Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/423916C6AF3811F084C04088DAE4EC9C.roa
File: 423916C6AF3811F084C04088DAE4EC9C.roa (raw, json)
Hash identifier: 2++9MZes1pS/v2mfh21kQOwKrz+qB3UDuUOVtz3Tz0Y=
Subject key identifier: 61:8B:DA:A0:7B:D4:63:39:47:94:B1:72:78:94:70:3B:34:3F:11:7D
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0F0F
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/423916C6AF3811F084C04088DAE4EC9C.roa
Signing time: Wed 22 Oct 2025 11:14:22 +0000
ROA not before: Wed 22 Oct 2025 11:14:17 +0000
ROA not after: Thu 22 Oct 2026 11:14:17 +0000
asID: 55154
IP address blocks: 102.135.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3855 (0xf0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Oct 22 11:14:17 2025 GMT
Not After : Oct 22 11:14:17 2026 GMT
Subject: CN=68f8bc8d-260f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e4:7f:b1:b0:87:a7:ff:b2:aa:eb:43:42:b5:
7c:43:63:d0:73:f6:90:fe:49:37:b6:ca:83:46:5f:
f0:ab:e0:ef:c4:2a:1c:e4:bc:44:e2:78:69:ba:4c:
05:77:e1:65:c9:75:23:5d:28:f0:37:61:c6:cd:e3:
40:5f:20:68:bf:16:a1:74:a1:3a:72:0a:c6:b3:8b:
40:80:03:da:d9:48:05:6a:90:2c:cc:30:74:d4:b2:
d7:21:11:8d:8a:51:4c:79:8d:74:ee:14:4d:77:fc:
ee:14:45:e7:e2:8f:8f:82:c9:4c:a8:17:b4:e1:70:
e4:c8:47:b7:d6:8a:6f:bf:9e:c3:ef:96:9b:68:78:
f6:3d:71:00:da:b3:7a:1c:ff:61:e5:8d:b2:c0:21:
99:d0:69:12:59:bf:53:23:98:cf:7a:51:94:62:ca:
3a:b2:af:f7:2a:1c:c4:2b:b7:68:11:f9:e0:61:27:
d9:88:41:e8:fd:cc:60:8c:1e:d3:be:15:89:db:f4:
a1:54:68:95:71:37:39:11:b1:47:e9:fc:ac:6d:e6:
c7:91:5f:3d:89:2c:e2:d3:a4:c3:f6:3e:6f:ac:a6:
bb:04:4e:db:11:46:fc:02:ad:e0:d3:c0:cf:dc:68:
39:64:23:58:df:49:f8:7b:59:1f:e5:31:08:ca:26:
f8:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:8B:DA:A0:7B:D4:63:39:47:94:B1:72:78:94:70:3B:34:3F:11:7D
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/423916C6AF3811F084C04088DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.115.0/24
Signature Algorithm: sha256WithRSAEncryption
35:1f:36:09:c8:0b:91:cb:c3:de:3b:70:8a:54:7d:d6:22:9d:
3a:7b:19:94:f4:32:02:ed:61:1f:59:15:da:83:7f:76:f2:08:
9b:16:01:5c:1d:32:c2:55:a4:79:df:0f:47:07:49:fd:3e:82:
93:4f:6e:a4:e1:3f:fb:ce:e2:11:b8:30:85:0d:aa:d8:18:ac:
33:74:d5:d2:dd:a9:7e:8b:a1:6c:d0:8b:35:a4:5c:87:0e:b2:
13:12:6f:07:00:98:a3:2d:c4:79:63:3f:d4:fc:5a:27:8c:24:
c6:84:27:61:06:1c:80:93:ef:93:28:68:4f:39:75:47:4d:2b:
a6:de:bf:c5:01:06:fb:e5:84:dd:1b:fd:59:9c:4b:a6:db:b9:
55:98:e0:a2:93:09:53:83:63:6c:cd:09:e1:62:d6:81:62:b8:
26:91:56:3c:8f:a4:d9:2b:96:75:d5:e3:6e:d3:bf:1c:1c:52:
6b:0d:83:a6:2a:98:6f:80:51:a9:bb:22:04:c3:e2:4c:64:d7:
23:a4:bf:9e:82:db:de:a9:ea:ec:58:14:96:f9:1b:3a:9d:36:
f3:80:02:ba:92:b7:b4:ee:bf:84:63:45:b1:d6:ad:13:09:4c:
2a:3f:13:43:c7:aa:bc:4d:12:57:61:fc:1c:ed:dd:10:ed:fd:
1e:56:25:6e
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDw8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNTEwMjIxMTE0MTdaFw0yNjEwMjIxMTE0MTdaMBgxFjAU
BgNVBAMTDTY4ZjhiYzhkLTI2MGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC95H+xsIen/7Kq60NCtXxDY9Bz9pD+STe2yoNGX/Cr4O/EKhzkvETieGm6
TAV34WXJdSNdKPA3YcbN40BfIGi/FqF0oTpyCsazi0CAA9rZSAVqkCzMMHTUstch
EY2KUUx5jXTuFE13/O4URefij4+CyUyoF7ThcOTIR7fWim+/nsPvlptoePY9cQDa
s3oc/2HljbLAIZnQaRJZv1MjmM96UZRiyjqyr/cqHMQrt2gR+eBhJ9mIQej9zGCM
HtO+FYnb9KFUaJVxNzkRsUfp/Kxt5seRXz2JLOLTpMP2Pm+sprsETtsRRvwCreDT
wM/caDlkI1jfSfh7WR/lMQjKJvhVAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUYYva
oHvUYzlHlLFyeJRwOzQ/EX0wHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3LzQyMzkxNkM2QUYzODExRjA4NEMwNDA4OERBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmh3MwDQYJKoZIhvcNAQEL
BQADggEBADUfNgnIC5HLw947cIpUfdYinTp7GZT0MgLtYR9ZFdqDf3byCJsWAVwd
MsJVpHnfD0cHSf0+gpNPbqThP/vO4hG4MIUNqtgYrDN01dLdqX6LoWzQizWkXIcO
shMSbwcAmKMtxHljP9T8WieMJMaEJ2EGHICT75MoaE85dUdNK6bev8UBBvvlhN0b
/VmcS6bbuVWY4KKTCVODY2zNCeFi1oFiuCaRVjyPpNkrlnXV427TvxwcUmsNg6Yq
mG+AUam7IgTD4kxk1yOkv56C296p6uxYFJb5GzqdNvOAArqSt7Tuv4RjRbHWrRMJ
TCo/E0PHqrxNEldh/Bzt3RDt/R5WJW4=
-----END CERTIFICATE-----
Generated at Tue Nov 4 23:22:37 2025 by rpki-client