Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/DC282EF8882211F0A7704DDBDAE4EC9C.roa
File: DC282EF8882211F0A7704DDBDAE4EC9C.roa (raw, json)
Hash identifier: T0igekGrTYaRpNadHLliqhNPK9+LbtXEGTfnQQPv4/o=
Subject key identifier: 62:F5:CE:2D:99:F8:82:F1:13:1C:01:72:A2:13:66:BB:65:E1:04:B0
Certificate issuer: /CN=F36E4B69AF/serialNumber=CA6642EA9AFCC73AA24AA4047544B17C2603CBD2
Certificate serial: 02C7
Authority key identifier: CA:66:42:EA:9A:FC:C7:3A:A2:4A:A4:04:75:44:B1:7C:26:03:CB:D2
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ymZC6pr8xzqiSqQEdUSxfCYDy9I.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/DC282EF8882211F0A7704DDBDAE4EC9C.roa
Signing time: Tue 02 Sep 2025 17:32:56 +0000
ROA not before: Tue 02 Sep 2025 17:32:48 +0000
ROA not after: Sun 31 Dec 2028 17:32:48 +0000
asID: 36912
IP address blocks: 41.202.214.0/23 maxlen: 23
41.202.216.0/23 maxlen: 23
41.202.220.0/23 maxlen: 23
102.244.17.0/24 maxlen: 24
102.244.88.0/24 maxlen: 24
102.244.96.0/24 maxlen: 24
102.244.97.0/24 maxlen: 24
102.244.100.0/24 maxlen: 24
102.244.102.0/24 maxlen: 24
102.244.103.0/24 maxlen: 24
102.244.128.0/24 maxlen: 24
102.244.145.0/24 maxlen: 24
102.244.202.0/24 maxlen: 24
102.244.206.0/24 maxlen: 24
102.244.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/ymZC6pr8xzqiSqQEdUSxfCYDy9I.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/ymZC6pr8xzqiSqQEdUSxfCYDy9I.mft
rsync://rpki.afrinic.net/repository/afrinic/ymZC6pr8xzqiSqQEdUSxfCYDy9I.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 20 Sep 2025 00:06:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 711 (0x2c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E4B69AF, serialNumber=CA6642EA9AFCC73AA24AA4047544B17C2603CBD2
Validity
Not Before: Sep 2 17:32:48 2025 GMT
Not After : Dec 31 17:32:48 2028 GMT
Subject: CN=68b72a47-7e0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f0:0d:92:21:3d:34:67:b4:04:55:25:4d:1f:
63:b8:3b:ed:e7:58:a8:53:20:f2:84:5e:98:12:1b:
60:65:99:b7:2f:81:f0:8a:af:e4:de:b2:e8:7c:a3:
ad:78:6f:a9:1b:43:d7:5a:0a:77:a6:4b:9f:32:77:
81:e8:42:86:50:f5:6e:e4:a6:da:2d:43:ae:ca:8b:
53:79:02:27:d9:ed:67:82:35:e3:c0:8f:1c:98:29:
b3:21:b6:03:58:c5:0e:79:0d:a6:4b:da:3c:1c:b2:
f7:39:80:61:3f:02:2d:61:27:a0:16:f0:67:ce:30:
ce:98:76:bc:d1:c4:98:ed:ca:e8:25:4f:d9:b7:a8:
7c:bf:c4:6e:b3:53:e8:00:cd:c7:9e:07:be:b4:b8:
a7:88:12:63:89:d7:63:9b:85:e0:c0:42:33:27:c6:
4b:7e:f1:44:cb:a4:97:9e:a9:fa:60:ed:56:b0:e8:
13:16:21:30:c9:34:3b:60:f7:43:c2:cb:3d:ee:1d:
68:c2:f5:4b:06:3f:d3:3e:9d:dd:55:38:0a:25:41:
d8:4c:cc:10:df:3c:40:ed:45:9e:d5:16:b7:7a:3d:
ad:ee:a8:96:59:46:1d:67:c0:2f:32:45:56:eb:82:
dc:04:0d:f3:27:71:56:6d:1e:56:57:d3:8e:f0:69:
e3:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:F5:CE:2D:99:F8:82:F1:13:1C:01:72:A2:13:66:BB:65:E1:04:B0
X509v3 Authority Key Identifier:
keyid:CA:66:42:EA:9A:FC:C7:3A:A2:4A:A4:04:75:44:B1:7C:26:03:CB:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/ymZC6pr8xzqiSqQEdUSxfCYDy9I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ymZC6pr8xzqiSqQEdUSxfCYDy9I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/DC282EF8882211F0A7704DDBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.202.214.0-41.202.217.255
41.202.220.0/23
102.244.17.0/24
102.244.88.0/24
102.244.96.0/23
102.244.100.0/24
102.244.102.0/23
102.244.128.0/24
102.244.145.0/24
102.244.202.0/24
102.244.206.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:ad:6b:36:9d:af:2d:fe:73:b3:bc:0b:35:41:91:6c:03:5a:
e0:ed:4e:61:df:7d:59:7a:81:e3:ef:55:5d:66:74:bc:7c:eb:
ee:d8:fd:48:31:2a:de:df:cb:86:40:0b:6c:ef:f2:d9:0a:2b:
26:29:43:d6:ff:b1:89:ab:e3:6d:fa:4a:90:03:ed:ab:72:ba:
1c:b7:ed:5e:fa:47:ab:b8:2a:12:09:2a:cc:f0:0b:83:bf:c2:
dd:21:fb:5f:74:e2:66:47:49:74:70:39:a7:92:24:75:63:5a:
79:f9:92:1d:70:6e:ac:f5:cd:a8:67:5a:a8:d0:2c:41:7c:f1:
8f:4e:47:8a:0d:3d:3c:e5:18:14:27:f2:be:c8:99:6d:8a:59:
72:a8:61:73:44:bb:2d:cc:08:87:54:28:0a:72:c5:31:d3:c9:
99:f7:2a:c3:76:c5:13:64:f0:e3:f7:5f:8e:05:eb:ac:af:4a:
ff:ee:7d:bc:e9:bb:16:0f:32:08:1d:32:d8:10:ad:b7:30:7a:
f2:99:c4:64:55:99:21:3a:69:0d:42:a2:89:5b:a0:6c:32:36:
55:62:50:b0:84:69:6f:0d:e1:e4:79:b9:e4:65:49:fe:da:b2:
8b:11:44:34:c9:1f:ae:bf:16:a9:87:b5:45:27:f3:13:e6:71:
bd:63:98:a6
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgICAscwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RTRCNjlBRjExMC8GA1UEBRMoQ0E2NjQyRUE5QUZDQzczQUEyNEFBNDA0NzU0NEIx
N0MyNjAzQ0JEMjAeFw0yNTA5MDIxNzMyNDhaFw0yODEyMzExNzMyNDhaMBgxFjAU
BgNVBAMTDTY4YjcyYTQ3LTdlMGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDM8A2SIT00Z7QEVSVNH2O4O+3nWKhTIPKEXpgSG2BlmbcvgfCKr+Tesuh8
o614b6kbQ9daCnemS58yd4HoQoZQ9W7kptotQ67Ki1N5AifZ7WeCNePAjxyYKbMh
tgNYxQ55DaZL2jwcsvc5gGE/Ai1hJ6AW8GfOMM6YdrzRxJjtyuglT9m3qHy/xG6z
U+gAzceeB760uKeIEmOJ12ObheDAQjMnxkt+8UTLpJeeqfpg7Vaw6BMWITDJNDtg
90PCyz3uHWjC9UsGP9M+nd1VOAolQdhMzBDfPEDtRZ7VFrd6Pa3uqJZZRh1nwC8y
RVbrgtwEDfMncVZtHlZX047waeORAgMBAAGjggLpMIIC5TAdBgNVHQ4EFgQUYvXO
LZn4gvETHAFyohNmu2XhBLAwHwYDVR0jBBgwFoAUymZC6pr8xzqiSqQEdUSxfCYD
y9IwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkU0QjY5L0RFMTQ3NzBFODg3MzExRUU4OUI4MTE0MzRBRDlFNkZDL3ltWkM2
cHI4eHpxaVNxUUVkVVN4ZkNZRHk5SS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3ltWkM2cHI4eHpxaVNxUUVkVVN4ZkNZRHk5SS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkU0QjY5L0RFMTQ3NzBFODg3MzExRUU4OUI4MTE0MzRB
RDlFNkZDL0RDMjgyRUY4ODgyMjExRjBBNzcwNEREQkRBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwYwYIKwYBBQUHAQcBAf8EVDBSMFAEAgABMEowDAMEASnK1gMEASnK2AMEASnK
3AMEAGb0EQMEAGb0WAMEAWb0YAMEAGb0ZAMEAWb0ZgMEAGb0gAMEAGb0kQMEAGb0
ygMEAWb0zjANBgkqhkiG9w0BAQsFAAOCAQEAHK1rNp2vLf5zs7wLNUGRbANa4O1O
Yd99WXqB4+9VXWZ0vHzr7tj9SDEq3t/LhkALbO/y2QorJilD1v+xiavjbfpKkAPt
q3K6HLftXvpHq7gqEgkqzPALg7/C3SH7X3TiZkdJdHA5p5IkdWNaefmSHXBurPXN
qGdaqNAsQXzxj05Hig09POUYFCfyvsiZbYpZcqhhc0S7LcwIh1QoCnLFMdPJmfcq
w3bFE2Tw4/dfjgXrrK9K/+59vOm7Fg8yCB0y2BCttzB68pnEZFWZITppDUKiiVug
bDI2VWJQsIRpbw3h5Hm55GVJ/tqyixFENMkfrr8WqYe1RSfzE+ZxvWOYpg==
-----END CERTIFICATE-----
Generated at Thu Sep 18 12:18:09 2025 by rpki-client