Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/CEBF9F2CBD9B11F0AACFB4A9DAE4EC9C.roa
File: CEBF9F2CBD9B11F0AACFB4A9DAE4EC9C.roa (raw, json)
Hash identifier: Y3SPEfa9FhnRnBcfIvNCeFJG2P0gudqhEmqdjsID6Jo=
Subject key identifier: FF:73:A6:AC:FE:C4:FB:0C:85:FC:2C:F1:7A:4A:CC:EB:91:EE:55:62
Certificate issuer: /CN=F36F8F4FAF/serialNumber=DC17A0EC58652D31896123A65610C3A32046556B
Certificate serial: 063B
Authority key identifier: DC:17:A0:EC:58:65:2D:31:89:61:23:A6:56:10:C3:A3:20:46:55:6B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/3Beg7FhlLTGJYSOmVhDDoyBGVWs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/CEBF9F2CBD9B11F0AACFB4A9DAE4EC9C.roa
Signing time: Sun 09 Nov 2025 18:42:17 +0000
ROA not before: Sun 09 Nov 2025 18:42:05 +0000
ROA not after: Sat 09 Nov 2030 18:42:05 +0000
asID: 21003
IP address blocks: 41.252.0.0/14 maxlen: 14
41.252.0.0/18 maxlen: 18
41.252.64.0/18 maxlen: 18
41.252.128.0/18 maxlen: 18
41.252.192.0/18 maxlen: 18
41.253.0.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/3Beg7FhlLTGJYSOmVhDDoyBGVWs.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/3Beg7FhlLTGJYSOmVhDDoyBGVWs.mft
rsync://rpki.afrinic.net/repository/afrinic/3Beg7FhlLTGJYSOmVhDDoyBGVWs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 13 Nov 2025 06:46:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1595 (0x63b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F8F4FAF, serialNumber=DC17A0EC58652D31896123A65610C3A32046556B
Validity
Not Before: Nov 9 18:42:05 2025 GMT
Not After : Nov 9 18:42:05 2030 GMT
Subject: CN=6910e089-7ad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fa:5d:ce:db:35:33:36:66:00:d2:85:43:06:
96:89:4f:4c:dd:b0:71:b9:cd:38:4d:3c:66:d6:30:
6f:e4:e8:10:64:a5:80:76:39:29:26:51:d8:c9:17:
cf:a1:df:8d:bc:f5:e0:d6:d3:c9:4b:47:3f:61:48:
50:ec:a6:0f:f6:aa:d9:ac:6a:46:21:0b:d6:cb:a5:
da:fb:07:b7:f5:f0:74:ac:88:fb:ed:34:71:33:49:
05:da:32:37:cc:14:25:6e:6c:84:45:82:c4:18:28:
bf:65:32:ea:7b:d4:8f:15:23:5b:30:ef:55:fb:50:
89:4a:43:3c:e3:45:96:80:c5:36:e9:86:5f:9b:b3:
8a:df:0a:a8:6e:7c:3e:90:0f:65:a5:90:7e:eb:9e:
97:74:30:ee:87:d3:91:da:cb:c3:de:c5:f9:17:8a:
22:79:ae:ed:7d:bb:10:fa:37:0c:80:58:e9:61:18:
14:ac:84:b2:23:b7:17:ba:4d:2c:75:70:70:52:5b:
b5:9f:e0:e1:dd:23:1a:db:e0:8c:b9:d5:25:59:f4:
f2:47:f2:bb:4e:c3:41:6f:a4:c9:ca:4f:8c:54:85:
91:d3:d5:4e:0c:27:81:dd:c8:07:41:ab:c0:f9:2b:
17:9c:43:5f:e8:d3:6b:eb:c2:6c:38:62:01:4c:85:
d4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:73:A6:AC:FE:C4:FB:0C:85:FC:2C:F1:7A:4A:CC:EB:91:EE:55:62
X509v3 Authority Key Identifier:
keyid:DC:17:A0:EC:58:65:2D:31:89:61:23:A6:56:10:C3:A3:20:46:55:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/3Beg7FhlLTGJYSOmVhDDoyBGVWs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3Beg7FhlLTGJYSOmVhDDoyBGVWs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/CEBF9F2CBD9B11F0AACFB4A9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.252.0.0/14
Signature Algorithm: sha256WithRSAEncryption
7d:64:bd:99:85:eb:d3:25:76:ea:08:49:ba:0c:7f:f1:d0:1f:
ff:de:57:6a:30:f0:19:ef:1b:b7:61:51:8f:96:cc:d2:6f:03:
3a:88:e6:36:bc:cb:ba:da:3f:51:c7:67:fe:fa:af:e9:96:03:
00:a7:90:81:d1:42:87:c7:37:96:d1:bc:25:f4:d1:b1:90:98:
59:16:5e:5b:39:a1:3d:f5:c9:a0:f8:24:c5:32:ba:68:80:1e:
62:4c:50:e2:12:13:a8:66:3b:8e:f4:8d:02:7c:3c:12:1c:a0:
e0:b5:fc:68:37:0e:09:ad:5d:e6:9c:27:b0:b8:1a:10:8d:db:
c5:7f:31:97:61:e9:db:bb:f4:4e:3d:ad:78:37:f1:39:e9:57:
08:3c:7e:39:1a:91:35:e9:83:1d:c7:6f:48:02:0a:74:a9:51:
1d:62:b6:af:21:37:a9:fd:53:31:76:61:e7:ab:fd:05:fc:82:
a7:14:bc:99:d1:30:2a:7a:46:4c:10:2c:a0:26:14:0e:48:62:
cb:73:7c:b2:5b:34:34:63:39:63:e4:7b:06:86:ff:9f:11:04:
20:1f:c0:f8:61:0b:33:ef:93:e0:c9:04:b3:e6:ca:91:1e:49:
bd:ab:5a:f2:c3:ad:5e:e6:e7:69:b5:65:c4:67:11:13:ba:1c:
cb:39:0d:d6
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICBjswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RjhGNEZBRjExMC8GA1UEBRMoREMxN0EwRUM1ODY1MkQzMTg5NjEyM0E2NTYxMEMz
QTMyMDQ2NTU2QjAeFw0yNTExMDkxODQyMDVaFw0zMDExMDkxODQyMDVaMBgxFjAU
BgNVBAMTDTY5MTBlMDg5LTdhZDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC7+l3O2zUzNmYA0oVDBpaJT0zdsHG5zThNPGbWMG/k6BBkpYB2OSkmUdjJ
F8+h34289eDW08lLRz9hSFDspg/2qtmsakYhC9bLpdr7B7f18HSsiPvtNHEzSQXa
MjfMFCVubIRFgsQYKL9lMup71I8VI1sw71X7UIlKQzzjRZaAxTbphl+bs4rfCqhu
fD6QD2WlkH7rnpd0MO6H05Hay8PexfkXiiJ5ru19uxD6NwyAWOlhGBSshLIjtxe6
TSx1cHBSW7Wf4OHdIxrb4Iy51SVZ9PJH8rtOw0FvpMnKT4xUhZHT1U4MJ4HdyAdB
q8D5KxecQ1/o02vrwmw4YgFMhdQLAgMBAAGjggKkMIICoDAdBgNVHQ4EFgQU/3Om
rP7E+wyF/CzxekrM65HuVWIwHwYDVR0jBBgwFoAU3Beg7FhlLTGJYSOmVhDDoyBG
VWswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkY4RjRGLzhBMzc3QkJDMkE3NTExRUM5MDgxNzU1OUQ4QTAxNENFLzNCZWc3
RmhsTFRHSllTT21WaEREb3lCR1ZXcy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzNCZWc3RmhsTFRHSllTT21WaEREb3lCR1ZXcy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkY4RjRGLzhBMzc3QkJDMkE3NTExRUM5MDgxNzU1OUQ4
QTAxNENFL0NFQkY5RjJDQkQ5QjExRjBBQUNGQjRBOURBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwIp/DANBgkqhkiG9w0BAQsF
AAOCAQEAfWS9mYXr0yV26ghJugx/8dAf/95XajDwGe8bt2FRj5bM0m8DOojmNrzL
uto/Ucdn/vqv6ZYDAKeQgdFCh8c3ltG8JfTRsZCYWRZeWzmhPfXJoPgkxTK6aIAe
YkxQ4hITqGY7jvSNAnw8Ehyg4LX8aDcOCa1d5pwnsLgaEI3bxX8xl2Hp27v0Tj2t
eDfxOelXCDx+ORqRNemDHcdvSAIKdKlRHWK2ryE3qf1TMXZh56v9BfyCpxS8mdEw
KnpGTBAsoCYUDkhiy3N8sls0NGM5Y+R7Bob/nxEEIB/A+GELM++T4MkEs+bKkR5J
vata8sOtXubnabVlxGcRE7ocyzkN1g==
-----END CERTIFICATE-----
Generated at Wed Nov 12 00:54:28 2025 by rpki-client