Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A15D5/F6F2AF36C3E511E99DA50E70F8AEA228/C647EE90953B11F09F13E6F2DAE4EC9C.roa
File: C647EE90953B11F09F13E6F2DAE4EC9C.roa (raw, json)
Hash identifier: Qqmxt5TfRNmDgMRV95bw7rsV9a7bjg0MnVaYk8BeOR8=
Subject key identifier: 64:9C:94:23:53:92:B9:27:C0:71:E8:47:DC:16:AC:6B:3B:1B:1A:6E
Certificate issuer: /CN=F36A15D5AF/serialNumber=8DD7238F0137B158F53C7BE0FF0D2E5819F3EB7F
Certificate serial: 08EE
Authority key identifier: 8D:D7:23:8F:01:37:B1:58:F5:3C:7B:E0:FF:0D:2E:58:19:F3:EB:7F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/jdcjjwE3sVj1PHvg_w0uWBnz638.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A15D5/F6F2AF36C3E511E99DA50E70F8AEA228/C647EE90953B11F09F13E6F2DAE4EC9C.roa
Signing time: Fri 19 Sep 2025 09:34:01 +0000
ROA not before: Fri 19 Sep 2025 09:33:57 +0000
ROA not after: Mon 30 Sep 2030 09:33:57 +0000
asID: 37722
IP address blocks: 102.214.100.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A15D5/F6F2AF36C3E511E99DA50E70F8AEA228/jdcjjwE3sVj1PHvg_w0uWBnz638.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A15D5/F6F2AF36C3E511E99DA50E70F8AEA228/jdcjjwE3sVj1PHvg_w0uWBnz638.mft
rsync://rpki.afrinic.net/repository/afrinic/jdcjjwE3sVj1PHvg_w0uWBnz638.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2286 (0x8ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A15D5AF, serialNumber=8DD7238F0137B158F53C7BE0FF0D2E5819F3EB7F
Validity
Not Before: Sep 19 09:33:57 2025 GMT
Not After : Sep 30 09:33:57 2030 GMT
Subject: CN=68cd2389-9465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4f:c8:36:c9:da:26:25:c5:99:4e:06:81:85:
75:33:c1:72:31:36:41:f8:4d:f4:0b:57:aa:27:0c:
cd:88:68:56:54:43:02:09:3e:dd:a7:96:87:1e:66:
5c:ca:49:5c:16:ba:27:73:cf:0a:1e:13:12:77:3f:
f7:af:82:7d:9c:f2:f4:de:c9:e4:6f:77:97:ad:76:
20:09:f5:dc:1f:ad:a6:64:af:8c:d5:2c:44:be:00:
8c:a8:d7:83:fc:00:6e:f0:fd:8f:f5:71:c8:eb:64:
39:96:a6:ee:50:9c:8a:ae:9b:59:20:fb:5e:dd:39:
50:dd:ed:5f:e8:9f:9f:54:54:35:fd:a8:43:ef:7c:
7a:d1:a3:e0:1b:c5:e1:ba:b1:ab:e9:3f:b9:21:6d:
bd:1f:0c:cf:53:b1:42:e5:33:59:10:54:b3:3d:eb:
89:29:b4:4f:c9:99:33:b9:88:e6:4e:60:b2:13:b8:
72:a2:ff:ca:a8:15:bf:2f:1c:9e:ef:f9:7f:04:b8:
5e:01:4e:c0:3d:5c:5d:cd:86:fd:41:b9:17:31:39:
06:d0:1b:08:b3:59:18:88:40:82:3d:9f:ae:e2:62:
b7:7e:2d:94:e2:f0:2f:0f:6e:3a:b6:02:37:64:97:
52:34:73:b7:79:54:24:c4:a7:80:e4:21:0c:11:09:
7e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:9C:94:23:53:92:B9:27:C0:71:E8:47:DC:16:AC:6B:3B:1B:1A:6E
X509v3 Authority Key Identifier:
keyid:8D:D7:23:8F:01:37:B1:58:F5:3C:7B:E0:FF:0D:2E:58:19:F3:EB:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A15D5/F6F2AF36C3E511E99DA50E70F8AEA228/jdcjjwE3sVj1PHvg_w0uWBnz638.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jdcjjwE3sVj1PHvg_w0uWBnz638.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A15D5/F6F2AF36C3E511E99DA50E70F8AEA228/C647EE90953B11F09F13E6F2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.214.100.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:41:60:71:d6:f6:d8:15:43:5b:ca:db:91:e4:31:97:aa:bb:
47:7a:72:99:a1:87:c2:13:e4:dd:85:8d:18:ea:27:ae:9b:bc:
63:2f:af:3d:f9:ee:07:fb:16:9f:12:2f:6f:94:ba:09:7a:ee:
28:4c:79:6e:4b:e0:9b:53:8c:36:3e:57:ce:e4:61:40:31:61:
3c:59:72:d3:93:2c:a4:6d:ca:d5:3d:60:45:43:fb:52:a5:07:
1f:01:4b:06:f1:e3:d5:57:ff:0b:c8:03:ec:33:c2:ab:8a:d8:
fe:3e:fd:87:bd:88:6e:6c:0a:df:9b:8a:0b:6f:14:1f:72:26:
b5:52:a5:4d:39:0c:e0:52:60:9c:01:25:55:ee:b8:8e:05:e4:
d7:1d:2d:c0:b2:5d:52:ea:3c:32:f4:be:4d:04:2a:5a:a7:f7:
47:57:f5:97:05:49:68:f1:60:e1:c2:30:15:24:fe:66:c1:41:
2d:ee:a1:74:57:e0:4b:bc:bd:03:46:44:5f:47:0a:29:62:b2:
9f:80:fc:f1:3e:f3:b2:05:c9:30:0a:60:9d:fc:b7:18:33:17:
3d:3f:35:55:9f:9b:db:d9:2f:92:e0:4f:1d:d0:7f:93:e4:03:
95:40:a8:15:c0:1d:7a:70:b4:12:3b:c8:e1:65:47:56:36:c2:
b2:e1:67:c3
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCO4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTE1RDVBRjExMC8GA1UEBRMoOERENzIzOEYwMTM3QjE1OEY1M0M3QkUwRkYwRDJF
NTgxOUYzRUI3RjAeFw0yNTA5MTkwOTMzNTdaFw0zMDA5MzAwOTMzNTdaMBgxFjAU
BgNVBAMTDTY4Y2QyMzg5LTk0NjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCsT8g2ydomJcWZTgaBhXUzwXIxNkH4TfQLV6onDM2IaFZUQwIJPt2nloce
ZlzKSVwWuidzzwoeExJ3P/evgn2c8vTeyeRvd5etdiAJ9dwfraZkr4zVLES+AIyo
14P8AG7w/Y/1ccjrZDmWpu5QnIqum1kg+17dOVDd7V/on59UVDX9qEPvfHrRo+Ab
xeG6savpP7khbb0fDM9TsULlM1kQVLM964kptE/JmTO5iOZOYLITuHKi/8qoFb8v
HJ7v+X8EuF4BTsA9XF3Nhv1BuRcxOQbQGwizWRiIQII9n67iYrd+LZTi8C8Pbjq2
Ajdkl1I0c7d5VCTEp4DkIQwRCX6BAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUZJyU
I1OSuSfAcehH3BasazsbGm4wHwYDVR0jBBgwFoAUjdcjjwE3sVj1PHvg/w0uWBnz
638wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkExNUQ1L0Y2RjJBRjM2QzNFNTExRTk5REE1MEU3MEY4QUVBMjI4L2pkY2pq
d0Uzc1ZqMVBIdmdfdzB1V0JuejYzOC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2pkY2pqd0Uzc1ZqMVBIdmdfdzB1V0JuejYzOC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkExNUQ1L0Y2RjJBRjM2QzNFNTExRTk5REE1MEU3MEY4
QUVBMjI4L0M2NDdFRTkwOTUzQjExRjA5RjEzRTZGMkRBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJm1mQwDQYJKoZIhvcNAQEL
BQADggEBABpBYHHW9tgVQ1vK25HkMZequ0d6cpmhh8IT5N2FjRjqJ66bvGMvrz35
7gf7Fp8SL2+Uugl67ihMeW5L4JtTjDY+V87kYUAxYTxZctOTLKRtytU9YEVD+1Kl
Bx8BSwbx49VX/wvIA+wzwquK2P4+/Ye9iG5sCt+bigtvFB9yJrVSpU05DOBSYJwB
JVXuuI4F5NcdLcCyXVLqPDL0vk0EKlqn90dX9ZcFSWjxYOHCMBUk/mbBQS3uoXRX
4Eu8vQNGRF9HCilisp+A/PE+87IFyTAKYJ38txgzFz0/NVWfm9vZL5LgTx3Qf5Pk
A5VAqBXAHXpwtBI7yOFlR1Y2wrLhZ8M=
-----END CERTIFICATE-----
Generated at Mon Oct 20 19:52:15 2025 by rpki-client