Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365FABE/1D3B5B38534211F097EA85DADAE4EC9C/C4A29802A43A11F0BE4458A0DAE4EC9C.roa
File: C4A29802A43A11F0BE4458A0DAE4EC9C.roa (raw, json)
Hash identifier: 2lo94doOrg8TyD+YuEEJsOCrwgG4ilm7x/SAveRYMBE=
Subject key identifier: F3:03:D5:70:FC:31:F6:E8:D5:E9:9D:AA:8D:1C:DD:0F:D5:98:2C:D9
Certificate issuer: /CN=F365FABEAF/serialNumber=325EE3B250B9C682BFB020B336CBA289E1BCD230
Certificate serial: 6E
Authority key identifier: 32:5E:E3:B2:50:B9:C6:82:BF:B0:20:B3:36:CB:A2:89:E1:BC:D2:30
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Ml7jslC5xoK_sCCzNsuiieG80jA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F365FABE/1D3B5B38534211F097EA85DADAE4EC9C/C4A29802A43A11F0BE4458A0DAE4EC9C.roa
Signing time: Wed 08 Oct 2025 11:34:37 +0000
ROA not before: Wed 08 Oct 2025 11:34:32 +0000
ROA not after: Mon 26 Oct 2026 11:34:32 +0000
asID: 37453
IP address blocks: 102.209.212.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F365FABE/1D3B5B38534211F097EA85DADAE4EC9C/Ml7jslC5xoK_sCCzNsuiieG80jA.crl
rsync://rpki.afrinic.net/repository/member_repository/F365FABE/1D3B5B38534211F097EA85DADAE4EC9C/Ml7jslC5xoK_sCCzNsuiieG80jA.mft
rsync://rpki.afrinic.net/repository/afrinic/Ml7jslC5xoK_sCCzNsuiieG80jA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110 (0x6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F365FABEAF, serialNumber=325EE3B250B9C682BFB020B336CBA289E1BCD230
Validity
Not Before: Oct 8 11:34:32 2025 GMT
Not After : Oct 26 11:34:32 2026 GMT
Subject: CN=68e64c4c-e521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bc:f7:90:65:1c:bf:54:32:39:58:20:83:05:
7d:b2:55:97:78:d7:5c:66:a3:28:30:d1:75:a4:2c:
c6:4f:94:fc:fc:e5:92:d4:bf:36:5f:95:de:55:22:
40:86:96:25:3e:48:df:e9:31:3a:e9:7d:fc:45:f2:
7c:a7:ce:18:74:65:53:5f:2a:5d:8c:54:e1:54:ff:
5e:9f:f8:70:f2:2f:cc:ed:76:e0:81:72:36:48:b5:
da:4b:b9:1e:10:4b:8f:90:a5:f9:a1:b5:00:dd:0e:
c3:87:4a:8f:02:e9:17:1c:7f:a3:68:06:94:85:1a:
cf:f8:d3:f7:10:76:ff:86:24:3c:be:a9:3e:ee:76:
aa:07:67:f7:18:47:3e:4f:01:12:b0:80:fe:ee:4d:
a9:16:b1:5a:d6:f1:cc:91:43:ab:11:59:29:19:02:
4c:8b:9e:df:e1:24:d6:45:a7:8f:30:77:7d:7f:05:
f8:66:e7:02:8b:88:14:a7:f2:bd:49:fe:92:19:26:
f6:b7:69:b3:37:74:aa:28:72:9d:8d:21:20:73:33:
ac:6b:1e:d5:77:f6:de:ab:11:4b:84:ff:20:4d:81:
20:8e:af:20:54:71:35:aa:4c:c1:b0:93:2b:20:c7:
ed:a2:56:da:55:66:c3:86:77:4e:70:fd:61:4d:85:
cf:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:03:D5:70:FC:31:F6:E8:D5:E9:9D:AA:8D:1C:DD:0F:D5:98:2C:D9
X509v3 Authority Key Identifier:
keyid:32:5E:E3:B2:50:B9:C6:82:BF:B0:20:B3:36:CB:A2:89:E1:BC:D2:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F365FABE/1D3B5B38534211F097EA85DADAE4EC9C/Ml7jslC5xoK_sCCzNsuiieG80jA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ml7jslC5xoK_sCCzNsuiieG80jA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365FABE/1D3B5B38534211F097EA85DADAE4EC9C/C4A29802A43A11F0BE4458A0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.209.212.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:05:91:d5:0c:ef:63:6f:84:26:de:be:8c:0c:cc:68:f8:d9:
56:b0:2e:1f:91:27:12:22:7c:56:c0:68:ea:e8:a6:10:85:53:
0e:e8:e7:f7:48:6a:4d:1b:65:06:dc:e7:5f:03:98:25:5b:00:
e7:86:29:23:08:ad:aa:b8:f1:21:1c:1a:fa:0c:1e:b4:3e:c4:
d6:60:d8:4f:48:6f:16:99:81:39:e7:4d:f0:99:cf:4d:9e:51:
be:1c:61:cc:ff:b3:05:c0:dc:d7:37:cd:94:4c:25:7b:3d:1e:
35:62:47:a4:d1:fc:9b:15:c8:e9:57:5c:30:d0:16:26:4e:5e:
09:43:09:1e:9c:4a:f9:63:5a:e2:7a:5f:f1:4d:a4:8f:f6:53:
8a:8f:a1:99:74:30:8b:fd:26:7c:d4:d8:c2:3c:4b:ac:25:09:
ad:10:93:2d:48:7b:05:47:df:29:0c:40:e2:31:fd:6a:f0:7c:
0a:81:e7:54:69:1d:c2:f2:31:61:31:60:cd:3f:8a:4e:c7:38:
90:9b:d7:cf:cd:fa:bb:f7:09:dc:50:17:98:cf:84:dd:62:c0:
0e:fb:fe:75:02:9f:0d:7c:3f:d5:05:98:2f:ab:24:c3:98:4a:
41:4d:a4:34:94:47:52:45:d4:57:70:6a:00:77:4b:40:c1:ee:
1d:7a:1e:bc
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBbjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY1
RkFCRUFGMTEwLwYDVQQFEygzMjVFRTNCMjUwQjlDNjgyQkZCMDIwQjMzNkNCQTI4
OUUxQkNEMjMwMB4XDTI1MTAwODExMzQzMloXDTI2MTAyNjExMzQzMlowGDEWMBQG
A1UEAxMNNjhlNjRjNGMtZTUyMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALS895BlHL9UMjlYIIMFfbJVl3jXXGajKDDRdaQsxk+U/PzlktS/Nl+V3lUi
QIaWJT5I3+kxOul9/EXyfKfOGHRlU18qXYxU4VT/Xp/4cPIvzO124IFyNki12ku5
HhBLj5Cl+aG1AN0Ow4dKjwLpFxx/o2gGlIUaz/jT9xB2/4YkPL6pPu52qgdn9xhH
Pk8BErCA/u5NqRaxWtbxzJFDqxFZKRkCTIue3+Ek1kWnjzB3fX8F+GbnAouIFKfy
vUn+khkm9rdpszd0qihynY0hIHMzrGse1Xf23qsRS4T/IE2BII6vIFRxNapMwbCT
KyDH7aJW2lVmw4Z3TnD9YU2Fz/cCAwEAAaOCAqUwggKhMB0GA1UdDgQWBBTzA9Vw
/DH26NXpnaqNHN0P1Zgs2TAfBgNVHSMEGDAWgBQyXuOyULnGgr+wILM2y6KJ4bzS
MDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NUZBQkUvMUQzQjVCMzg1MzQyMTFGMDk3RUE4NURBREFFNEVDOUMvTWw3anNs
QzV4b0tfc0NDek5zdWlpZUc4MGpBLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvTWw3anNsQzV4b0tfc0NDek5zdWlpZUc4MGpBLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NUZBQkUvMUQzQjVCMzg1MzQyMTFGMDk3RUE4NURBREFF
NEVDOUMvQzRBMjk4MDJBNDNBMTFGMEJFNDQ1OEEwREFFNEVDOUMucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmbR1DANBgkqhkiG9w0BAQsF
AAOCAQEAfQWR1QzvY2+EJt6+jAzMaPjZVrAuH5EnEiJ8VsBo6uimEIVTDujn90hq
TRtlBtznXwOYJVsA54YpIwitqrjxIRwa+gwetD7E1mDYT0hvFpmBOedN8JnPTZ5R
vhxhzP+zBcDc1zfNlEwlez0eNWJHpNH8mxXI6VdcMNAWJk5eCUMJHpxK+WNa4npf
8U2kj/ZTio+hmXQwi/0mfNTYwjxLrCUJrRCTLUh7BUffKQxA4jH9avB8CoHnVGkd
wvIxYTFgzT+KTsc4kJvXz836u/cJ3FAXmM+E3WLADvv+dQKfDXw/1QWYL6skw5hK
QU2kNJRHUkXUV3BqAHdLQMHuHXoevA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 21:49:28 2025 by rpki-client