Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BF59B/4AAAA214C75111EEA02EB392775412E6/8D07CB988E1811F0880535C1DAE4EC9C.roa
File: 8D07CB988E1811F0880535C1DAE4EC9C.roa (raw, json)
Hash identifier: KUkmHOoUX1f9Qaw5Y4tqECt9IIRg99STGXz0KSMJbsI=
Subject key identifier: 30:CB:33:3A:69:59:51:37:12:07:8C:89:88:F8:04:BD:5B:31:C6:B6
Certificate issuer: /CN=F36BF59BAF/serialNumber=E036AE08FE03416F58887A9D195DBFD86A25603C
Certificate serial: 0270
Authority key identifier: E0:36:AE:08:FE:03:41:6F:58:88:7A:9D:19:5D:BF:D8:6A:25:60:3C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/4DauCP4DQW9YiHqdGV2_2GolYDw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BF59B/4AAAA214C75111EEA02EB392775412E6/8D07CB988E1811F0880535C1DAE4EC9C.roa
Signing time: Wed 10 Sep 2025 07:34:15 +0000
ROA not before: Wed 10 Sep 2025 07:34:10 +0000
ROA not after: Tue 01 Sep 2026 07:34:10 +0000
asID: 37739
IP address blocks: 102.204.248.0/24 maxlen: 24
102.204.249.0/24 maxlen: 24
102.204.250.0/24 maxlen: 24
102.204.251.0/24 maxlen: 24
102.209.240.0/24 maxlen: 24
102.209.241.0/24 maxlen: 24
2c0f:2c40::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36BF59B/4AAAA214C75111EEA02EB392775412E6/4DauCP4DQW9YiHqdGV2_2GolYDw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36BF59B/4AAAA214C75111EEA02EB392775412E6/4DauCP4DQW9YiHqdGV2_2GolYDw.mft
rsync://rpki.afrinic.net/repository/afrinic/4DauCP4DQW9YiHqdGV2_2GolYDw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 04:06:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 624 (0x270)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BF59BAF, serialNumber=E036AE08FE03416F58887A9D195DBFD86A25603C
Validity
Not Before: Sep 10 07:34:10 2025 GMT
Not After : Sep 1 07:34:10 2026 GMT
Subject: CN=68c129f7-feeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:77:6a:4c:fe:cd:65:ba:5b:60:7b:7d:51:b7:
80:f9:2f:2b:99:3e:0c:e6:5c:38:ae:a7:b7:5d:26:
91:a9:c6:c3:89:d9:08:36:72:1e:c6:c4:05:52:af:
77:0e:af:3e:24:59:0b:fe:c1:af:64:44:81:80:10:
50:be:8b:33:39:19:53:42:39:07:0a:ae:69:21:b6:
e9:ef:7f:ac:9e:09:05:f6:59:47:58:0c:26:d2:f8:
ad:37:7d:e7:ff:cf:24:1e:d8:e1:d3:f2:59:25:d6:
d3:65:d2:92:39:f8:ac:71:4d:5b:04:34:d1:42:7d:
cd:b1:dd:38:6f:a2:de:0a:1a:d5:8d:88:49:17:b9:
02:c2:81:35:bb:d1:e4:db:2d:81:b5:a7:4f:b9:2f:
a5:96:8d:32:72:08:a3:76:01:d0:30:eb:ed:67:23:
1a:19:e7:3f:1f:e7:2f:41:a9:99:db:3e:ee:23:a9:
b0:3f:1e:b2:d0:42:62:9c:49:48:bc:84:82:f3:2c:
28:9f:8f:d6:d4:52:ed:9e:f8:4d:63:df:71:21:59:
f0:d7:64:b1:8d:89:98:62:a8:ae:40:87:a8:5b:e9:
26:b9:31:65:4a:6e:3d:c4:c0:64:14:9f:e3:5a:7a:
b9:65:90:f8:92:64:24:3b:a6:2f:de:c1:e4:fb:87:
dc:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:CB:33:3A:69:59:51:37:12:07:8C:89:88:F8:04:BD:5B:31:C6:B6
X509v3 Authority Key Identifier:
keyid:E0:36:AE:08:FE:03:41:6F:58:88:7A:9D:19:5D:BF:D8:6A:25:60:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BF59B/4AAAA214C75111EEA02EB392775412E6/4DauCP4DQW9YiHqdGV2_2GolYDw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4DauCP4DQW9YiHqdGV2_2GolYDw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BF59B/4AAAA214C75111EEA02EB392775412E6/8D07CB988E1811F0880535C1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.204.248.0/22
102.209.240.0/23
IPv6:
2c0f:2c40::/32
Signature Algorithm: sha256WithRSAEncryption
21:75:41:11:c9:d4:45:22:34:86:20:ca:41:dd:21:16:c4:c2:
cd:60:3a:60:68:f8:40:c8:16:7f:ef:24:e5:6f:7a:51:b9:cf:
89:bf:f3:e4:8f:c6:99:f5:63:07:ae:73:eb:7f:a3:72:88:8c:
75:5f:fd:bd:97:32:6f:37:8b:2f:12:a9:f6:5a:ad:7c:4a:47:
c6:f5:bc:bc:4a:f0:81:d6:79:7c:30:47:4c:f5:e5:99:56:81:
57:9e:5d:ef:3b:ee:38:66:70:55:85:92:24:53:5b:be:b5:37:
a4:40:fa:80:dc:94:b2:46:dc:4b:b9:00:05:5e:ba:4a:bf:09:
69:d6:be:2e:45:53:85:17:d7:ab:c3:b6:6a:11:6f:bf:6c:61:
11:ba:4a:57:19:00:54:77:ff:cc:68:ff:23:c4:b0:fc:48:8c:
3f:d8:5f:f8:00:00:10:3f:2e:31:40:03:85:86:7d:d1:38:48:
22:63:ae:ce:90:23:3c:6a:40:5e:50:98:9a:45:05:09:f6:29:
8e:ed:cd:84:43:8b:6d:a5:bf:0a:85:01:b5:46:5f:c9:2c:5f:
93:d2:52:f3:8a:d8:6d:09:8f:68:b1:94:f8:99:a2:34:08:2f:
b8:83:c9:af:46:33:6f:3e:55:d3:97:c9:3c:79:96:d0:21:39:
84:88:37:05
-----BEGIN CERTIFICATE-----
MIIFmDCCBICgAwIBAgICAnAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QkY1OUJBRjExMC8GA1UEBRMoRTAzNkFFMDhGRTAzNDE2RjU4ODg3QTlEMTk1REJG
RDg2QTI1NjAzQzAeFw0yNTA5MTAwNzM0MTBaFw0yNjA5MDEwNzM0MTBaMBgxFjAU
BgNVBAMTDTY4YzEyOWY3LWZlZWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDHd2pM/s1lultge31Rt4D5LyuZPgzmXDiup7ddJpGpxsOJ2Qg2ch7GxAVS
r3cOrz4kWQv+wa9kRIGAEFC+izM5GVNCOQcKrmkhtunvf6yeCQX2WUdYDCbS+K03
fef/zyQe2OHT8lkl1tNl0pI5+KxxTVsENNFCfc2x3Thvot4KGtWNiEkXuQLCgTW7
0eTbLYG1p0+5L6WWjTJyCKN2AdAw6+1nIxoZ5z8f5y9BqZnbPu4jqbA/HrLQQmKc
SUi8hILzLCifj9bUUu2e+E1j33EhWfDXZLGNiZhiqK5Ah6hb6Sa5MWVKbj3EwGQU
n+NaerllkPiSZCQ7pi/eweT7h9yVAgMBAAGjggK6MIICtjAdBgNVHQ4EFgQUMMsz
OmlZUTcSB4yJiPgEvVsxxrYwHwYDVR0jBBgwFoAU4DauCP4DQW9YiHqdGV2/2Gol
YDwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkJGNTlCLzRBQUFBMjE0Qzc1MTExRUVBMDJFQjM5Mjc3NTQxMkU2LzREYXVD
UDREUVc5WWlIcWRHVjJfMkdvbFlEdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzREYXVDUDREUVc5WWlIcWRHVjJfMkdvbFlEdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkJGNTlCLzRBQUFBMjE0Qzc1MTExRUVBMDJFQjM5Mjc3
NTQxMkU2LzhEMDdDQjk4OEUxODExRjA4ODA1MzVDMURBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAJmzPgDBAFm0fAwDQQCAAIw
BwMFACwPLEAwDQYJKoZIhvcNAQELBQADggEBACF1QRHJ1EUiNIYgykHdIRbEws1g
OmBo+EDIFn/vJOVvelG5z4m/8+SPxpn1Yweuc+t/o3KIjHVf/b2XMm83iy8SqfZa
rXxKR8b1vLxK8IHWeXwwR0z15ZlWgVeeXe877jhmcFWFkiRTW761N6RA+oDclLJG
3Eu5AAVeukq/CWnWvi5FU4UX16vDtmoRb79sYRG6SlcZAFR3/8xo/yPEsPxIjD/Y
X/gAABA/LjFAA4WGfdE4SCJjrs6QIzxqQF5QmJpFBQn2KY7tzYRDi22lvwqFAbVG
X8ksX5PSUvOK2G0Jj2ixlPiZojQIL7iDya9GM28+VdOXyTx5ltAhOYSINwU=
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:13:53 2025 by rpki-client