:30 +0000
ROA not after: Thu 06 Sep 2040 18:07:30 +0000
asID: 211619
IP address blocks: 102.206.48.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DE5F0/05A7CBCC892D11EE938A0A154AD9E6FC/ui9ZJEOHKcXHuoCAc3Yc7DR-PLo.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DE5F0/05A7CBCC892D11EE938A0A154AD9E6FC/ui9ZJEOHKcXHuoCAc3Yc7DR-PLo.mft
rsync://rpki.afrinic.net/repository/afrinic/ui9ZJEOHKcXHuoCAc3Yc7DR-PLo.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 21 Sep 2025 00:06:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 685 (0x2ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DE5F0AF, serialNumber=BA2F5924438729C5C7BA808073761CEC347E3CBA
Validity
Not Before: Sep 6 18:07:30 2025 GMT
Not After : Sep 6 18:07:30 2040 GMT
Subject: CN=68bc7867-c1a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b7:8d:16:10:91:09:1d:eb:63:ed:19:22:48:
16:b6:2c:39:ed:a1:1a:5b:a3:a9:4a:50:3f:96:75:
aa:09:c7:e0:e2:75:00:6e:09:6f:5a:07:a5:42:30:
77:4f:91:d1:85:eb:78:33:60:55:69:bf:35:45:a9:
5a:a9:c9:d4:09:42:d2:e8:43:7d:9a:b9:07:28:e5:
91:1e:8a:11:30:c0:09:02:95:75:fb:32:73:93:29:
31:3e:ee:af:f1:1d:73:76:94:15:e2:8f:1f:a2:9a:
a0:91:65:78:86:c6:8e:bb:d4:fe:07:1b:80:09:a1:
ff:63:c8:6e:e5:ac:bb:99:b8:e1:0c:77:d1:cf:60:
83:87:f1:d6:9b:bf:1a:44:ba:d1:f9:5a:35:fc:ec:
01:44:f7:c0:89:69:e0:62:09:e0:b0:69:9a:19:f3:
ed:df:cd:f5:07:e7:67:3c:63:95:1f:8e:9f:2a:2c:
2d:59:4f:9c:de:93:03:76:af:4c:1d:58:f6:c0:7d:
e2:69:fd:5e:be:3e:3b:3c:ce:fe:f7:86:4b:25:c6:
63:e2:f2:d6:9d:4f:5a:07:24:a3:94:ad:3d:61:d5:
b5:dd:2f:e2:1f:23:b7:54:89:13:20:f1:a5:79:af:
b5:f2:fc:cc:c4:6e:a4:ea:06:09:be:ae:73:db:1c:
3b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:FA:C5:24:B5:B3:50:D3:95:33:06:39:64:F0:BB:61:03:E2:6B:7A
X509v3 Authority Key Identifier:
keyid:BA:2F:59:24:43:87:29:C5:C7:BA:80:80:73:76:1C:EC:34:7E:3C:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE5F0/05A7CBCC892D11EE938A0A154AD9E6FC/ui9ZJEOHKcXHuoCAc3Yc7DR-PLo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ui9ZJEOHKcXHuoCAc3Yc7DR-PLo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE5F0/05A7CBCC892D11EE938A0A154AD9E6FC/5D0CA6DA8B4C11F0B2436DDDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.206.48.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:a7:a5:66:45:b3:0f:47:4b:ad:f6:98:c6:8f:f4:ca:4c:85:
be:8e:74:0e:93:c4:b1:f7:70:14:0a:cc:7f:85:94:b8:60:d5:
0d:17:65:3d:d7:8e:72:94:ee:e2:1e:43:5f:f0:4b:c0:bb:cb:
22:e0:f5:36:59:35:81:0d:81:75:bc:33:e8:48:04:a3:8d:2b:
74:3b:4f:82:b6:8c:d3:c7:71:2a:0d:35:3c:47:f0:a0:3a:bc:
f0:70:b7:e4:9b:83:d2:4a:a7:91:d9:a8:96:a5:dd:77:48:1b:
a0:80:3c:51:12:24:59:fb:23:e9:27:13:4d:c6:3e:3c:b3:9b:
c6:d9:19:34:c7:95:18:66:cd:3d:ff:d2:81:a3:d6:6d:8c:ad:
e5:e5:99:58:30:f8:d6:c9:b7:fd:a5:1e:2c:b7:9a:a0:a7:97:
66:62:89:2d:15:7f:a5:eb:5c:54:d6:41:34:f6:42:76:2f:fc:
63:64:61:a9:2b:8e:2a:4a:b7:bd:7b:0e:1d:99:a8:52:0a:d9:
7a:4c:17:c3:41:96:44:db:72:ce:69:a8:2b:f8:7e:44:a8:a8:
2c:6b:13:78:a0:d5:ec:ca:4c:42:06:8e:ad:87:2a:25:2d:a9:
5b:83:c6:30:dc:9f:31:10:7e:d3:fc:46:f1:0c:e4:45:24:f0:
8c:97:5d:22
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAq0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
REU1RjBBRjExMC8GA1UEBRMoQkEyRjU5MjQ0Mzg3MjlDNUM3QkE4MDgwNzM3NjFD
RUMzNDdFM0NCQTAeFw0yNTA5MDYxODA3MzBaFw00MDA5MDYxODA3MzBaMBgxFjAU
BgNVBAMTDTY4YmM3ODY3LWMxYTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCat40WEJEJHetj7RkiSBa2LDntoRpbo6lKUD+WdaoJx+DidQBuCW9aB6VC
MHdPkdGF63gzYFVpvzVFqVqpydQJQtLoQ32auQco5ZEeihEwwAkClXX7MnOTKTE+
7q/xHXN2lBXijx+imqCRZXiGxo671P4HG4AJof9jyG7lrLuZuOEMd9HPYIOH8dab
vxpEutH5WjX87AFE98CJaeBiCeCwaZoZ8+3fzfUH52c8Y5Ufjp8qLC1ZT5zekwN2
r0wdWPbAfeJp/V6+Pjs8zv73hkslxmPi8tadT1oHJKOUrT1h1bXdL+IfI7dUiRMg
8aV5r7Xy/MzEbqTqBgm+rnPbHDs7AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU1/rF
JLWzUNOVMwY5ZPC7YQPia3owHwYDVR0jBBgwFoAUui9ZJEOHKcXHuoCAc3Yc7DR+
PLowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkRFNUYwLzA1QTdDQkNDODkyRDExRUU5MzhBMEExNTRBRDlFNkZDL3VpOVpK
RU9IS2NYSHVvQ0FjM1ljN0RSLVBMby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3VpOVpKRU9IS2NYSHVvQ0FjM1ljN0RSLVBMby5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkRFNUYwLzA1QTdDQkNDODkyRDExRUU5MzhBMEExNTRB
RDlFNkZDLzVEMENBNkRBOEI0QzExRjBCMjQzNkRERERBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJmzjAwDQYJKoZIhvcNAQEL
BQADggEBACunpWZFsw9HS632mMaP9MpMhb6OdA6TxLH3cBQKzH+FlLhg1Q0XZT3X
jnKU7uIeQ1/wS8C7yyLg9TZZNYENgXW8M+hIBKONK3Q7T4K2jNPHcSoNNTxH8KA6
vPBwt+Sbg9JKp5HZqJal3XdIG6CAPFESJFn7I+knE03GPjyzm8bZGTTHlRhmzT3/
0oGj1m2MreXlmVgw+NbJt/2lHiy3mqCnl2ZiiS0Vf6XrXFTWQTT2QnYv/GNkYakr
jipKt717Dh2ZqFIK2XpMF8NBlkTbcs5pqCv4fkSoqCxrE3ig1ezKTEIGjq2HKiUt
qVuDxjDcnzEQftP8RvEM5EUk8IyXXSI=
-----END CERTIFICATE-----
Generated at Fri Sep 19 16:07:47 2025 by rpki-client