Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/3861D60AAF3911F0BA09D190DAE4EC9C.roa
File: 3861D60AAF3911F0BA09D190DAE4EC9C.roa (raw, json)
Hash identifier: 6spf4R4UGA+B42KBpkY1KNvsKThTVT/5wGc3e31BGpg=
Subject key identifier: A3:54:35:C8:EA:8E:D3:40:00:C3:35:6E:E2:00:61:D7:D6:63:38:CC
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0F16
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/3861D60AAF3911F0BA09D190DAE4EC9C.roa
Signing time: Wed 22 Oct 2025 11:21:14 +0000
ROA not before: Wed 22 Oct 2025 11:21:10 +0000
ROA not after: Thu 22 Oct 2026 11:21:10 +0000
asID: 212666
IP address blocks: 102.135.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3862 (0xf16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Oct 22 11:21:10 2025 GMT
Not After : Oct 22 11:21:10 2026 GMT
Subject: CN=68f8be2a-993e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f3:dc:ee:27:0e:ca:19:e2:34:43:da:65:8b:
51:2d:44:3f:88:f6:41:4c:fe:3a:69:e7:c1:5f:74:
6b:ed:38:a5:c7:9b:7f:b9:e7:af:20:a5:12:14:8e:
85:f4:30:30:c3:02:0d:09:67:d9:66:02:44:d1:e6:
91:d7:29:ed:e0:38:9d:6d:7e:88:c3:a5:ac:a9:dd:
3c:b6:5c:13:2f:73:60:b6:ea:cc:91:8a:54:4b:8d:
f4:e7:b6:08:36:5e:57:f3:cb:53:e8:dd:9b:46:79:
a9:53:fa:1c:1b:1d:ec:30:9c:3c:fd:63:fc:2f:eb:
84:2c:db:ed:3f:9a:8c:f3:d8:bc:70:72:3f:45:59:
61:98:df:4e:ab:04:8e:8f:62:da:21:30:0c:32:68:
f0:e1:b8:2e:0d:8b:e3:9a:9d:73:42:a4:bc:45:4d:
97:52:41:84:0d:59:c7:8c:a6:f3:c3:59:8a:1b:82:
50:5b:40:f7:a8:7f:0b:cd:2a:8d:8d:96:77:c7:32:
1b:d1:8a:6f:f6:c5:93:24:47:7d:66:54:db:5d:9d:
42:66:d8:b9:d7:1b:fc:4a:7b:31:f3:cf:55:ad:4a:
b8:ea:92:43:4b:71:5c:fe:8f:3d:10:e8:78:e5:c2:
cc:a1:45:f8:37:d0:0d:bd:50:e2:4c:f3:5f:c6:8b:
9c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:54:35:C8:EA:8E:D3:40:00:C3:35:6E:E2:00:61:D7:D6:63:38:CC
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/3861D60AAF3911F0BA09D190DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.122.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:8e:27:9b:2d:1e:c6:71:eb:d9:71:3c:c9:cb:80:16:e8:2c:
f0:13:3e:7c:57:69:e6:de:67:ac:f8:3c:af:62:87:c0:35:2f:
ea:3c:cb:79:b3:b5:8f:cf:69:3e:a5:dd:a6:a3:96:af:a9:18:
45:16:81:c6:8f:d9:b1:f9:10:45:4d:34:ce:84:4a:a2:3e:f8:
ba:60:5a:7a:15:62:e2:5c:24:2f:05:4f:66:18:91:f8:9f:a0:
5d:d4:28:cb:28:0a:33:02:8b:e5:ee:17:c3:a8:88:6e:97:34:
dc:20:82:75:ad:29:31:33:64:1b:ef:21:ad:8c:88:4f:79:db:
ba:91:6f:11:bf:aa:f0:0a:27:65:81:20:db:2b:9f:9b:3e:7b:
75:ea:d7:6e:3e:19:6a:1d:9d:f8:f9:93:d3:a5:8f:ef:24:32:
0e:a9:b9:c0:a6:22:10:06:f4:20:3a:9b:64:61:18:29:25:25:
63:4b:4e:59:fa:b2:81:ed:97:44:df:7d:ef:9f:e7:73:56:25:
ed:13:b0:86:25:75:fc:d7:f6:55:8a:1f:19:0d:61:22:30:86:
21:19:9d:c8:b9:f7:c5:d4:c2:df:14:bf:ab:38:ce:06:85:28:
93:7f:94:25:d6:84:22:ff:eb:2f:10:94:91:9f:2b:e0:e1:36:
02:8a:a9:b4
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDxYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNTEwMjIxMTIxMTBaFw0yNjEwMjIxMTIxMTBaMBgxFjAU
BgNVBAMTDTY4ZjhiZTJhLTk5M2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDE89zuJw7KGeI0Q9pli1EtRD+I9kFM/jpp58FfdGvtOKXHm3+5568gpRIU
joX0MDDDAg0JZ9lmAkTR5pHXKe3gOJ1tfojDpayp3Ty2XBMvc2C26syRilRLjfTn
tgg2Xlfzy1Po3ZtGealT+hwbHewwnDz9Y/wv64Qs2+0/mozz2Lxwcj9FWWGY306r
BI6PYtohMAwyaPDhuC4Ni+OanXNCpLxFTZdSQYQNWceMpvPDWYobglBbQPeofwvN
Ko2NlnfHMhvRim/2xZMkR31mVNtdnUJm2LnXG/xKezHzz1WtSrjqkkNLcVz+jz0Q
6HjlwsyhRfg30A29UOJM81/Gi5zdAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUo1Q1
yOqO00AAwzVu4gBh19ZjOMwwHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3LzM4NjFENjBBQUYzOTExRjBCQTA5RDE5MERBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmh3owDQYJKoZIhvcNAQEL
BQADggEBAMuOJ5stHsZx69lxPMnLgBboLPATPnxXaebeZ6z4PK9ih8A1L+o8y3mz
tY/PaT6l3aajlq+pGEUWgcaP2bH5EEVNNM6ESqI++LpgWnoVYuJcJC8FT2YYkfif
oF3UKMsoCjMCi+XuF8OoiG6XNNwggnWtKTEzZBvvIa2MiE9527qRbxG/qvAKJ2WB
INsrn5s+e3Xq124+GWodnfj5k9Olj+8kMg6pucCmIhAG9CA6m2RhGCklJWNLTln6
soHtl0Tffe+f53NWJe0TsIYldfzX9lWKHxkNYSIwhiEZnci598XUwt8Uv6s4zgaF
KJN/lCXWhCL/6y8QlJGfK+DhNgKKqbQ=
-----END CERTIFICATE-----
Generated at Tue Nov 4 23:22:36 2025 by rpki-client