Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C11E4/13DDD38883AD11EEA0A81B324AD9E6FC/E426B5CC979D11F096A760E0DAE4EC9C.roa
File: E426B5CC979D11F096A760E0DAE4EC9C.roa (raw, json)
Hash identifier: Qu1bT2FOjPIO4pS4cjspkc4hPfnA5gSZp8GQU69NlgU=
Subject key identifier: 2B:10:AC:FA:14:69:92:C2:AC:B2:92:D3:D8:9C:13:E4:3D:BC:09:5A
Certificate issuer: /CN=F36C11E4AF/serialNumber=F023B97708196FF9F20BC9287D56C42CAAE5140F
Certificate serial: 02C4
Authority key identifier: F0:23:B9:77:08:19:6F:F9:F2:0B:C9:28:7D:56:C4:2C:AA:E5:14:0F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/8CO5dwgZb_nyC8kofVbELKrlFA8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C11E4/13DDD38883AD11EEA0A81B324AD9E6FC/E426B5CC979D11F096A760E0DAE4EC9C.roa
Signing time: Mon 22 Sep 2025 10:21:24 +0000
ROA not before: Mon 22 Sep 2025 10:21:19 +0000
ROA not after: Tue 22 Sep 2026 10:21:19 +0000
asID: 328169
IP address blocks: 102.214.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C11E4/13DDD38883AD11EEA0A81B324AD9E6FC/8CO5dwgZb_nyC8kofVbELKrlFA8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C11E4/13DDD38883AD11EEA0A81B324AD9E6FC/8CO5dwgZb_nyC8kofVbELKrlFA8.mft
rsync://rpki.afrinic.net/repository/afrinic/8CO5dwgZb_nyC8kofVbELKrlFA8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 708 (0x2c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C11E4AF, serialNumber=F023B97708196FF9F20BC9287D56C42CAAE5140F
Validity
Not Before: Sep 22 10:21:19 2025 GMT
Not After : Sep 22 10:21:19 2026 GMT
Subject: CN=68d12324-963a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c3:b8:62:62:0d:bf:0b:03:02:4f:5c:a2:f0:
73:32:6d:c5:dd:54:3f:f6:4b:ea:2d:6c:06:31:dc:
91:80:d1:97:c5:13:25:07:2d:57:0d:15:d3:89:e0:
8e:94:9c:f3:ef:9b:f9:83:6c:9a:21:c7:80:e7:7a:
eb:2c:f2:81:c4:2c:26:b0:89:7b:6e:ed:80:61:9d:
c2:16:e7:2f:b8:70:a9:fc:da:b6:2b:5f:32:f9:c4:
a7:d0:07:75:3f:df:62:d5:64:f2:43:42:69:2d:28:
e3:32:43:88:f3:a9:83:11:fa:c2:b1:6a:14:6d:9c:
df:1b:c4:f6:4c:25:ac:60:f7:f7:30:ee:e2:98:7d:
84:34:8a:b5:b3:32:e5:42:73:71:63:07:f4:0d:e3:
b8:f6:f5:a8:03:9a:38:2f:bd:f8:32:df:24:1e:47:
aa:d0:68:b3:fd:9b:b9:77:ae:8b:91:c0:68:4b:32:
cf:8a:20:5d:1d:98:f0:73:80:24:35:57:b0:85:b0:
f1:76:a0:2d:f0:12:6c:94:4a:9e:eb:b9:31:4b:fc:
15:64:4d:54:b9:1b:9a:00:28:7e:c4:ce:76:1a:fc:
57:bb:35:87:eb:3c:9d:89:44:6a:2b:6d:fe:fd:d0:
4b:7c:7b:2a:ea:ec:27:b9:2d:42:5a:69:6e:04:6f:
c7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:10:AC:FA:14:69:92:C2:AC:B2:92:D3:D8:9C:13:E4:3D:BC:09:5A
X509v3 Authority Key Identifier:
keyid:F0:23:B9:77:08:19:6F:F9:F2:0B:C9:28:7D:56:C4:2C:AA:E5:14:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C11E4/13DDD38883AD11EEA0A81B324AD9E6FC/8CO5dwgZb_nyC8kofVbELKrlFA8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/8CO5dwgZb_nyC8kofVbELKrlFA8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C11E4/13DDD38883AD11EEA0A81B324AD9E6FC/E426B5CC979D11F096A760E0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.214.160.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:db:91:24:83:4c:8e:e9:c6:d9:12:16:55:48:d2:cb:33:95:
e9:89:30:a1:c9:d8:9e:d1:e1:1d:ec:7d:e3:5c:bf:cf:86:8b:
64:50:b1:0b:e5:e9:e0:f7:70:28:6a:cf:d0:e0:95:a7:f5:52:
ee:70:35:26:6e:72:50:8a:44:ef:27:e2:89:3f:7c:1e:f7:bb:
1d:03:42:07:7f:e8:c4:3f:8b:ba:b9:a3:c8:6c:24:ed:e2:89:
69:5a:b9:d8:e0:fa:44:46:32:ff:90:2f:9d:f1:fd:4c:29:f6:
44:7a:6b:35:8e:43:40:ac:51:dd:37:ef:7a:f9:1a:23:6f:ce:
4d:1e:41:e4:f6:9b:80:94:71:c5:d6:ba:40:d2:cc:5e:47:0f:
3e:ce:13:76:ef:e8:2b:db:93:d1:27:a4:72:b2:f5:87:24:87:
f3:2b:7b:e4:2b:c0:bf:ed:8c:6b:0b:14:d3:eb:de:7d:c3:cb:
ed:cc:01:fe:72:c2:b4:fc:34:f8:32:b1:7a:92:0d:4a:38:67:
3d:72:c6:36:4d:0c:fb:bb:31:05:d3:41:87:37:69:b4:dd:78:
08:a9:67:b9:c9:80:db:e9:77:3c:3d:ac:a5:25:7c:58:f0:8e:
96:16:d9:63:dd:3b:09:aa:b6:6c:bc:fc:44:c1:16:65:1d:e9:
64:c2:fe:29
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAsQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzExRTRBRjExMC8GA1UEBRMoRjAyM0I5NzcwODE5NkZGOUYyMEJDOTI4N0Q1NkM0
MkNBQUU1MTQwRjAeFw0yNTA5MjIxMDIxMTlaFw0yNjA5MjIxMDIxMTlaMBgxFjAU
BgNVBAMTDTY4ZDEyMzI0LTk2M2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDMw7hiYg2/CwMCT1yi8HMybcXdVD/2S+otbAYx3JGA0ZfFEyUHLVcNFdOJ
4I6UnPPvm/mDbJohx4Dneuss8oHELCawiXtu7YBhncIW5y+4cKn82rYrXzL5xKfQ
B3U/32LVZPJDQmktKOMyQ4jzqYMR+sKxahRtnN8bxPZMJaxg9/cw7uKYfYQ0irWz
MuVCc3FjB/QN47j29agDmjgvvfgy3yQeR6rQaLP9m7l3rouRwGhLMs+KIF0dmPBz
gCQ1V7CFsPF2oC3wEmyUSp7ruTFL/BVkTVS5G5oAKH7EznYa/Fe7NYfrPJ2JRGor
bf790Et8eyrq7Ce5LUJaaW4Eb8dLAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUKxCs
+hRpksKsspLT2JwT5D28CVowHwYDVR0jBBgwFoAU8CO5dwgZb/nyC8kofVbELKrl
FA8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkMxMUU0LzEzREREMzg4ODNBRDExRUVBMEE4MUIzMjRBRDlFNkZDLzhDTzVk
d2daYl9ueUM4a29mVmJFTEtybEZBOC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzhDTzVkd2daYl9ueUM4a29mVmJFTEtybEZBOC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkMxMUU0LzEzREREMzg4ODNBRDExRUVBMEE4MUIzMjRB
RDlFNkZDL0U0MjZCNUNDOTc5RDExRjA5NkE3NjBFMERBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABm1qAwDQYJKoZIhvcNAQEL
BQADggEBAJrbkSSDTI7pxtkSFlVI0sszlemJMKHJ2J7R4R3sfeNcv8+Gi2RQsQvl
6eD3cChqz9Dglaf1Uu5wNSZuclCKRO8n4ok/fB73ux0DQgd/6MQ/i7q5o8hsJO3i
iWlaudjg+kRGMv+QL53x/Uwp9kR6azWOQ0CsUd0373r5GiNvzk0eQeT2m4CUccXW
ukDSzF5HDz7OE3bv6Cvbk9EnpHKy9Yckh/Mre+QrwL/tjGsLFNPr3n3Dy+3MAf5y
wrT8NPgysXqSDUo4Zz1yxjZNDPu7MQXTQYc3abTdeAipZ7nJgNvpdzw9rKUlfFjw
jpYW2WPdOwmqtmy8/ETBFmUd6WTC/ik=
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:09:05 2025 by rpki-client