Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/2E1AF6B8B55611F0BCB8249CDAE4EC9C.roa
File: 2E1AF6B8B55611F0BCB8249CDAE4EC9C.roa (raw, json)
Hash identifier: BLNEGjyDBYxkX0YHPraswO3BVBLrA7gab5y1HJSh2U4=
Subject key identifier: 89:08:B3:6A:D0:BF:B2:C9:FF:02:EF:CB:28:52:A4:D1:EA:1F:2F:6B
Certificate issuer: /CN=F36F6034AF/serialNumber=C702799EA4BD5DBA3ED3D069A7191B941B5A779A
Certificate serial: 0839
Authority key identifier: C7:02:79:9E:A4:BD:5D:BA:3E:D3:D0:69:A7:19:1B:94:1B:5A:77:9A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/xwJ5nqS9Xbo-09BppxkblBtad5o.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/2E1AF6B8B55611F0BCB8249CDAE4EC9C.roa
Signing time: Thu 30 Oct 2025 06:03:40 +0000
ROA not before: Thu 30 Oct 2025 06:03:35 +0000
ROA not after: Fri 30 Oct 2026 06:03:35 +0000
asID: 397630
IP address blocks: 196.197.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/xwJ5nqS9Xbo-09BppxkblBtad5o.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/xwJ5nqS9Xbo-09BppxkblBtad5o.mft
rsync://rpki.afrinic.net/repository/afrinic/xwJ5nqS9Xbo-09BppxkblBtad5o.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2105 (0x839)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F6034AF, serialNumber=C702799EA4BD5DBA3ED3D069A7191B941B5A779A
Validity
Not Before: Oct 30 06:03:35 2025 GMT
Not After : Oct 30 06:03:35 2026 GMT
Subject: CN=6902ffbc-7c5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8f:33:1b:28:91:90:af:5f:bf:7f:7c:01:1c:
40:c8:c6:a2:af:17:d1:9b:e1:32:30:84:5b:4f:20:
ea:27:51:3a:44:04:9d:41:18:85:24:ce:1f:4b:6b:
f3:2d:c2:1d:9b:44:04:35:8a:75:f4:91:56:e3:bc:
b0:87:87:23:7d:5b:c0:9e:08:7a:28:81:b2:c1:99:
90:5e:96:5c:67:1d:66:0d:8f:52:1d:fd:a7:dc:92:
19:5a:d3:e5:94:48:79:19:06:5d:43:6b:82:6e:06:
a2:6b:c6:71:09:ef:e2:37:82:95:1a:fa:5a:65:1a:
ad:7d:4b:8e:ea:4b:3a:5c:8b:cc:21:02:50:4a:bc:
25:cb:cd:c9:dd:9f:da:66:3e:57:a4:69:90:b8:22:
4e:12:e6:69:94:21:8a:74:f3:42:68:f8:c3:e0:74:
ce:f7:61:5f:58:74:b3:ec:8b:99:04:84:5d:c9:5f:
c8:2d:f3:1a:69:69:ad:04:b3:bc:f5:47:9d:f4:ba:
70:fc:ae:17:15:39:ca:ca:b9:c2:77:db:5a:48:6e:
c5:db:95:b5:36:01:a7:19:d9:7c:c9:b9:3c:00:b7:
5d:86:89:34:cc:25:b5:cb:44:12:7e:64:ab:d7:39:
65:94:c4:d6:ce:b5:71:b5:0f:0b:96:b5:50:4d:b7:
0a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:08:B3:6A:D0:BF:B2:C9:FF:02:EF:CB:28:52:A4:D1:EA:1F:2F:6B
X509v3 Authority Key Identifier:
keyid:C7:02:79:9E:A4:BD:5D:BA:3E:D3:D0:69:A7:19:1B:94:1B:5A:77:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/xwJ5nqS9Xbo-09BppxkblBtad5o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xwJ5nqS9Xbo-09BppxkblBtad5o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/2E1AF6B8B55611F0BCB8249CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.197.134.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:c0:fe:29:2c:d1:a9:ed:29:63:49:72:25:af:be:64:99:f6:
0e:07:91:13:3e:0f:f2:86:42:47:32:52:02:dd:ab:3d:82:4e:
70:9e:d9:25:8d:f7:e8:b9:1f:dc:d0:a7:92:ea:5b:4b:55:e4:
e2:c5:88:08:15:9d:98:54:c6:e2:c6:49:68:de:2e:19:fc:b4:
8b:d3:b1:85:df:c7:b6:cd:13:c1:15:ea:c9:fd:5f:33:aa:e7:
12:bc:bb:70:82:e9:c0:aa:06:f3:2a:38:32:c5:97:86:40:d5:
ad:3e:9f:8b:6f:51:14:48:2e:9b:9b:73:f1:6a:2e:78:5b:1d:
79:c2:15:63:5f:86:8d:80:c6:10:3a:12:3c:b5:db:01:68:85:
ab:99:32:d1:b4:39:f4:92:74:57:cb:75:a3:57:14:a7:76:f0:
11:19:08:b5:50:fb:81:49:70:5f:a7:af:1c:4b:b4:8f:d5:22:
06:4e:51:9b:6e:5d:c1:14:a5:1e:aa:3b:83:6b:cb:88:e5:3a:
6a:c8:58:20:f7:f9:34:88:aa:67:45:4f:86:26:aa:53:72:5d:
b8:88:67:96:7c:23:dc:d1:7f:02:17:76:e7:e6:59:34:a3:35:
4e:f8:1f:81:8a:f2:5e:49:8d:21:12:5b:d7:6d:a0:84:8a:54:
c2:f6:31:d7
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCDkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RjYwMzRBRjExMC8GA1UEBRMoQzcwMjc5OUVBNEJENURCQTNFRDNEMDY5QTcxOTFC
OTQxQjVBNzc5QTAeFw0yNTEwMzAwNjAzMzVaFw0yNjEwMzAwNjAzMzVaMBgxFjAU
BgNVBAMTDTY5MDJmZmJjLTdjNWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCijzMbKJGQr1+/f3wBHEDIxqKvF9Gb4TIwhFtPIOonUTpEBJ1BGIUkzh9L
a/Mtwh2bRAQ1inX0kVbjvLCHhyN9W8CeCHoogbLBmZBellxnHWYNj1Id/afckhla
0+WUSHkZBl1Da4JuBqJrxnEJ7+I3gpUa+lplGq19S47qSzpci8whAlBKvCXLzcnd
n9pmPlekaZC4Ik4S5mmUIYp080Jo+MPgdM73YV9YdLPsi5kEhF3JX8gt8xppaa0E
s7z1R530unD8rhcVOcrKucJ321pIbsXblbU2AacZ2XzJuTwAt12GiTTMJbXLRBJ+
ZKvXOWWUxNbOtXG1DwuWtVBNtwrnAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUiQiz
atC/ssn/Au/LKFKk0eofL2swHwYDVR0jBBgwFoAUxwJ5nqS9Xbo+09BppxkblBta
d5owDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkY2MDM0L0Q5MTY3NThBOTBGQzExRUE5RDgxMzA2RUY4QUVBMjI4L3h3SjVu
cVM5WGJvLTA5QnBweGtibEJ0YWQ1by5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3h3SjVucVM5WGJvLTA5QnBweGtibEJ0YWQ1by5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkY2MDM0L0Q5MTY3NThBOTBGQzExRUE5RDgxMzA2RUY4
QUVBMjI4LzJFMUFGNkI4QjU1NjExRjBCQ0I4MjQ5Q0RBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADExYYwDQYJKoZIhvcNAQEL
BQADggEBAIzA/iks0antKWNJciWvvmSZ9g4HkRM+D/KGQkcyUgLdqz2CTnCe2SWN
9+i5H9zQp5LqW0tV5OLFiAgVnZhUxuLGSWjeLhn8tIvTsYXfx7bNE8EV6sn9XzOq
5xK8u3CC6cCqBvMqODLFl4ZA1a0+n4tvURRILpubc/FqLnhbHXnCFWNfho2AxhA6
Ejy12wFohauZMtG0OfSSdFfLdaNXFKd28BEZCLVQ+4FJcF+nrxxLtI/VIgZOUZtu
XcEUpR6qO4Nry4jlOmrIWCD3+TSIqmdFT4YmqlNyXbiIZ5Z8I9zRfwIXdufmWTSj
NU74H4GK8l5JjSESW9dtoISKVML2Mdc=
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:37:53 2025 by rpki-client