Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3650F65/F43C863A498311EFA2F45FB4762E951A/D2876104AE5411F0AC152FD4DAE4EC9C.roa
File: D2876104AE5411F0AC152FD4DAE4EC9C.roa (raw, json)
Hash identifier: kpP94D+u8/tcFFiU+q6BH1AoYrF/Io2l+lqQI9CxNX4=
Subject key identifier: 98:DA:E7:6D:AB:B6:2D:C5:1E:CB:94:21:32:B2:1F:F9:ED:8D:D5:88
Certificate issuer: /CN=F3650F65AF/serialNumber=C0C0E7199CB840A2498C1E3BA5676F9E0C062868
Certificate serial: 01DF
Authority key identifier: C0:C0:E7:19:9C:B8:40:A2:49:8C:1E:3B:A5:67:6F:9E:0C:06:28:68
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/wMDnGZy4QKJJjB47pWdvngwGKGg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3650F65/F43C863A498311EFA2F45FB4762E951A/D2876104AE5411F0AC152FD4DAE4EC9C.roa
Signing time: Tue 21 Oct 2025 08:06:18 +0000
ROA not before: Tue 21 Oct 2025 08:06:13 +0000
ROA not after: Sun 21 Oct 2035 08:06:13 +0000
asID: 37114
IP address blocks: 102.213.170.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3650F65/F43C863A498311EFA2F45FB4762E951A/wMDnGZy4QKJJjB47pWdvngwGKGg.crl
rsync://rpki.afrinic.net/repository/member_repository/F3650F65/F43C863A498311EFA2F45FB4762E951A/wMDnGZy4QKJJjB47pWdvngwGKGg.mft
rsync://rpki.afrinic.net/repository/afrinic/wMDnGZy4QKJJjB47pWdvngwGKGg.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 24 Oct 2025 04:26:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 479 (0x1df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3650F65AF, serialNumber=C0C0E7199CB840A2498C1E3BA5676F9E0C062868
Validity
Not Before: Oct 21 08:06:13 2025 GMT
Not After : Oct 21 08:06:13 2035 GMT
Subject: CN=68f73efa-c7ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:93:76:f9:76:26:a8:c6:d1:f3:b1:1b:c7:43:
d0:91:cc:92:c5:df:f8:fb:74:70:c4:e6:3c:5b:96:
62:49:0b:ad:4d:ef:61:bd:02:d4:5f:88:d4:7f:43:
90:56:3d:00:0f:ee:eb:ac:1b:7e:22:fd:71:98:84:
1b:1f:be:8f:f6:dc:ea:3f:82:22:27:a6:23:73:7f:
b6:d6:71:96:7a:ff:ea:0d:10:cd:13:d2:55:3b:21:
e3:18:51:4f:52:a7:c7:f5:bc:9e:64:3d:55:84:cb:
37:25:0b:c0:64:17:30:c1:f5:89:47:5e:7a:2c:14:
5e:22:00:87:9d:95:f4:b5:58:30:45:1f:ef:a4:51:
6a:42:4f:07:7e:06:f4:58:ad:df:90:3d:5e:7e:8d:
a4:6e:48:c9:7a:06:f9:71:cd:30:6e:64:e8:ef:bf:
94:e7:32:4c:b2:38:b6:49:1d:3a:38:ca:08:02:c7:
02:36:47:76:f1:55:c2:36:c9:01:ed:e3:64:88:d6:
a9:8f:03:65:f8:b6:9d:a7:18:48:02:12:15:76:27:
7e:eb:c1:89:99:ce:cf:fa:ab:e0:c1:18:6e:57:27:
3f:5d:b3:3c:a2:44:7a:f3:f8:5b:74:d8:ab:d0:fc:
6a:76:b2:5c:73:a9:68:6c:1c:4d:3d:e0:cc:bb:69:
a8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:DA:E7:6D:AB:B6:2D:C5:1E:CB:94:21:32:B2:1F:F9:ED:8D:D5:88
X509v3 Authority Key Identifier:
keyid:C0:C0:E7:19:9C:B8:40:A2:49:8C:1E:3B:A5:67:6F:9E:0C:06:28:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3650F65/F43C863A498311EFA2F45FB4762E951A/wMDnGZy4QKJJjB47pWdvngwGKGg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wMDnGZy4QKJJjB47pWdvngwGKGg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3650F65/F43C863A498311EFA2F45FB4762E951A/D2876104AE5411F0AC152FD4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.213.170.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:28:2b:23:6b:fa:21:bb:36:67:1a:ec:1e:5d:91:aa:58:b3:
60:c0:b0:1b:02:af:7d:d2:10:4d:f9:e8:d8:1f:1b:34:60:e0:
3b:b9:9a:4c:9f:21:5b:eb:c2:31:fb:45:d8:c4:3e:e5:1b:ce:
89:99:62:7e:2d:74:dd:15:b9:b3:99:d8:df:4e:59:12:6d:04:
93:aa:e4:0f:c3:e2:f8:a7:00:eb:6d:f1:db:87:e0:17:ee:18:
03:11:7e:ef:01:0b:fa:35:4a:8f:3f:1c:d6:3f:64:f6:e9:3a:
87:47:66:42:17:2e:d7:6d:62:d4:26:9b:87:78:c1:34:78:4b:
e7:24:ab:69:58:4a:8c:f4:53:2a:7f:0e:56:4f:e6:e6:32:fe:
2a:00:8f:94:f4:0f:b3:b7:e9:07:52:d4:6c:90:86:88:6b:b5:
ba:9b:2d:62:32:61:74:fd:a3:81:40:cf:8c:32:c3:63:46:f1:
13:8e:0a:cb:5d:77:5f:2c:74:da:f5:00:1b:df:69:48:33:7f:
02:86:f6:05:72:b3:50:09:97:0e:96:04:84:e4:05:90:f5:61:
dd:36:45:00:c3:b1:13:1f:29:45:83:76:d6:77:68:06:8b:29:
aa:dd:c5:3e:78:05:90:94:ff:cb:23:76:7b:3b:62:27:71:cd:
65:da:94:42
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAd8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTBGNjVBRjExMC8GA1UEBRMoQzBDMEU3MTk5Q0I4NDBBMjQ5OEMxRTNCQTU2NzZG
OUUwQzA2Mjg2ODAeFw0yNTEwMjEwODA2MTNaFw0zNTEwMjEwODA2MTNaMBgxFjAU
BgNVBAMTDTY4ZjczZWZhLWM3ZWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCmk3b5diaoxtHzsRvHQ9CRzJLF3/j7dHDE5jxblmJJC61N72G9AtRfiNR/
Q5BWPQAP7uusG34i/XGYhBsfvo/23Oo/giInpiNzf7bWcZZ6/+oNEM0T0lU7IeMY
UU9Sp8f1vJ5kPVWEyzclC8BkFzDB9YlHXnosFF4iAIedlfS1WDBFH++kUWpCTwd+
BvRYrd+QPV5+jaRuSMl6BvlxzTBuZOjvv5TnMkyyOLZJHTo4yggCxwI2R3bxVcI2
yQHt42SI1qmPA2X4tp2nGEgCEhV2J37rwYmZzs/6q+DBGG5XJz9dszyiRHrz+Ft0
2KvQ/Gp2slxzqWhsHE094My7aagTAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUmNrn
bau2LcUey5QhMrIf+e2N1YgwHwYDVR0jBBgwFoAUwMDnGZy4QKJJjB47pWdvngwG
KGgwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjUwRjY1L0Y0M0M4NjNBNDk4MzExRUZBMkY0NUZCNDc2MkU5NTFBL3dNRG5H
Wnk0UUtKSmpCNDdwV2R2bmd3R0tHZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3dNRG5HWnk0UUtKSmpCNDdwV2R2bmd3R0tHZy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjUwRjY1L0Y0M0M4NjNBNDk4MzExRUZBMkY0NUZCNDc2
MkU5NTFBL0QyODc2MTA0QUU1NDExRjBBQzE1MkZENERBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABm1aowDQYJKoZIhvcNAQEL
BQADggEBAMgoKyNr+iG7Nmca7B5dkapYs2DAsBsCr33SEE356NgfGzRg4Du5mkyf
IVvrwjH7RdjEPuUbzomZYn4tdN0VubOZ2N9OWRJtBJOq5A/D4vinAOtt8duH4Bfu
GAMRfu8BC/o1So8/HNY/ZPbpOodHZkIXLtdtYtQmm4d4wTR4S+ckq2lYSoz0Uyp/
DlZP5uYy/ioAj5T0D7O36QdS1GyQhohrtbqbLWIyYXT9o4FAz4wyw2NG8ROOCstd
d18sdNr1ABvfaUgzfwKG9gVys1AJlw6WBITkBZD1Yd02RQDDsRMfKUWDdtZ3aAaL
KardxT54BZCU/8sjdns7YidxzWXalEI=
-----END CERTIFICATE-----
Generated at Wed Oct 22 11:43:58 2025 by rpki-client