Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/841C22B4B00411F0A9FE73B7DAE4EC9C.roa
File: 841C22B4B00411F0A9FE73B7DAE4EC9C.roa (raw, json)
Hash identifier: GSC1m8ARGt8nIiZv3BE0yaOUR9d3Uavon8SuEFtYD2E=
Subject key identifier: 63:78:A7:9E:85:9A:B2:43:99:E0:F9:9D:C0:F3:C8:33:EF:3E:A2:37
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 164C
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/841C22B4B00411F0A9FE73B7DAE4EC9C.roa
Signing time: Thu 23 Oct 2025 11:36:29 +0000
ROA not before: Thu 23 Oct 2025 11:36:25 +0000
ROA not after: Sat 23 Oct 2027 11:36:25 +0000
asID: 5065
IP address blocks: 102.165.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5708 (0x164c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Oct 23 11:36:25 2025 GMT
Not After : Oct 23 11:36:25 2027 GMT
Subject: CN=68fa133d-2e23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:bb:7c:34:86:71:78:11:5c:82:95:d8:ea:6b:
c3:b6:e6:e8:3e:90:d3:8c:6b:55:0f:2a:e5:0b:2f:
f1:5d:c3:0c:e9:ac:75:3e:c5:f5:04:06:33:25:05:
b9:ab:49:b6:0f:7c:21:b9:ba:2d:9e:aa:1f:8e:a8:
ac:b9:82:92:28:3c:ba:f3:b1:6b:ab:9e:9d:61:0a:
a1:e3:f3:98:00:3c:11:7d:bf:02:39:98:fd:f4:23:
83:51:f3:5f:9d:4f:07:e2:24:7d:49:31:4e:c5:99:
08:7b:4d:9d:27:c8:2b:c8:62:f8:74:b5:bd:42:e2:
46:03:d3:eb:41:85:9b:e8:05:f4:44:c3:8b:60:d2:
e0:55:2c:d9:5f:d4:31:29:17:3b:4c:f3:de:51:67:
9c:f6:0a:38:62:15:f5:64:bf:3c:34:df:2f:2c:80:
9b:96:0f:7d:54:ce:a6:65:04:a7:5d:da:1d:38:ef:
a1:54:85:51:49:2e:54:54:dc:67:2b:a9:5a:9d:34:
0c:83:ee:22:d0:5a:ad:d3:b8:9b:8b:5b:2b:5a:99:
75:d5:ca:31:0c:2f:55:50:d9:17:a5:ff:f4:4a:60:
c3:e6:46:14:84:fc:3c:f9:c7:e6:12:4c:70:4f:ae:
a0:14:b5:b5:33:c0:90:cb:7a:f9:45:ea:19:77:a3:
1d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:78:A7:9E:85:9A:B2:43:99:E0:F9:9D:C0:F3:C8:33:EF:3E:A2:37
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/841C22B4B00411F0A9FE73B7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.57.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:a3:87:34:12:c6:38:a1:9b:11:6d:a2:25:a4:b3:56:ef:14:
7a:0f:71:16:05:35:d3:1d:b6:19:5f:48:6f:07:74:20:f9:1e:
53:3e:b6:ce:b0:63:13:4e:1f:c1:95:b4:0e:ab:33:0f:06:64:
44:df:d9:98:7e:e5:d2:41:62:ba:28:ef:04:45:28:25:cf:3a:
4e:3a:c4:5c:a5:49:8e:77:09:c1:fe:a2:b7:f2:e5:bc:d0:98:
dd:9e:6a:bd:bd:67:7c:ae:46:8a:53:0c:7b:e4:a6:22:c7:5b:
89:4e:62:0c:da:b2:17:9a:50:66:35:64:5c:d3:a8:7f:ec:fa:
2e:2f:88:05:08:3e:be:86:2a:47:22:e3:2f:d2:96:8e:4b:20:
61:26:11:e1:f2:54:b4:95:c6:18:81:47:05:ea:47:83:79:c8:
5e:2d:bb:f8:a7:38:c4:6c:f2:c3:1f:85:00:e8:eb:55:1d:09:
61:cb:80:ce:e5:dd:5b:41:8e:e2:47:63:13:1c:2c:a6:2a:49:
85:2f:34:db:07:fa:42:ff:62:b4:65:82:52:b4:50:5a:96:65:
f3:5c:59:dc:a9:b3:24:1f:d9:84:c6:5d:a8:12:d3:18:5d:56:
52:a0:74:63:aa:13:bf:8c:46:a1:9d:69:1d:ee:1f:40:ce:4a:
8e:08:2a:4d
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICFkwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yNTEwMjMxMTM2MjVaFw0yNzEwMjMxMTM2MjVaMBgxFjAU
BgNVBAMTDTY4ZmExMzNkLTJlMjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDKu3w0hnF4EVyCldjqa8O25ug+kNOMa1UPKuULL/FdwwzprHU+xfUEBjMl
BbmrSbYPfCG5ui2eqh+OqKy5gpIoPLrzsWurnp1hCqHj85gAPBF9vwI5mP30I4NR
81+dTwfiJH1JMU7FmQh7TZ0nyCvIYvh0tb1C4kYD0+tBhZvoBfREw4tg0uBVLNlf
1DEpFztM895RZ5z2CjhiFfVkvzw03y8sgJuWD31UzqZlBKdd2h0476FUhVFJLlRU
3GcrqVqdNAyD7iLQWq3TuJuLWytamXXVyjEML1VQ2Rel//RKYMPmRhSE/Dz5x+YS
THBPrqAUtbUzwJDLevlF6hl3ox2xAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUY3in
noWaskOZ4PmdwPPIM+8+ojcwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4Lzg0MUMyMkI0QjAwNDExRjBBOUZFNzNCN0RBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmpTkwDQYJKoZIhvcNAQEL
BQADggEBAEqjhzQSxjihmxFtoiWks1bvFHoPcRYFNdMdthlfSG8HdCD5HlM+ts6w
YxNOH8GVtA6rMw8GZETf2Zh+5dJBYroo7wRFKCXPOk46xFylSY53CcH+orfy5bzQ
mN2ear29Z3yuRopTDHvkpiLHW4lOYgzasheaUGY1ZFzTqH/s+i4viAUIPr6GKkci
4y/Slo5LIGEmEeHyVLSVxhiBRwXqR4N5yF4tu/inOMRs8sMfhQDo61UdCWHLgM7l
3VtBjuJHYxMcLKYqSYUvNNsH+kL/YrRlglK0UFqWZfNcWdypsyQf2YTGXagS0xhd
VlKgdGOqE7+MRqGdaR3uH0DOSo4IKk0=
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:58:21 2025 by rpki-client