Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/608B48BEB55611F0B2E28A9CDAE4EC9C.roa
File: 608B48BEB55611F0B2E28A9CDAE4EC9C.roa (raw, json)
Hash identifier: 6xR9Yw6qiVIfQSJDhytaGImSZ1A3jFhmSl44es/ykHg=
Subject key identifier: E0:3D:6D:1B:B2:43:84:4C:8F:7E:67:88:F7:36:65:FE:DA:85:B7:59
Certificate issuer: /CN=F36F6034AF/serialNumber=C702799EA4BD5DBA3ED3D069A7191B941B5A779A
Certificate serial: 083B
Authority key identifier: C7:02:79:9E:A4:BD:5D:BA:3E:D3:D0:69:A7:19:1B:94:1B:5A:77:9A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/xwJ5nqS9Xbo-09BppxkblBtad5o.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/608B48BEB55611F0B2E28A9CDAE4EC9C.roa
Signing time: Thu 30 Oct 2025 06:05:04 +0000
ROA not before: Thu 30 Oct 2025 06:04:59 +0000
ROA not after: Fri 30 Oct 2026 06:04:59 +0000
asID: 397630
IP address blocks: 196.198.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/xwJ5nqS9Xbo-09BppxkblBtad5o.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/xwJ5nqS9Xbo-09BppxkblBtad5o.mft
rsync://rpki.afrinic.net/repository/afrinic/xwJ5nqS9Xbo-09BppxkblBtad5o.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2107 (0x83b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F6034AF, serialNumber=C702799EA4BD5DBA3ED3D069A7191B941B5A779A
Validity
Not Before: Oct 30 06:04:59 2025 GMT
Not After : Oct 30 06:04:59 2026 GMT
Subject: CN=69030010-9c20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:08:74:17:68:0d:48:88:b8:7e:be:70:0b:a8:
93:55:9b:88:d2:99:1f:96:b5:8f:9c:1b:c0:b4:76:
f1:ca:57:bc:17:4d:40:6c:60:85:b1:fc:f3:77:40:
bd:e5:50:fa:9c:f0:6e:2c:75:75:c9:8b:3d:f2:46:
87:6a:48:e7:6c:ed:8b:8c:31:ff:2b:cb:ab:67:f2:
a0:75:d2:f8:4a:48:6b:b0:57:2b:32:0d:a3:a4:75:
10:30:29:2b:a9:8c:91:a8:9a:73:09:2c:4e:12:bc:
65:6c:56:19:64:79:50:c1:99:6b:e7:11:00:d3:ba:
98:fd:22:3f:df:b9:2f:e6:87:3d:55:04:bc:e8:24:
8b:5d:0d:eb:60:8b:42:f5:04:b5:d6:99:eb:49:ba:
51:7c:6b:e0:3a:e4:a3:6d:89:85:0d:36:83:ea:9e:
14:28:80:55:9d:64:41:bf:50:f1:8d:b7:1f:53:6d:
0e:87:8c:d5:54:79:f6:3b:94:3c:75:4c:f9:35:90:
07:80:4e:94:50:09:be:a3:b5:53:d5:a2:c6:bb:15:
5d:a5:36:77:7f:46:9c:bd:d2:ff:63:61:02:9a:46:
96:5d:fb:9a:0b:01:5c:39:12:ce:52:c4:aa:0c:e1:
14:bb:54:8b:79:41:47:d0:93:01:4f:4a:18:26:bb:
27:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:3D:6D:1B:B2:43:84:4C:8F:7E:67:88:F7:36:65:FE:DA:85:B7:59
X509v3 Authority Key Identifier:
keyid:C7:02:79:9E:A4:BD:5D:BA:3E:D3:D0:69:A7:19:1B:94:1B:5A:77:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/xwJ5nqS9Xbo-09BppxkblBtad5o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xwJ5nqS9Xbo-09BppxkblBtad5o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/608B48BEB55611F0B2E28A9CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.198.134.0/24
Signature Algorithm: sha256WithRSAEncryption
85:90:1a:6e:63:ac:11:94:c0:fc:60:e8:f9:7b:3b:22:59:b2:
94:29:fd:f4:c9:26:df:78:0f:28:18:8d:f0:7a:3d:0c:f6:c4:
7f:2a:f4:dc:96:47:2e:85:a5:73:7e:7e:89:8a:c3:9c:4d:db:
94:6f:ee:4e:7f:08:b9:11:61:3d:2e:bd:0e:82:d2:bf:de:64:
58:49:05:75:ee:5b:e0:62:5b:33:fc:30:78:1e:16:28:9a:93:
c8:ff:a2:3d:c4:e5:15:9f:8e:f1:26:90:ae:35:f8:29:e8:8a:
4b:03:63:b3:4a:01:e0:09:2c:c5:12:b4:eb:11:df:e2:d6:a0:
08:55:10:f6:d4:d6:dc:97:77:98:1d:37:e6:46:5b:88:0d:56:
6a:35:42:b8:09:a8:77:b7:7f:59:32:8b:97:cb:fc:e2:00:c3:
44:8f:f9:1d:f4:c7:9a:53:8e:fc:04:1e:5d:74:0b:f1:39:a3:
74:91:4d:2d:68:e8:5b:6b:a6:41:e2:94:1b:06:16:f0:05:bb:
6e:36:09:aa:9c:29:35:ba:9b:57:ec:69:7c:d4:f9:1f:72:5e:
69:36:a0:83:a7:32:86:40:d6:07:07:72:01:ec:03:15:e4:70:
8c:62:13:3b:b3:54:ad:08:d3:30:82:0d:e5:2b:76:37:b8:5b:
ce:f1:ee:7c
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCDswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RjYwMzRBRjExMC8GA1UEBRMoQzcwMjc5OUVBNEJENURCQTNFRDNEMDY5QTcxOTFC
OTQxQjVBNzc5QTAeFw0yNTEwMzAwNjA0NTlaFw0yNjEwMzAwNjA0NTlaMBgxFjAU
BgNVBAMTDTY5MDMwMDEwLTljMjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDSCHQXaA1IiLh+vnALqJNVm4jSmR+WtY+cG8C0dvHKV7wXTUBsYIWx/PN3
QL3lUPqc8G4sdXXJiz3yRodqSOds7YuMMf8ry6tn8qB10vhKSGuwVysyDaOkdRAw
KSupjJGomnMJLE4SvGVsVhlkeVDBmWvnEQDTupj9Ij/fuS/mhz1VBLzoJItdDetg
i0L1BLXWmetJulF8a+A65KNtiYUNNoPqnhQogFWdZEG/UPGNtx9TbQ6HjNVUefY7
lDx1TPk1kAeATpRQCb6jtVPVosa7FV2lNnd/Rpy90v9jYQKaRpZd+5oLAVw5Es5S
xKoM4RS7VIt5QUfQkwFPShgmuydFAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU4D1t
G7JDhEyPfmeI9zZl/tqFt1kwHwYDVR0jBBgwFoAUxwJ5nqS9Xbo+09BppxkblBta
d5owDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkY2MDM0L0Q5MTY3NThBOTBGQzExRUE5RDgxMzA2RUY4QUVBMjI4L3h3SjVu
cVM5WGJvLTA5QnBweGtibEJ0YWQ1by5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3h3SjVucVM5WGJvLTA5QnBweGtibEJ0YWQ1by5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkY2MDM0L0Q5MTY3NThBOTBGQzExRUE5RDgxMzA2RUY4
QUVBMjI4LzYwOEI0OEJFQjU1NjExRjBCMkUyOEE5Q0RBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADExoYwDQYJKoZIhvcNAQEL
BQADggEBAIWQGm5jrBGUwPxg6Pl7OyJZspQp/fTJJt94DygYjfB6PQz2xH8q9NyW
Ry6FpXN+fomKw5xN25Rv7k5/CLkRYT0uvQ6C0r/eZFhJBXXuW+BiWzP8MHgeFiia
k8j/oj3E5RWfjvEmkK41+CnoiksDY7NKAeAJLMUStOsR3+LWoAhVEPbU1tyXd5gd
N+ZGW4gNVmo1QrgJqHe3f1kyi5fL/OIAw0SP+R30x5pTjvwEHl10C/E5o3SRTS1o
6FtrpkHilBsGFvAFu242CaqcKTW6m1fsaXzU+R9yXmk2oIOnMoZA1gcHcgHsAxXk
cIxiEzuzVK0I0zCCDeUrdje4W87x7nw=
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:37:30 2025 by rpki-client