Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/1CB4AD46B54D11F0AE8DE1DFDAE4EC9C.roa
File: 1CB4AD46B54D11F0AE8DE1DFDAE4EC9C.roa (raw, json)
Hash identifier: GpBCPBpYP7jSKCmZZyQgNpO5GbazBb3Ixsp5RwZj6vM=
Subject key identifier: E0:55:F7:9A:7A:97:38:D0:C9:52:FE:96:6D:B7:93:7B:ED:7A:DC:9F
Certificate issuer: /CN=F36F6034AF/serialNumber=C702799EA4BD5DBA3ED3D069A7191B941B5A779A
Certificate serial: 082C
Authority key identifier: C7:02:79:9E:A4:BD:5D:BA:3E:D3:D0:69:A7:19:1B:94:1B:5A:77:9A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/xwJ5nqS9Xbo-09BppxkblBtad5o.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/1CB4AD46B54D11F0AE8DE1DFDAE4EC9C.roa
Signing time: Thu 30 Oct 2025 04:58:45 +0000
ROA not before: Thu 30 Oct 2025 04:58:38 +0000
ROA not after: Sat 30 Oct 2027 04:58:38 +0000
asID: 64267
IP address blocks: 196.240.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/xwJ5nqS9Xbo-09BppxkblBtad5o.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/xwJ5nqS9Xbo-09BppxkblBtad5o.mft
rsync://rpki.afrinic.net/repository/afrinic/xwJ5nqS9Xbo-09BppxkblBtad5o.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2092 (0x82c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F6034AF, serialNumber=C702799EA4BD5DBA3ED3D069A7191B941B5A779A
Validity
Not Before: Oct 30 04:58:38 2025 GMT
Not After : Oct 30 04:58:38 2027 GMT
Subject: CN=6902f085-45c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7e:9d:88:4e:50:50:5d:f5:c8:d6:32:2b:a6:
c3:e8:bf:96:a1:14:8b:75:6a:87:b9:f4:b4:96:01:
71:12:45:01:f3:45:d9:ce:d8:4e:13:bf:17:0e:55:
02:d2:8c:4b:b5:3e:88:d4:ce:8c:61:cb:65:30:7e:
f1:db:3f:68:5d:41:91:e9:ba:4b:c6:7f:be:32:bc:
5d:f2:c5:cd:08:6d:4f:27:79:b1:c3:40:eb:97:01:
ec:44:fc:f3:4f:e3:fc:ff:a1:79:e8:28:78:0b:90:
4f:75:a5:28:45:65:d5:14:fd:26:6b:a3:e6:53:f3:
ab:70:dc:ba:f4:73:a9:da:e0:6f:52:c1:6b:56:73:
b4:34:a6:12:1e:68:b7:73:f5:45:ba:b3:df:33:86:
d0:00:90:e8:88:25:fe:94:fd:f1:d5:b8:dc:58:59:
44:a2:69:1d:a9:10:0a:a3:f9:5d:38:5d:6f:cb:1e:
47:26:d5:67:b3:6e:9f:e4:2f:72:98:69:95:cf:cb:
99:45:8f:8e:c2:c1:60:75:69:c9:9d:94:84:b8:f1:
df:d3:24:36:1e:b0:5e:d4:c2:5a:c6:24:ed:cb:28:
77:b7:91:ce:2b:b4:2f:22:86:a5:2d:ae:f4:7c:b1:
cd:ef:16:17:f0:8f:0b:a4:71:13:62:04:10:66:5e:
47:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:55:F7:9A:7A:97:38:D0:C9:52:FE:96:6D:B7:93:7B:ED:7A:DC:9F
X509v3 Authority Key Identifier:
keyid:C7:02:79:9E:A4:BD:5D:BA:3E:D3:D0:69:A7:19:1B:94:1B:5A:77:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/xwJ5nqS9Xbo-09BppxkblBtad5o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xwJ5nqS9Xbo-09BppxkblBtad5o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/1CB4AD46B54D11F0AE8DE1DFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.240.108.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:0a:70:18:75:e7:34:4f:92:de:f2:fc:67:f2:b0:a1:8f:54:
f4:7e:c4:54:88:63:05:d5:01:37:93:86:b5:51:31:b9:7b:7e:
c5:7c:8b:3c:0f:b0:11:87:35:ad:67:7d:3f:63:b3:99:eb:43:
2f:a1:e6:04:81:78:e6:82:2a:90:13:55:6c:fd:1c:1d:a6:f4:
3c:63:f4:f4:47:be:a7:2c:b6:98:61:c9:5a:a2:a7:1f:2b:bd:
29:0d:1e:58:11:7b:1c:e1:29:62:89:6b:93:1c:49:f6:e2:c9:
d0:3b:ef:79:8f:1d:ff:7b:ad:de:c8:14:02:0b:94:d9:80:07:
4d:52:3d:b8:ca:06:20:26:89:40:fa:26:32:11:fd:ec:94:97:
4e:f1:24:72:49:6e:8f:01:4e:f9:2d:c9:71:fd:44:48:58:d5:
89:08:5b:30:6e:26:a0:1d:d7:84:2a:9e:49:7d:a6:5a:7b:5d:
98:39:4f:69:cd:c2:93:56:6d:a3:43:b5:42:45:2b:8d:4b:ad:
47:c0:b3:60:e5:2e:ed:6a:56:23:1b:9a:f6:b5:80:ac:b1:2b:
24:36:ab:1c:00:a8:51:86:0f:ea:a0:2a:d8:b2:f1:4f:88:94:
7f:b4:a5:0c:6b:a0:e3:a9:2f:2e:fa:1c:d5:86:2f:b4:5c:37:
a4:a0:36:da
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCCwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RjYwMzRBRjExMC8GA1UEBRMoQzcwMjc5OUVBNEJENURCQTNFRDNEMDY5QTcxOTFC
OTQxQjVBNzc5QTAeFw0yNTEwMzAwNDU4MzhaFw0yNzEwMzAwNDU4MzhaMBgxFjAU
BgNVBAMTDTY5MDJmMDg1LTQ1YzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC2fp2ITlBQXfXI1jIrpsPov5ahFIt1aoe59LSWAXESRQHzRdnO2E4TvxcO
VQLSjEu1PojUzoxhy2UwfvHbP2hdQZHpukvGf74yvF3yxc0IbU8nebHDQOuXAexE
/PNP4/z/oXnoKHgLkE91pShFZdUU/SZro+ZT86tw3Lr0c6na4G9SwWtWc7Q0phIe
aLdz9UW6s98zhtAAkOiIJf6U/fHVuNxYWUSiaR2pEAqj+V04XW/LHkcm1Wezbp/k
L3KYaZXPy5lFj47CwWB1acmdlIS48d/TJDYesF7UwlrGJO3LKHe3kc4rtC8ihqUt
rvR8sc3vFhfwjwukcRNiBBBmXkffAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU4FX3
mnqXONDJUv6WbbeTe+163J8wHwYDVR0jBBgwFoAUxwJ5nqS9Xbo+09BppxkblBta
d5owDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkY2MDM0L0Q5MTY3NThBOTBGQzExRUE5RDgxMzA2RUY4QUVBMjI4L3h3SjVu
cVM5WGJvLTA5QnBweGtibEJ0YWQ1by5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3h3SjVucVM5WGJvLTA5QnBweGtibEJ0YWQ1by5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkY2MDM0L0Q5MTY3NThBOTBGQzExRUE5RDgxMzA2RUY4
QUVBMjI4LzFDQjRBRDQ2QjU0RDExRjBBRThERTFERkRBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADE8GwwDQYJKoZIhvcNAQEL
BQADggEBAE8KcBh15zRPkt7y/GfysKGPVPR+xFSIYwXVATeThrVRMbl7fsV8izwP
sBGHNa1nfT9js5nrQy+h5gSBeOaCKpATVWz9HB2m9Dxj9PRHvqcstphhyVqipx8r
vSkNHlgRexzhKWKJa5McSfbiydA773mPHf97rd7IFAILlNmAB01SPbjKBiAmiUD6
JjIR/eyUl07xJHJJbo8BTvktyXH9REhY1YkIWzBuJqAd14Qqnkl9plp7XZg5T2nN
wpNWbaNDtUJFK41LrUfAs2DlLu1qViMbmva1gKyxKyQ2qxwAqFGGD+qgKtiy8U+I
lH+0pQxroOOpLy76HNWGL7RcN6SgNto=
-----END CERTIFICATE-----
Generated at Tue Nov 4 08:01:00 2025 by rpki-client