Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/01D88C68689011F0AA6683EEDAE4EC9C.roa
File: 01D88C68689011F0AA6683EEDAE4EC9C.roa (raw, json)
Hash identifier: v8kpAc97ksYB9URPV1ytumN77AOP/SgpO2d+x2PK/ac=
Subject key identifier: 72:4D:63:4A:1A:53:19:F7:71:C2:D0:34:55:C0:77:EB:15:F0:CD:53
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0CAA
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/01D88C68689011F0AA6683EEDAE4EC9C.roa
Signing time: Thu 24 Jul 2025 13:13:37 +0000
ROA not before: Thu 24 Jul 2025 13:13:32 +0000
ROA not after: Wed 24 Dec 2025 13:13:32 +0000
asID: 9009
IP address blocks: 102.135.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:07:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3242 (0xcaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Jul 24 13:13:32 2025 GMT
Not After : Dec 24 13:13:32 2025 GMT
Subject: CN=68823181-9f5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:db:fd:6c:98:a1:0a:46:db:8a:cf:29:0a:c5:
cc:47:65:41:d5:ee:0a:a6:99:65:fe:04:08:2e:b8:
27:86:50:4f:aa:14:8a:24:b8:1a:e3:db:53:ca:8e:
ca:b9:54:74:fe:ad:8d:49:a8:dc:35:5f:57:44:ed:
9e:28:42:7c:70:d8:b4:d8:61:8e:5b:76:7f:85:01:
f1:24:16:d2:b9:1a:ae:cf:0f:b8:87:c1:65:d3:c2:
bf:ea:ed:27:c8:e0:83:3a:7f:59:18:c5:67:7e:43:
d3:43:36:1f:df:f5:e5:fb:22:1e:10:31:ca:63:61:
b7:09:14:3d:90:03:75:2e:89:ae:72:e9:0d:3f:38:
25:1b:d4:28:7d:d8:fe:5a:81:4f:eb:74:fc:81:63:
25:30:9d:88:32:aa:3a:22:4b:1c:91:8c:a5:04:b7:
f6:cb:2f:5f:61:33:9a:18:8f:fc:4e:57:b2:f8:40:
a6:32:66:6e:40:45:e4:50:a5:be:3d:38:b6:fa:5b:
c4:c3:31:4b:da:49:b2:98:26:fd:30:69:04:b7:ae:
8b:10:bf:c8:8e:f3:c9:3c:79:b1:65:7d:a1:d0:31:
12:5c:6a:54:79:a5:da:ce:5b:ca:46:12:75:05:8a:
69:42:fc:4b:c2:64:90:7c:82:ea:1d:9c:31:65:f1:
59:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:4D:63:4A:1A:53:19:F7:71:C2:D0:34:55:C0:77:EB:15:F0:CD:53
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/01D88C68689011F0AA6683EEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.32.0/24
Signature Algorithm: sha256WithRSAEncryption
99:fb:e8:3a:37:6e:5c:45:a2:14:59:7b:35:25:33:60:ac:61:
ee:82:8e:21:54:fe:75:1d:43:be:b2:e2:59:03:bc:19:30:0a:
3a:79:61:71:43:50:92:ad:d3:cc:df:ea:55:28:59:0d:9a:7c:
37:7e:01:da:01:b5:be:83:5a:9e:5f:d9:35:19:64:05:5a:3f:
fb:aa:7f:fc:cf:53:ca:a4:ca:c7:86:6f:2e:11:e8:af:3e:a6:
97:0b:a8:1b:0d:10:a4:4b:a2:aa:6b:c3:1d:c2:14:b9:e7:57:
16:d9:79:59:6d:7d:03:2a:91:aa:b0:9b:c4:9f:fe:7c:27:87:
d9:66:00:06:85:82:a6:dd:87:36:5f:fa:03:e9:52:3f:00:5f:
e1:26:b0:c1:85:e6:37:fc:5a:b6:0e:e4:81:39:3e:95:38:62:
cd:5a:25:1b:54:94:60:69:51:19:3c:93:c5:6c:b5:99:aa:85:
87:cc:8f:cb:64:86:29:32:8e:e8:0d:7b:9e:9d:fc:3f:2d:b2:
8c:ad:8a:dc:e1:77:30:22:72:3a:fc:7c:12:0b:58:4f:1a:52:
fa:e7:49:ab:b4:da:30:d3:de:34:d3:d4:8c:05:d3:90:36:d6:
9b:bc:2e:6b:b9:79:95:fc:41:95:7d:8f:f6:21:cb:19:c2:ac:
e6:d3:b7:d3
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDKowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNTA3MjQxMzEzMzJaFw0yNTEyMjQxMzEzMzJaMBgxFjAU
BgNVBAMTDTY4ODIzMTgxLTlmNWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDM2/1smKEKRtuKzykKxcxHZUHV7gqmmWX+BAguuCeGUE+qFIokuBrj21PK
jsq5VHT+rY1JqNw1X1dE7Z4oQnxw2LTYYY5bdn+FAfEkFtK5Gq7PD7iHwWXTwr/q
7SfI4IM6f1kYxWd+Q9NDNh/f9eX7Ih4QMcpjYbcJFD2QA3Uuia5y6Q0/OCUb1Ch9
2P5agU/rdPyBYyUwnYgyqjoiSxyRjKUEt/bLL19hM5oYj/xOV7L4QKYyZm5AReRQ
pb49OLb6W8TDMUvaSbKYJv0waQS3rosQv8iO88k8ebFlfaHQMRJcalR5pdrOW8pG
EnUFimlC/EvCZJB8guodnDFl8Vl7AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUck1j
ShpTGfdxwtA0VcB36xXwzVMwHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3LzAxRDg4QzY4Njg5MDExRjBBQTY2ODNFRURBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmhyAwDQYJKoZIhvcNAQEL
BQADggEBAJn76Do3blxFohRZezUlM2CsYe6CjiFU/nUdQ76y4lkDvBkwCjp5YXFD
UJKt08zf6lUoWQ2afDd+AdoBtb6DWp5f2TUZZAVaP/uqf/zPU8qkyseGby4R6K8+
ppcLqBsNEKRLoqprwx3CFLnnVxbZeVltfQMqkaqwm8Sf/nwnh9lmAAaFgqbdhzZf
+gPpUj8AX+EmsMGF5jf8WrYO5IE5PpU4Ys1aJRtUlGBpURk8k8VstZmqhYfMj8tk
hikyjugNe56d/D8tsoytitzhdzAicjr8fBILWE8aUvrnSau02jDT3jTT1IwF05A2
1pu8Lmu5eZX8QZV9j/YhyxnCrObTt9M=
-----END CERTIFICATE-----
Generated at Mon Aug 4 19:07:09 2025 by rpki-client