Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/8CF54170688F11F087F823ECDAE4EC9C.roa
File: 8CF54170688F11F087F823ECDAE4EC9C.roa (raw, json)
Hash identifier: w7LFXj52b+xKIjgruQRhk3DzAB+DPIh3yTX/KWuTSVQ=
Subject key identifier: 41:6B:A5:69:56:0F:07:73:20:31:82:EA:6C:D5:71:DF:58:15:35:19
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0CA4
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/8CF54170688F11F087F823ECDAE4EC9C.roa
Signing time: Thu 24 Jul 2025 13:10:21 +0000
ROA not before: Thu 24 Jul 2025 13:10:16 +0000
ROA not after: Tue 10 Feb 2026 13:10:16 +0000
asID: 9009
IP address blocks: 102.135.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:07:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3236 (0xca4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Jul 24 13:10:16 2025 GMT
Not After : Feb 10 13:10:16 2026 GMT
Subject: CN=688230bd-edd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:da:b7:b1:e6:14:e1:3a:4f:2d:47:6e:88:a9:
02:56:7c:e5:5f:b9:80:48:1e:5c:d6:90:6c:b9:14:
ae:03:2a:eb:17:ed:40:ce:61:da:6d:62:c4:a4:b3:
c9:cc:95:c5:22:55:7b:47:5b:ae:a8:f2:b2:ee:6e:
eb:b6:11:84:c2:72:9f:cc:6b:de:06:a0:ce:6b:52:
4e:df:fb:c1:dd:62:d3:98:7d:76:24:b4:7c:8d:e7:
92:bc:57:94:33:b7:08:a9:e4:8c:5e:17:f5:ac:af:
cc:59:e0:63:55:9c:9f:d8:76:fe:02:36:98:13:b3:
42:e4:6c:59:a2:86:5b:d0:4f:6e:41:7f:90:58:d2:
4e:bd:d6:0b:36:79:a8:0c:e3:3f:aa:6b:1f:a9:75:
22:26:4a:57:6d:cf:f3:78:30:30:13:16:bd:20:d5:
37:e4:71:80:3b:10:7a:6c:24:0b:b7:76:5d:61:22:
37:ff:15:6f:7e:87:8d:52:e1:85:a5:d7:7d:bb:0c:
75:cc:b5:30:94:57:5d:8f:52:08:9a:3e:2c:09:f8:
7a:a4:53:5b:25:fd:6f:0b:ec:6d:e5:0e:8c:4d:6c:
81:0e:78:74:5e:2b:82:9c:87:53:7c:5a:7c:64:af:
f0:e4:e5:9b:76:ca:aa:11:36:ff:c2:24:5f:fe:67:
58:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:6B:A5:69:56:0F:07:73:20:31:82:EA:6C:D5:71:DF:58:15:35:19
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/8CF54170688F11F087F823ECDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.103.0/24
Signature Algorithm: sha256WithRSAEncryption
da:02:60:91:dc:0e:56:e3:f4:76:1a:d1:d2:6c:2a:55:f0:16:
9a:20:f6:9b:b1:f9:38:3f:64:11:63:38:15:9b:92:b8:f5:71:
cb:d5:22:e7:54:be:7c:2f:34:97:8e:fd:5d:e9:10:fa:16:e2:
ea:9d:e7:de:44:23:1a:17:df:15:ab:23:1a:10:1a:23:ea:ee:
66:da:75:6c:00:7e:16:eb:a1:2f:17:24:0b:47:fb:1e:43:66:
eb:b3:ec:0f:0f:9b:89:2c:a4:69:5d:7f:37:6a:00:26:ce:74:
8c:7c:0d:f0:70:83:7e:44:86:39:1b:93:71:13:21:ca:59:57:
61:d6:05:32:ad:02:6d:39:33:bf:6f:19:08:f5:22:46:6a:a3:
3a:94:c3:f8:cf:b1:75:e2:a9:5f:79:43:81:78:7e:68:d2:f4:
78:cf:4e:98:ec:a1:8a:e0:72:1e:9f:aa:0c:a1:bf:74:06:c9:
2d:65:c8:6c:67:b5:29:1e:01:a5:40:fe:c7:de:75:81:c9:02:
b7:83:bb:82:ab:bc:b6:56:b7:2f:48:8d:45:78:7e:9b:e1:25:
54:7c:85:0d:77:22:e1:de:35:95:ff:fc:b6:5b:30:73:e4:21:
5b:f0:77:cf:c6:29:78:84:3c:16:4d:3c:93:27:4f:e7:3b:b3:
6c:61:13:b5
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDKQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNTA3MjQxMzEwMTZaFw0yNjAyMTAxMzEwMTZaMBgxFjAU
BgNVBAMTDTY4ODIzMGJkLWVkZDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDU2rex5hThOk8tR26IqQJWfOVfuYBIHlzWkGy5FK4DKusX7UDOYdptYsSk
s8nMlcUiVXtHW66o8rLubuu2EYTCcp/Ma94GoM5rUk7f+8HdYtOYfXYktHyN55K8
V5Qztwip5IxeF/Wsr8xZ4GNVnJ/Ydv4CNpgTs0LkbFmihlvQT25Bf5BY0k691gs2
eagM4z+qax+pdSImSldtz/N4MDATFr0g1TfkcYA7EHpsJAu3dl1hIjf/FW9+h41S
4YWl1327DHXMtTCUV12PUgiaPiwJ+HqkU1sl/W8L7G3lDoxNbIEOeHReK4Kch1N8
Wnxkr/Dk5Zt2yqoRNv/CJF/+Z1glAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUQWul
aVYPB3MgMYLqbNVx31gVNRkwHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3LzhDRjU0MTcwNjg4RjExRjA4N0Y4MjNFQ0RBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmh2cwDQYJKoZIhvcNAQEL
BQADggEBANoCYJHcDlbj9HYa0dJsKlXwFpog9pux+Tg/ZBFjOBWbkrj1ccvVIudU
vnwvNJeO/V3pEPoW4uqd595EIxoX3xWrIxoQGiPq7mbadWwAfhbroS8XJAtH+x5D
Zuuz7A8Pm4kspGldfzdqACbOdIx8DfBwg35Ehjkbk3ETIcpZV2HWBTKtAm05M79v
GQj1IkZqozqUw/jPsXXiqV95Q4F4fmjS9HjPTpjsoYrgch6fqgyhv3QGyS1lyGxn
tSkeAaVA/sfedYHJAreDu4KrvLZWty9IjUV4fpvhJVR8hQ13IuHeNZX//LZbMHPk
IVvwd8/GKXiEPBZNPJMnT+c7s2xhE7U=
-----END CERTIFICATE-----
Generated at Mon Aug 4 22:21:17 2025 by rpki-client