Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/BCE643A0B0D511F0BA9A61C3DAE4EC9C.roa
File: BCE643A0B0D511F0BA9A61C3DAE4EC9C.roa (raw, json)
Hash identifier: 2BbLAs8GgVM6FOqDgIHAdtoiskiDxtPaueCw+9NrFMI=
Subject key identifier: F1:9B:9E:B5:FD:11:25:01:1B:7E:8F:D8:17:CD:97:E4:32:BE:0A:03
Certificate issuer: /CN=F36EF7D0AF/serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
Certificate serial: 040D
Authority key identifier: 3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/BCE643A0B0D511F0BA9A61C3DAE4EC9C.roa
Signing time: Fri 24 Oct 2025 12:34:10 +0000
ROA not before: Fri 24 Oct 2025 12:34:05 +0000
ROA not after: Thu 24 Oct 2030 12:34:05 +0000
asID: 834
IP address blocks: 102.212.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl
rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.mft
rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 02 Nov 2025 00:06:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1037 (0x40d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36EF7D0AF, serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
Validity
Not Before: Oct 24 12:34:05 2025 GMT
Not After : Oct 24 12:34:05 2030 GMT
Subject: CN=68fb7241-e2f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:15:c9:1c:ff:17:8e:7a:24:aa:ca:6e:00:eb:
28:49:cb:52:ab:3e:bc:d4:89:67:69:d3:86:dd:f5:
a4:3d:95:42:c6:d7:34:29:7b:99:07:4c:09:61:0b:
59:7f:43:ec:d9:f9:5b:68:9c:04:c8:5e:95:64:09:
1a:43:2e:4c:f1:5e:54:c9:57:bd:f8:53:00:37:0c:
9d:45:49:66:76:bb:9d:7a:f9:f2:f4:5f:24:1f:40:
fc:e9:62:22:16:8d:d9:70:85:33:bb:da:47:38:30:
3a:67:76:4c:3d:89:e3:a0:6e:4d:72:ec:18:ce:3b:
69:68:f5:e6:e6:5c:f0:15:e6:99:0d:c6:7d:94:d3:
db:7c:b5:b9:d7:b7:4c:91:fa:82:83:0f:d4:4d:64:
21:8c:99:ef:cb:38:f5:ba:2f:66:37:bc:02:5c:5e:
39:49:b7:e4:2b:7d:d3:4e:6b:78:0b:4e:a6:04:a7:
bb:3e:6b:c9:b2:f6:ed:8a:59:31:3e:8a:8c:1d:8a:
d1:bd:6a:51:17:3a:71:67:be:1b:59:5f:92:a8:e8:
a4:ae:d1:59:e0:08:e6:ac:47:4b:b6:d9:d9:c0:71:
7b:35:b6:bd:be:29:29:e8:2a:44:09:92:69:72:9c:
7b:2c:4c:25:60:a7:2a:0a:3d:7b:d4:29:8c:c1:96:
4a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:9B:9E:B5:FD:11:25:01:1B:7E:8F:D8:17:CD:97:E4:32:BE:0A:03
X509v3 Authority Key Identifier:
keyid:3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/BCE643A0B0D511F0BA9A61C3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.212.7.0/24
Signature Algorithm: sha256WithRSAEncryption
61:d1:4f:1c:bf:b7:bc:33:e6:38:f1:51:57:72:28:be:8a:63:
ec:66:da:ae:37:60:5a:76:57:d4:2b:f8:d7:cc:5f:38:92:d6:
ea:e6:56:1e:b4:ae:2f:51:e0:79:f6:d2:58:8c:1e:68:a9:6e:
1f:76:91:51:79:19:1b:36:7d:10:5d:c7:47:95:d6:1d:4c:ce:
0a:6a:9e:06:60:47:97:c1:78:18:48:4a:25:07:c0:62:93:f8:
18:d7:74:70:b5:ce:84:02:c0:7b:df:61:42:96:f3:48:18:44:
d6:5c:2d:30:db:53:a2:07:7e:e4:78:a6:f8:2d:9c:7e:5d:56:
ca:be:3e:31:4c:9e:43:a7:6f:41:01:a9:88:69:1e:9f:f2:46:
30:0f:64:71:ba:87:a3:7a:d8:6a:fa:83:67:8f:cd:97:1b:dd:
d8:e5:c8:b4:a4:06:51:06:3f:d3:d3:e3:87:2a:e0:eb:bc:e0:
32:a2:db:a5:c0:21:00:47:95:ad:bc:46:a3:52:ab:cb:62:ff:
0b:db:b3:1b:38:31:8c:30:02:ff:b8:53:b3:cc:24:f9:a1:d6:
52:0b:83:b4:5a:ab:32:21:cd:54:bb:c5:87:4a:c0:9f:9b:ba:
74:0c:10:a6:2b:32:ff:c5:c7:e7:b5:96:d8:4a:38:1a:5f:6f:
04:bf:e4:72
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBA0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RUY3RDBBRjExMC8GA1UEBRMoM0E1NTNCNkVGODBCRjkyMjMxMkY5NkI4RERDMUYy
MTlBOEM0MTIxQjAeFw0yNTEwMjQxMjM0MDVaFw0zMDEwMjQxMjM0MDVaMBgxFjAU
BgNVBAMTDTY4ZmI3MjQxLWUyZjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC3Fckc/xeOeiSqym4A6yhJy1KrPrzUiWdp04bd9aQ9lULG1zQpe5kHTAlh
C1l/Q+zZ+VtonATIXpVkCRpDLkzxXlTJV734UwA3DJ1FSWZ2u516+fL0XyQfQPzp
YiIWjdlwhTO72kc4MDpndkw9ieOgbk1y7BjOO2lo9ebmXPAV5pkNxn2U09t8tbnX
t0yR+oKDD9RNZCGMme/LOPW6L2Y3vAJcXjlJt+QrfdNOa3gLTqYEp7s+a8my9u2K
WTE+iowditG9alEXOnFnvhtZX5Ko6KSu0VngCOasR0u22dnAcXs1tr2+KSnoKkQJ
kmlynHssTCVgpyoKPXvUKYzBlkq5AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU8Zue
tf0RJQEbfo/YF82X5DK+CgMwHwYDVR0jBBgwFoAUOlU7bvgL+SIxL5a43cHyGajE
EhswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkVGN0QwLzM2RTQwQTE2RjJGQjExRUQ4MjFCOUQ4MDRBRDlFNkZDL09sVTdi
dmdMLVNJeEw1YTQzY0h5R2FqRUVocy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL09sVTdidmdMLVNJeEw1YTQzY0h5R2FqRUVocy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkVGN0QwLzM2RTQwQTE2RjJGQjExRUQ4MjFCOUQ4MDRB
RDlFNkZDL0JDRTY0M0EwQjBENTExRjBCQTlBNjFDM0RBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABm1AcwDQYJKoZIhvcNAQEL
BQADggEBAGHRTxy/t7wz5jjxUVdyKL6KY+xm2q43YFp2V9Qr+NfMXziS1urmVh60
ri9R4Hn20liMHmipbh92kVF5GRs2fRBdx0eV1h1MzgpqngZgR5fBeBhISiUHwGKT
+BjXdHC1zoQCwHvfYUKW80gYRNZcLTDbU6IHfuR4pvgtnH5dVsq+PjFMnkOnb0EB
qYhpHp/yRjAPZHG6h6N62Gr6g2ePzZcb3djlyLSkBlEGP9PT44cq4Ou84DKi26XA
IQBHla28RqNSq8ti/wvbsxs4MYwwAv+4U7PMJPmh1lILg7RaqzIhzVS7xYdKwJ+b
unQMEKYrMv/Fx+e1lthKOBpfbwS/5HI=
-----END CERTIFICATE-----
Generated at Fri Oct 31 05:43:34 2025 by rpki-client