Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3650F65/F43C863A498311EFA2F45FB4762E951A/18890BCCAE5411F09BE5C9CFDAE4EC9C.roa
File: 18890BCCAE5411F09BE5C9CFDAE4EC9C.roa (raw, json)
Hash identifier: DcvJAg7y0gPhbL79bHIJVn9/mREPIRpkTMJWpY7Z5Ck=
Subject key identifier: 33:A6:C1:F5:C5:99:E2:D2:A9:8A:B5:0E:1B:B5:28:6C:4C:D1:44:BB
Certificate issuer: /CN=F3650F65AF/serialNumber=C0C0E7199CB840A2498C1E3BA5676F9E0C062868
Certificate serial: 01DB
Authority key identifier: C0:C0:E7:19:9C:B8:40:A2:49:8C:1E:3B:A5:67:6F:9E:0C:06:28:68
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/wMDnGZy4QKJJjB47pWdvngwGKGg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3650F65/F43C863A498311EFA2F45FB4762E951A/18890BCCAE5411F09BE5C9CFDAE4EC9C.roa
Signing time: Tue 21 Oct 2025 08:01:06 +0000
ROA not before: Tue 21 Oct 2025 08:01:02 +0000
ROA not after: Sun 21 Oct 2035 08:01:02 +0000
asID: 37114
IP address blocks: 102.223.78.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3650F65/F43C863A498311EFA2F45FB4762E951A/wMDnGZy4QKJJjB47pWdvngwGKGg.crl
rsync://rpki.afrinic.net/repository/member_repository/F3650F65/F43C863A498311EFA2F45FB4762E951A/wMDnGZy4QKJJjB47pWdvngwGKGg.mft
rsync://rpki.afrinic.net/repository/afrinic/wMDnGZy4QKJJjB47pWdvngwGKGg.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 24 Oct 2025 04:26:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 475 (0x1db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3650F65AF, serialNumber=C0C0E7199CB840A2498C1E3BA5676F9E0C062868
Validity
Not Before: Oct 21 08:01:02 2025 GMT
Not After : Oct 21 08:01:02 2035 GMT
Subject: CN=68f73dc2-5fc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:08:ef:57:d3:de:e2:56:aa:7c:95:5a:61:1a:
2d:17:f5:93:5d:f1:b5:db:71:c5:17:a1:00:f6:ad:
10:5b:cc:6e:5b:5c:cf:e2:22:9e:a9:d0:e6:af:4e:
b5:08:2c:17:e2:1e:91:50:47:1f:26:6f:15:c9:3c:
f3:6e:f6:59:50:ba:02:bb:fb:b3:fb:84:cf:a8:17:
de:fa:00:d0:95:25:57:e6:c5:0c:83:d5:ee:f0:7e:
e1:be:1a:06:ad:09:10:0e:66:72:9d:ff:e9:f9:18:
a5:5e:9b:57:ef:ba:31:c4:c8:57:59:dd:d1:8b:a4:
7d:d1:05:96:7a:c9:03:ff:16:6d:67:a8:c8:e1:28:
d4:a3:2b:29:9c:15:97:10:9c:2e:09:be:93:a2:9d:
89:48:04:59:37:9a:ad:c5:88:93:63:49:4b:3f:a5:
d7:19:72:9f:c1:55:6a:54:f3:e3:51:2f:b5:81:67:
8e:a1:e6:dd:07:fb:23:cb:62:f1:34:a6:44:a5:97:
e6:fc:5b:87:2b:c0:01:1e:0f:7f:21:43:55:61:8a:
6a:da:12:5b:63:2f:b8:e1:66:a3:ab:2e:1c:a2:36:
69:f9:69:84:f5:39:9a:a2:91:3a:a7:b6:50:a6:bc:
e8:63:d6:24:8d:72:17:56:2b:08:32:d0:d4:33:bb:
7f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:A6:C1:F5:C5:99:E2:D2:A9:8A:B5:0E:1B:B5:28:6C:4C:D1:44:BB
X509v3 Authority Key Identifier:
keyid:C0:C0:E7:19:9C:B8:40:A2:49:8C:1E:3B:A5:67:6F:9E:0C:06:28:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3650F65/F43C863A498311EFA2F45FB4762E951A/wMDnGZy4QKJJjB47pWdvngwGKGg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wMDnGZy4QKJJjB47pWdvngwGKGg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3650F65/F43C863A498311EFA2F45FB4762E951A/18890BCCAE5411F09BE5C9CFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.223.78.0/24
Signature Algorithm: sha256WithRSAEncryption
68:d1:6c:eb:da:1a:03:48:f4:75:8c:a5:de:58:f8:55:c2:4a:
f2:d0:2a:7a:cd:c6:6e:27:5f:a0:f5:2a:d2:69:66:4a:f0:7e:
21:b6:5f:88:30:66:39:ef:a8:a8:96:e9:52:2d:37:a5:cd:07:
a6:f0:b3:14:fa:3b:4c:37:f1:04:89:27:ec:4f:d5:98:ac:9c:
d4:7d:29:8a:1e:2f:a7:f7:73:f8:fa:00:a8:bd:12:a3:b6:17:
93:7b:3e:b9:11:da:a8:87:10:d4:e6:ab:87:3d:d0:7b:1b:7c:
65:83:f9:d5:72:b2:f2:48:f9:47:d6:e5:98:2c:2c:12:1c:f0:
67:3c:92:fb:20:a8:7f:df:46:b6:59:7e:e7:5e:1d:7c:b3:36:
10:83:ec:39:3e:40:de:35:3b:5c:e2:9f:7e:92:cf:55:a5:ec:
dc:72:f8:2e:b7:65:34:70:f2:17:3b:3b:ca:bc:2d:fa:b7:08:
10:54:32:c8:0d:fe:4f:ed:46:fb:ca:59:be:a4:d5:cb:7e:14:
7b:ec:be:ab:fa:d4:cf:ef:0a:4a:d5:e6:72:52:bf:01:e7:0e:
25:ef:ec:64:af:ad:ea:29:64:64:e4:22:c4:70:eb:d3:9e:82:
8b:9c:7e:e5:d3:86:55:75:19:15:99:39:0a:1a:0c:ac:22:7e:
8e:4e:e1:f2
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAdswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTBGNjVBRjExMC8GA1UEBRMoQzBDMEU3MTk5Q0I4NDBBMjQ5OEMxRTNCQTU2NzZG
OUUwQzA2Mjg2ODAeFw0yNTEwMjEwODAxMDJaFw0zNTEwMjEwODAxMDJaMBgxFjAU
BgNVBAMTDTY4ZjczZGMyLTVmYzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC+CO9X097iVqp8lVphGi0X9ZNd8bXbccUXoQD2rRBbzG5bXM/iIp6p0Oav
TrUILBfiHpFQRx8mbxXJPPNu9llQugK7+7P7hM+oF976ANCVJVfmxQyD1e7wfuG+
GgatCRAOZnKd/+n5GKVem1fvujHEyFdZ3dGLpH3RBZZ6yQP/Fm1nqMjhKNSjKymc
FZcQnC4JvpOinYlIBFk3mq3FiJNjSUs/pdcZcp/BVWpU8+NRL7WBZ46h5t0H+yPL
YvE0pkSll+b8W4crwAEeD38hQ1VhimraEltjL7jhZqOrLhyiNmn5aYT1OZqikTqn
tlCmvOhj1iSNchdWKwgy0NQzu3+3AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUM6bB
9cWZ4tKpirUOG7UobEzRRLswHwYDVR0jBBgwFoAUwMDnGZy4QKJJjB47pWdvngwG
KGgwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjUwRjY1L0Y0M0M4NjNBNDk4MzExRUZBMkY0NUZCNDc2MkU5NTFBL3dNRG5H
Wnk0UUtKSmpCNDdwV2R2bmd3R0tHZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3dNRG5HWnk0UUtKSmpCNDdwV2R2bmd3R0tHZy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjUwRjY1L0Y0M0M4NjNBNDk4MzExRUZBMkY0NUZCNDc2
MkU5NTFBLzE4ODkwQkNDQUU1NDExRjA5QkU1QzlDRkRBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABm304wDQYJKoZIhvcNAQEL
BQADggEBAGjRbOvaGgNI9HWMpd5Y+FXCSvLQKnrNxm4nX6D1KtJpZkrwfiG2X4gw
ZjnvqKiW6VItN6XNB6bwsxT6O0w38QSJJ+xP1ZisnNR9KYoeL6f3c/j6AKi9EqO2
F5N7PrkR2qiHENTmq4c90HsbfGWD+dVysvJI+UfW5ZgsLBIc8Gc8kvsgqH/fRrZZ
fudeHXyzNhCD7Dk+QN41O1zin36Sz1Wl7Nxy+C63ZTRw8hc7O8q8Lfq3CBBUMsgN
/k/tRvvKWb6k1ct+FHvsvqv61M/vCkrV5nJSvwHnDiXv7GSvreopZGTkIsRw69Oe
goucfuXThlV1GRWZOQoaDKwifo5O4fI=
-----END CERTIFICATE-----
Generated at Wed Oct 22 11:43:58 2025 by rpki-client