Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/57C8C81AA52E11F0BCBAD0C6DAE4EC9C.roa
File: 57C8C81AA52E11F0BCBAD0C6DAE4EC9C.roa (raw, json)
Hash identifier: xpxNOhGIS7uGPtdFr4cDQE4I+9YmaGpijQNdzWgiVBg=
Subject key identifier: 75:3C:8B:04:92:26:BA:16:75:18:29:2C:F7:0B:F1:A8:9C:D9:AC:BE
Certificate issuer: /CN=F362C18CAF/serialNumber=63E0BB6B3433CD5D71A42B0169BDB01E20E4557F
Certificate serial: 06B5
Authority key identifier: 63:E0:BB:6B:34:33:CD:5D:71:A4:2B:01:69:BD:B0:1E:20:E4:55:7F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Y-C7azQzzV1xpCsBab2wHiDkVX8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/57C8C81AA52E11F0BCBAD0C6DAE4EC9C.roa
Signing time: Thu 09 Oct 2025 16:38:11 +0000
ROA not before: Thu 09 Oct 2025 16:38:05 +0000
ROA not after: Fri 09 Jan 2026 16:38:05 +0000
asID: 209854
IP address blocks: 102.218.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/Y-C7azQzzV1xpCsBab2wHiDkVX8.crl
rsync://rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/Y-C7azQzzV1xpCsBab2wHiDkVX8.mft
rsync://rpki.afrinic.net/repository/afrinic/Y-C7azQzzV1xpCsBab2wHiDkVX8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1717 (0x6b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362C18CAF, serialNumber=63E0BB6B3433CD5D71A42B0169BDB01E20E4557F
Validity
Not Before: Oct 9 16:38:05 2025 GMT
Not After : Jan 9 16:38:05 2026 GMT
Subject: CN=68e7e4f3-cb51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:85:9b:7d:4c:94:a0:69:78:e0:7d:0f:d4:a6:
10:c1:2a:be:9e:3b:1c:e4:23:4c:47:97:19:a3:79:
aa:18:fa:21:25:e5:30:f0:98:b2:ad:1b:63:c1:0f:
92:c0:b7:98:49:39:78:34:cd:3c:bc:4a:09:59:85:
e4:7a:f3:dc:fe:c7:58:49:43:61:6d:a1:a5:4f:28:
ed:e1:c7:b9:14:c7:c1:a6:e1:ac:90:5b:37:bb:81:
ad:6c:a0:66:07:69:e5:f8:d7:10:4b:61:78:06:f5:
62:a6:94:cf:1c:6d:b8:4f:0f:9a:51:95:5c:7b:9c:
b0:e5:27:42:cc:d4:e0:6f:93:04:61:16:5a:84:01:
03:01:46:4f:d9:83:04:f4:8a:12:04:7a:dd:01:46:
13:c2:3a:72:ef:fd:bf:5c:e2:78:6d:ac:2d:eb:47:
e3:5b:8b:37:c1:fb:0a:b6:c9:5b:1a:35:1c:1d:01:
5c:70:37:53:7b:bd:55:ab:9c:87:ab:3c:12:f0:77:
13:54:f3:c3:bd:bf:4e:d9:be:7e:12:bd:13:b8:5a:
92:b0:33:8f:a0:9b:71:b6:05:36:40:df:79:97:55:
bd:08:80:76:72:c9:1c:76:24:35:2e:28:68:ea:7a:
ae:10:07:87:cb:cc:6e:03:58:a5:cd:14:c6:8d:c5:
e1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:3C:8B:04:92:26:BA:16:75:18:29:2C:F7:0B:F1:A8:9C:D9:AC:BE
X509v3 Authority Key Identifier:
keyid:63:E0:BB:6B:34:33:CD:5D:71:A4:2B:01:69:BD:B0:1E:20:E4:55:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/Y-C7azQzzV1xpCsBab2wHiDkVX8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Y-C7azQzzV1xpCsBab2wHiDkVX8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/57C8C81AA52E11F0BCBAD0C6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.218.100.0/24
Signature Algorithm: sha256WithRSAEncryption
58:5c:5c:7c:bc:6b:92:c7:9b:cb:f4:28:7e:53:60:90:91:3a:
fe:36:77:f8:7a:9e:14:e1:a7:a9:56:8c:6f:e1:7e:e7:97:8d:
0f:aa:8b:3c:b5:7c:ee:28:c7:9e:4b:33:da:00:0d:47:37:0c:
90:30:1a:e4:c3:aa:12:6f:8a:80:30:2f:de:71:39:93:50:e8:
cc:61:13:bc:60:ab:78:01:c1:96:12:07:5e:e9:57:31:f5:33:
3a:c2:13:05:1a:d2:a8:97:6e:e7:2b:bd:e4:43:7d:29:18:ba:
25:98:a1:7f:74:be:8c:4b:ca:b1:f1:3c:3b:8d:f3:3c:1c:ca:
6b:9b:12:29:97:6e:36:89:4a:42:3a:03:55:58:4f:4f:1a:0d:
b2:05:47:5b:72:ac:e3:4c:56:f6:7c:bf:42:ec:e0:db:29:ba:
dc:34:3d:cf:59:c6:46:d5:ea:08:a3:be:b2:07:24:57:ae:4c:
21:b0:1e:57:81:d2:e0:1e:a9:87:bf:d5:bc:35:4c:1e:b9:e9:
df:60:21:67:08:5a:60:27:30:ac:5e:7b:28:28:29:57:70:d8:
9d:27:47:cb:d9:69:e3:e9:98:db:c7:fd:33:eb:0e:67:6b:d1:
f1:e9:a8:bb:e6:cc:23:96:f3:90:b0:ce:43:fa:6c:3a:93:91:
d3:b2:65:38
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBrUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MkMxOENBRjExMC8GA1UEBRMoNjNFMEJCNkIzNDMzQ0Q1RDcxQTQyQjAxNjlCREIw
MUUyMEU0NTU3RjAeFw0yNTEwMDkxNjM4MDVaFw0yNjAxMDkxNjM4MDVaMBgxFjAU
BgNVBAMTDTY4ZTdlNGYzLWNiNTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCvhZt9TJSgaXjgfQ/UphDBKr6eOxzkI0xHlxmjeaoY+iEl5TDwmLKtG2PB
D5LAt5hJOXg0zTy8SglZheR689z+x1hJQ2FtoaVPKO3hx7kUx8Gm4ayQWze7ga1s
oGYHaeX41xBLYXgG9WKmlM8cbbhPD5pRlVx7nLDlJ0LM1OBvkwRhFlqEAQMBRk/Z
gwT0ihIEet0BRhPCOnLv/b9c4nhtrC3rR+NbizfB+wq2yVsaNRwdAVxwN1N7vVWr
nIerPBLwdxNU88O9v07Zvn4SvRO4WpKwM4+gm3G2BTZA33mXVb0IgHZyyRx2JDUu
KGjqeq4QB4fLzG4DWKXNFMaNxeHTAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUdTyL
BJImuhZ1GCks9wvxqJzZrL4wHwYDVR0jBBgwFoAUY+C7azQzzV1xpCsBab2wHiDk
VX8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjJDMThDLzQ1ODgzMjkwQUJEMTExRUJCMUE2NzE1RUY4QUVBMjI4L1ktQzdh
elF6elYxeHBDc0JhYjJ3SGlEa1ZYOC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1ktQzdhelF6elYxeHBDc0JhYjJ3SGlEa1ZYOC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjJDMThDLzQ1ODgzMjkwQUJEMTExRUJCMUE2NzE1RUY4
QUVBMjI4LzU3QzhDODFBQTUyRTExRjBCQ0JBRDBDNkRBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABm2mQwDQYJKoZIhvcNAQEL
BQADggEBAFhcXHy8a5LHm8v0KH5TYJCROv42d/h6nhThp6lWjG/hfueXjQ+qizy1
fO4ox55LM9oADUc3DJAwGuTDqhJvioAwL95xOZNQ6MxhE7xgq3gBwZYSB17pVzH1
MzrCEwUa0qiXbucrveRDfSkYuiWYoX90voxLyrHxPDuN8zwcymubEimXbjaJSkI6
A1VYT08aDbIFR1tyrONMVvZ8v0Ls4Nsputw0Pc9ZxkbV6gijvrIHJFeuTCGwHleB
0uAeqYe/1bw1TB656d9gIWcIWmAnMKxeeygoKVdw2J0nR8vZaePpmNvH/TPrDmdr
0fHpqLvmzCOW85CwzkP6bDqTkdOyZTg=
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:58:19 2025 by rpki-client