Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/5AFB0422AA8211F0BFE7C391DAE4EC9C.roa
File: 5AFB0422AA8211F0BFE7C391DAE4EC9C.roa (raw, json)
Hash identifier: /r1ekVmwC/Tq+P7MERvmMsbO7PlUDHYdHIRUOF01hRQ=
Subject key identifier: BA:D9:32:F6:47:84:D5:8B:22:3E:7A:FD:6E:B6:DA:66:4C:54:D1:8C
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0EE5
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/5AFB0422AA8211F0BFE7C391DAE4EC9C.roa
Signing time: Thu 16 Oct 2025 11:22:10 +0000
ROA not before: Thu 16 Oct 2025 11:22:05 +0000
ROA not after: Fri 16 Oct 2026 11:22:05 +0000
asID: 208185
IP address blocks: 102.135.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3813 (0xee5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Oct 16 11:22:05 2025 GMT
Not After : Oct 16 11:22:05 2026 GMT
Subject: CN=68f0d562-fa52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:13:61:7b:3d:f1:23:ce:b9:85:2b:92:52:1b:
d5:57:c1:5a:d4:72:bc:91:0e:87:9d:9e:81:50:a1:
08:66:a4:5d:10:62:07:95:c1:e6:ce:e4:d0:1b:48:
6f:fe:90:3e:4a:cf:7d:07:73:8e:f6:95:f6:b5:ae:
5b:04:ad:fb:de:69:8c:d7:9b:b9:69:fc:6d:95:e2:
2c:0f:47:4a:14:69:12:9f:fd:be:65:23:2e:2a:7e:
83:37:e8:04:4f:c3:3d:ec:bd:e1:df:c3:ab:8f:c8:
49:74:c7:93:9d:da:4e:97:40:fa:77:28:f9:53:64:
49:95:8e:f2:3b:3a:67:48:3d:c1:e7:92:69:5b:75:
53:fa:d9:77:58:c0:b6:a2:22:7e:fb:62:90:8d:4b:
92:80:66:31:21:5c:4d:47:e4:94:37:66:b5:f5:37:
5f:ab:cc:3e:a5:87:11:eb:44:d5:21:af:fe:6c:91:
3c:97:bf:34:70:aa:41:eb:a0:b4:73:9c:98:70:27:
62:d2:67:8f:fe:1d:ef:95:a9:c5:c1:04:02:14:0c:
bb:fa:2e:bc:f5:f5:5d:29:fa:db:80:86:df:2d:81:
01:3b:47:ba:d3:93:48:de:f6:91:13:e0:9e:e5:2e:
0f:fc:31:dd:60:08:95:90:1c:1e:83:41:6f:a3:e3:
b1:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D9:32:F6:47:84:D5:8B:22:3E:7A:FD:6E:B6:DA:66:4C:54:D1:8C
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/5AFB0422AA8211F0BFE7C391DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.50.0/24
Signature Algorithm: sha256WithRSAEncryption
35:05:59:f4:a1:ad:a2:d7:ad:82:2f:cd:6f:c0:8c:55:4e:f4:
19:0b:93:71:04:b6:da:a0:9b:12:8b:51:10:91:8e:eb:35:2c:
30:7d:ae:95:1b:bd:8e:54:b4:ea:dd:2b:43:0e:c5:a4:67:5a:
8a:49:c5:9c:e1:ab:78:31:94:1b:1c:e4:5b:6c:65:79:d0:a5:
23:55:00:24:c9:ad:68:2f:84:6e:90:26:f7:f4:df:90:ff:2e:
9b:b0:48:c5:d9:10:92:26:30:8e:3c:a8:9b:d4:eb:aa:72:08:
be:8f:ea:c8:28:cb:03:43:7a:ef:cf:3d:37:4d:eb:26:c3:89:
6b:2c:c8:0f:2b:b2:27:8e:d3:73:41:e4:48:be:1d:b3:02:58:
12:cb:a0:8d:ce:59:95:be:b1:96:19:ba:ce:dd:fd:c4:93:a4:
53:a0:cc:d4:7a:73:2d:fb:18:6d:a8:3c:ec:80:05:d5:81:9b:
12:b6:97:13:d0:f8:37:01:82:38:2b:40:69:53:74:1b:39:4d:
6f:fa:6d:a5:e2:31:ef:23:1b:aa:c8:80:28:b9:8c:69:41:06:
6d:cc:2b:fd:d0:75:ed:92:5e:48:35:b8:35:03:a8:aa:74:79:
52:62:0e:b0:1b:41:5d:57:ca:6a:f2:3d:24:4e:c5:f0:74:be:
be:94:b2:bb
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDuUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNTEwMTYxMTIyMDVaFw0yNjEwMTYxMTIyMDVaMBgxFjAU
BgNVBAMTDTY4ZjBkNTYyLWZhNTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC0E2F7PfEjzrmFK5JSG9VXwVrUcryRDoednoFQoQhmpF0QYgeVwebO5NAb
SG/+kD5Kz30Hc472lfa1rlsErfveaYzXm7lp/G2V4iwPR0oUaRKf/b5lIy4qfoM3
6ARPwz3sveHfw6uPyEl0x5Od2k6XQPp3KPlTZEmVjvI7OmdIPcHnkmlbdVP62XdY
wLaiIn77YpCNS5KAZjEhXE1H5JQ3ZrX1N1+rzD6lhxHrRNUhr/5skTyXvzRwqkHr
oLRznJhwJ2LSZ4/+He+VqcXBBAIUDLv6Lrz19V0p+tuAht8tgQE7R7rTk0je9pET
4J7lLg/8Md1gCJWQHB6DQW+j47GZAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUutky
9keE1YsiPnr9brbaZkxU0YwwHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3LzVBRkIwNDIyQUE4MjExRjBCRkU3QzM5MURBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmhzIwDQYJKoZIhvcNAQEL
BQADggEBADUFWfShraLXrYIvzW/AjFVO9BkLk3EEttqgmxKLURCRjus1LDB9rpUb
vY5UtOrdK0MOxaRnWopJxZzhq3gxlBsc5FtsZXnQpSNVACTJrWgvhG6QJvf035D/
LpuwSMXZEJImMI48qJvU66pyCL6P6sgoywNDeu/PPTdN6ybDiWssyA8rsieO03NB
5Ei+HbMCWBLLoI3OWZW+sZYZus7d/cSTpFOgzNR6cy37GG2oPOyABdWBmxK2lxPQ
+DcBgjgrQGlTdBs5TW/6baXiMe8jG6rIgCi5jGlBBm3MK/3Qde2SXkg1uDUDqKp0
eVJiDrAbQV1XymryPSROxfB0vr6Usrs=
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:30:17 2025 by rpki-client