Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36505B2/541804E4347111EF9A875180762E951A/B4706624834911F0B13243B3DAE4EC9C.roa
File: B4706624834911F0B13243B3DAE4EC9C.roa (raw, json)
Hash identifier: bO4CRsQGJ9Fo2uTsOo+M4VqSaZfI6VGKrX/RQl3alaE=
Subject key identifier: 88:B8:3B:16:99:56:0B:04:91:90:B7:34:66:7B:4D:4A:DB:86:D4:6E
Certificate issuer: /CN=F36505B2AF/serialNumber=16296889BFF031BF7FDE7367E2DEE93CB0080283
Certificate serial: 01C6
Authority key identifier: 16:29:68:89:BF:F0:31:BF:7F:DE:73:67:E2:DE:E9:3C:B0:08:02:83
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Filoib_wMb9_3nNn4t7pPLAIAoM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36505B2/541804E4347111EF9A875180762E951A/B4706624834911F0B13243B3DAE4EC9C.roa
Signing time: Wed 27 Aug 2025 13:28:23 +0000
ROA not before: Wed 27 Aug 2025 13:28:18 +0000
ROA not after: Fri 31 Aug 2035 13:28:18 +0000
asID: 36877
IP address blocks: 41.85.204.0/22 maxlen: 23
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36505B2/541804E4347111EF9A875180762E951A/Filoib_wMb9_3nNn4t7pPLAIAoM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36505B2/541804E4347111EF9A875180762E951A/Filoib_wMb9_3nNn4t7pPLAIAoM.mft
rsync://rpki.afrinic.net/repository/afrinic/Filoib_wMb9_3nNn4t7pPLAIAoM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 454 (0x1c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36505B2AF, serialNumber=16296889BFF031BF7FDE7367E2DEE93CB0080283
Validity
Not Before: Aug 27 13:28:18 2025 GMT
Not After : Aug 31 13:28:18 2035 GMT
Subject: CN=68af07f7-8261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b8:2e:f9:0a:d5:5f:67:0a:c8:ad:57:9a:87:
94:be:65:3e:0b:e8:d5:cb:62:19:82:c6:5e:67:71:
a2:b2:99:33:25:cd:98:63:b7:47:a4:af:16:9b:fa:
90:46:39:2f:dd:ac:0a:7b:90:05:6e:5f:f6:cd:aa:
3b:cb:04:71:33:da:33:0b:ea:e8:e2:92:1d:46:a8:
03:22:6f:df:bc:1e:fd:5b:07:cc:7f:46:c4:24:64:
68:cb:ed:c9:89:b4:ae:a0:b3:7f:06:8e:bf:6f:cd:
f5:c5:9f:2b:be:68:41:9f:60:a5:48:ad:93:13:85:
29:e4:95:02:0d:b7:0b:c1:12:3b:ad:fc:cd:b6:f3:
04:6a:1d:ce:cf:3f:2e:7e:e5:2a:59:93:cb:d8:a1:
11:ed:29:68:6b:3b:bb:e6:2e:99:25:28:fc:0e:c8:
60:55:d4:fa:7f:4f:04:a5:e8:92:18:8c:8e:65:52:
38:2b:2e:ac:2b:6f:b3:73:96:2b:49:a9:07:c2:a0:
1c:32:92:5e:d2:77:f5:2f:71:d0:79:06:28:f7:90:
df:75:0f:f5:d3:34:dd:d1:e5:3a:eb:ac:9d:5c:37:
1d:14:bf:d4:ae:2e:62:da:cc:4e:2c:4e:4b:33:9a:
26:38:ed:7b:eb:c0:80:3c:55:4e:02:f0:ca:1d:d9:
32:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:B8:3B:16:99:56:0B:04:91:90:B7:34:66:7B:4D:4A:DB:86:D4:6E
X509v3 Authority Key Identifier:
keyid:16:29:68:89:BF:F0:31:BF:7F:DE:73:67:E2:DE:E9:3C:B0:08:02:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36505B2/541804E4347111EF9A875180762E951A/Filoib_wMb9_3nNn4t7pPLAIAoM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Filoib_wMb9_3nNn4t7pPLAIAoM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36505B2/541804E4347111EF9A875180762E951A/B4706624834911F0B13243B3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.85.204.0/22
Signature Algorithm: sha256WithRSAEncryption
19:8c:af:17:66:3d:15:9e:2f:b7:09:7b:0c:61:c4:52:19:21:
a2:13:f5:64:0c:b8:9a:f5:ee:2c:88:bc:f3:2b:09:56:2e:a0:
bf:63:c5:85:03:91:5a:2e:fc:08:2e:81:8e:af:96:88:65:98:
ed:6d:ef:49:fc:d7:00:a3:ce:9f:fb:9a:d9:b7:c9:51:e7:c8:
05:00:61:86:0d:20:b1:e3:91:0f:67:64:a3:ac:4c:d8:bc:71:
fd:37:82:d0:bc:cd:c5:1d:5e:6f:a7:3b:b5:8c:b2:1b:c6:73:
42:43:f9:51:7e:f4:e0:b3:34:d9:e9:53:07:66:52:9d:ee:22:
78:50:c3:44:31:5e:2d:80:53:4a:56:e9:16:e1:23:9c:c8:5b:
8f:b3:82:40:0f:0b:8b:49:ea:11:d4:ee:1a:6b:d5:d3:32:fa:
1c:27:eb:70:16:5d:2e:62:63:8e:f1:6f:3e:61:c9:2d:7e:99:
27:03:20:92:03:ea:1a:d0:f4:17:3c:c4:b1:57:23:98:f3:dd:
40:b5:11:56:5b:57:19:cc:bc:f4:a4:fb:4f:4a:3e:45:2b:2c:
8b:e8:87:99:f8:ee:db:ad:f9:f9:06:27:7e:91:33:7e:05:84:
49:a6:e3:99:ad:79:af:b3:1a:68:6d:18:0c:5a:85:79:eb:ac:
ff:a9:d1:ed
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAcYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTA1QjJBRjExMC8GA1UEBRMoMTYyOTY4ODlCRkYwMzFCRjdGREU3MzY3RTJERUU5
M0NCMDA4MDI4MzAeFw0yNTA4MjcxMzI4MThaFw0zNTA4MzExMzI4MThaMBgxFjAU
BgNVBAMTDTY4YWYwN2Y3LTgyNjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDDuC75CtVfZwrIrVeah5S+ZT4L6NXLYhmCxl5ncaKymTMlzZhjt0ekrxab
+pBGOS/drAp7kAVuX/bNqjvLBHEz2jML6ujikh1GqAMib9+8Hv1bB8x/RsQkZGjL
7cmJtK6gs38Gjr9vzfXFnyu+aEGfYKVIrZMThSnklQINtwvBEjut/M228wRqHc7P
Py5+5SpZk8vYoRHtKWhrO7vmLpklKPwOyGBV1Pp/TwSl6JIYjI5lUjgrLqwrb7Nz
litJqQfCoBwykl7Sd/UvcdB5Bij3kN91D/XTNN3R5TrrrJ1cNx0Uv9SuLmLazE4s
TkszmiY47XvrwIA8VU4C8Mod2TKNAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUiLg7
FplWCwSRkLc0ZntNStuG1G4wHwYDVR0jBBgwFoAUFiloib/wMb9/3nNn4t7pPLAI
AoMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjUwNUIyLzU0MTgwNEU0MzQ3MTExRUY5QTg3NTE4MDc2MkU5NTFBL0ZpbG9p
Yl93TWI5XzNuTm40dDdwUExBSUFvTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0ZpbG9pYl93TWI5XzNuTm40dDdwUExBSUFvTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjUwNUIyLzU0MTgwNEU0MzQ3MTExRUY5QTg3NTE4MDc2
MkU5NTFBL0I0NzA2NjI0ODM0OTExRjBCMTMyNDNCM0RBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIpVcwwDQYJKoZIhvcNAQEL
BQADggEBABmMrxdmPRWeL7cJewxhxFIZIaIT9WQMuJr17iyIvPMrCVYuoL9jxYUD
kVou/AgugY6vlohlmO1t70n81wCjzp/7mtm3yVHnyAUAYYYNILHjkQ9nZKOsTNi8
cf03gtC8zcUdXm+nO7WMshvGc0JD+VF+9OCzNNnpUwdmUp3uInhQw0QxXi2AU0pW
6RbhI5zIW4+zgkAPC4tJ6hHU7hpr1dMy+hwn63AWXS5iY47xbz5hyS1+mScDIJID
6hrQ9Bc8xLFXI5jz3UC1EVZbVxnMvPSk+09KPkUrLIvoh5n47tut+fkGJ36RM34F
hEmm45mtea+zGmhtGAxahXnrrP+p0e0=
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:09:48 2025 by rpki-client