Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/094FEDD4B55611F08FD11F9CDAE4EC9C.roa
File: 094FEDD4B55611F08FD11F9CDAE4EC9C.roa (raw, json)
Hash identifier: jvqPC+LV3haBj2mis1++y3ICQS3fsxJo9KRlAft0JPY=
Subject key identifier: 2F:82:D0:9D:B5:C8:4A:EF:06:67:BD:B1:97:96:2F:F0:11:47:82:53
Certificate issuer: /CN=F36F6034AF/serialNumber=C702799EA4BD5DBA3ED3D069A7191B941B5A779A
Certificate serial: 0837
Authority key identifier: C7:02:79:9E:A4:BD:5D:BA:3E:D3:D0:69:A7:19:1B:94:1B:5A:77:9A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/xwJ5nqS9Xbo-09BppxkblBtad5o.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/094FEDD4B55611F08FD11F9CDAE4EC9C.roa
Signing time: Thu 30 Oct 2025 06:02:38 +0000
ROA not before: Thu 30 Oct 2025 06:02:29 +0000
ROA not after: Fri 30 Oct 2026 06:02:29 +0000
asID: 54252
IP address blocks: 196.240.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/xwJ5nqS9Xbo-09BppxkblBtad5o.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/xwJ5nqS9Xbo-09BppxkblBtad5o.mft
rsync://rpki.afrinic.net/repository/afrinic/xwJ5nqS9Xbo-09BppxkblBtad5o.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2103 (0x837)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F6034AF, serialNumber=C702799EA4BD5DBA3ED3D069A7191B941B5A779A
Validity
Not Before: Oct 30 06:02:29 2025 GMT
Not After : Oct 30 06:02:29 2026 GMT
Subject: CN=6902ff7e-7e8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:04:04:17:18:be:99:5f:dc:2f:fe:55:3d:d9:
2c:a8:9c:39:cb:08:d6:31:c0:aa:a9:f8:79:1b:a5:
bc:c6:a7:37:68:7f:88:25:b6:d0:f5:eb:b9:1c:63:
69:a1:b2:ee:99:b1:fb:ad:b0:5c:dc:ae:91:7d:c9:
5d:8d:1f:e5:5d:62:2a:fa:9e:0d:8a:61:00:ef:0f:
d0:fe:79:b5:d6:c8:7f:97:ed:40:be:a3:f2:89:bb:
c8:ca:8c:31:0a:3d:76:0a:53:b2:79:14:68:a0:68:
d3:b7:7e:cf:3b:c2:ae:85:3c:56:0f:32:7c:8f:0a:
a5:d6:e7:7f:70:c1:8f:02:04:1d:e5:3d:eb:63:37:
85:c4:d1:c4:03:27:75:34:37:ce:03:b6:e5:16:38:
2e:31:95:c4:e3:39:44:b3:eb:0e:76:7a:a1:87:83:
af:be:12:d3:5c:9d:d1:23:a9:93:52:1c:5a:fd:d8:
ea:01:77:f3:76:1c:5f:cd:98:9b:b0:e4:0e:21:6d:
1b:4c:06:7e:71:79:08:34:c2:b7:7b:84:a9:3e:3a:
77:3d:52:99:99:48:f3:42:c6:c2:a3:0a:52:dd:1e:
3b:64:c4:2c:2b:b8:0c:f0:84:b7:ce:7b:f5:c1:36:
f8:cf:ad:e0:7c:ab:4e:8f:29:70:e7:89:50:55:74:
c7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:82:D0:9D:B5:C8:4A:EF:06:67:BD:B1:97:96:2F:F0:11:47:82:53
X509v3 Authority Key Identifier:
keyid:C7:02:79:9E:A4:BD:5D:BA:3E:D3:D0:69:A7:19:1B:94:1B:5A:77:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/xwJ5nqS9Xbo-09BppxkblBtad5o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xwJ5nqS9Xbo-09BppxkblBtad5o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/094FEDD4B55611F08FD11F9CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.240.194.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:3c:31:58:45:ec:2b:f4:14:81:f9:9c:a4:16:8c:e6:e0:9c:
75:c6:3e:6c:8e:72:a3:da:9a:e8:9f:ba:c6:42:49:5f:ef:20:
67:4e:97:19:3a:53:bf:a7:e1:45:d7:46:9e:05:d6:81:ac:27:
55:82:bb:39:38:4f:4a:40:f7:ee:6c:e9:61:6c:e7:d9:62:17:
ef:cc:90:da:01:9e:3a:37:75:39:f1:38:a9:f0:1a:e1:27:74:
45:d3:80:89:5c:cb:5a:b2:f1:0a:a6:e2:54:27:1f:ba:cf:00:
ae:f1:42:9d:6a:ad:5b:82:9f:41:c7:a5:5f:ea:41:37:54:03:
57:40:4b:b0:94:8b:ca:f8:a5:e9:91:2f:c5:f7:94:f5:96:dd:
ae:08:82:96:87:13:d5:bd:6f:60:1d:8b:a0:c6:de:f8:4d:c9:
f6:b9:14:cb:d1:ea:52:e8:0b:19:83:b7:20:26:96:ef:74:21:
a5:ff:ad:4f:c6:34:7e:e7:ce:e3:50:9f:22:75:37:08:5a:ad:
09:eb:a5:8c:8f:72:f4:06:e1:07:d3:bf:b7:6b:04:36:f5:b5:
8c:a1:b9:51:fa:ab:4f:79:39:41:b7:cb:36:a4:3c:92:0a:95:
2c:78:2b:4d:e3:d9:e6:55:0e:14:31:aa:6b:8f:4f:96:f8:cd:
de:e9:db:70
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCDcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RjYwMzRBRjExMC8GA1UEBRMoQzcwMjc5OUVBNEJENURCQTNFRDNEMDY5QTcxOTFC
OTQxQjVBNzc5QTAeFw0yNTEwMzAwNjAyMjlaFw0yNjEwMzAwNjAyMjlaMBgxFjAU
BgNVBAMTDTY5MDJmZjdlLTdlOGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDFBAQXGL6ZX9wv/lU92SyonDnLCNYxwKqp+HkbpbzGpzdof4glttD167kc
Y2mhsu6ZsfutsFzcrpF9yV2NH+VdYir6ng2KYQDvD9D+ebXWyH+X7UC+o/KJu8jK
jDEKPXYKU7J5FGigaNO3fs87wq6FPFYPMnyPCqXW539wwY8CBB3lPetjN4XE0cQD
J3U0N84DtuUWOC4xlcTjOUSz6w52eqGHg6++EtNcndEjqZNSHFr92OoBd/N2HF/N
mJuw5A4hbRtMBn5xeQg0wrd7hKk+Onc9UpmZSPNCxsKjClLdHjtkxCwruAzwhLfO
e/XBNvjPreB8q06PKXDniVBVdMdfAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUL4LQ
nbXISu8GZ72xl5Yv8BFHglMwHwYDVR0jBBgwFoAUxwJ5nqS9Xbo+09BppxkblBta
d5owDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkY2MDM0L0Q5MTY3NThBOTBGQzExRUE5RDgxMzA2RUY4QUVBMjI4L3h3SjVu
cVM5WGJvLTA5QnBweGtibEJ0YWQ1by5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3h3SjVucVM5WGJvLTA5QnBweGtibEJ0YWQ1by5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkY2MDM0L0Q5MTY3NThBOTBGQzExRUE5RDgxMzA2RUY4
QUVBMjI4LzA5NEZFREQ0QjU1NjExRjA4RkQxMUY5Q0RBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADE8MIwDQYJKoZIhvcNAQEL
BQADggEBAB08MVhF7Cv0FIH5nKQWjObgnHXGPmyOcqPamuifusZCSV/vIGdOlxk6
U7+n4UXXRp4F1oGsJ1WCuzk4T0pA9+5s6WFs59liF+/MkNoBnjo3dTnxOKnwGuEn
dEXTgIlcy1qy8Qqm4lQnH7rPAK7xQp1qrVuCn0HHpV/qQTdUA1dAS7CUi8r4pemR
L8X3lPWW3a4IgpaHE9W9b2Adi6DG3vhNyfa5FMvR6lLoCxmDtyAmlu90IaX/rU/G
NH7nzuNQnyJ1NwharQnrpYyPcvQG4QfTv7drBDb1tYyhuVH6q095OUG3yzakPJIK
lSx4K03j2eZVDhQxqmuPT5b4zd7p23A=
-----END CERTIFICATE-----
Generated at Tue Nov 4 16:34:02 2025 by rpki-client