Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CAD03/90CF9CCA1F4211EEB18184614AD9E6FC/FB21D3049AA111F0A09833EDDAE4EC9C.roa
File: FB21D3049AA111F0A09833EDDAE4EC9C.roa (raw, json)
Hash identifier: 2qR4wjqNuC0TKOwbykEt6Pca7LKb2L8DNkEqc+08Jrw=
Subject key identifier: 79:5B:9B:81:C2:80:52:3C:73:65:0A:0D:76:9C:17:FA:A0:2E:B4:84
Certificate issuer: /CN=F36CAD03AF/serialNumber=7F3738A2B28B6FAC0EE168DACDA1020991F65EFF
Certificate serial: 0348
Authority key identifier: 7F:37:38:A2:B2:8B:6F:AC:0E:E1:68:DA:CD:A1:02:09:91:F6:5E:FF
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/fzc4orKLb6wO4WjazaECCZH2Xv8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CAD03/90CF9CCA1F4211EEB18184614AD9E6FC/FB21D3049AA111F0A09833EDDAE4EC9C.roa
Signing time: Fri 26 Sep 2025 06:28:15 +0000
ROA not before: Fri 26 Sep 2025 06:28:09 +0000
ROA not after: Tue 19 Sep 2028 06:28:09 +0000
asID: 328987
IP address blocks: 102.206.112.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36CAD03/90CF9CCA1F4211EEB18184614AD9E6FC/fzc4orKLb6wO4WjazaECCZH2Xv8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36CAD03/90CF9CCA1F4211EEB18184614AD9E6FC/fzc4orKLb6wO4WjazaECCZH2Xv8.mft
rsync://rpki.afrinic.net/repository/afrinic/fzc4orKLb6wO4WjazaECCZH2Xv8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 840 (0x348)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CAD03AF, serialNumber=7F3738A2B28B6FAC0EE168DACDA1020991F65EFF
Validity
Not Before: Sep 26 06:28:09 2025 GMT
Not After : Sep 19 06:28:09 2028 GMT
Subject: CN=68d6327e-687d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7a:ba:ff:1c:a0:e4:11:bd:d4:4f:4c:6d:22:
1b:79:86:ff:b8:64:ea:12:86:4e:16:bc:36:d4:85:
42:92:d4:7c:a6:fa:36:bb:cb:72:3b:79:f3:ef:7e:
46:42:72:1a:3b:03:14:3f:33:a9:c3:c5:66:2e:b3:
02:96:85:1d:61:84:05:dd:01:f9:97:eb:b5:d3:5c:
5f:f8:54:18:ea:76:74:c3:d2:74:a3:a4:26:72:74:
01:5b:03:d3:2c:dd:f1:47:58:f4:f9:37:e4:ef:bf:
b1:43:65:0c:8b:9d:e0:96:cb:66:33:25:6a:20:30:
ac:86:85:39:13:47:7e:f7:9d:b7:52:90:9e:b4:8c:
ee:92:12:92:d7:2c:fd:6e:06:f0:e9:e6:d2:4f:d3:
70:8a:d9:21:2d:13:b6:ac:d6:89:19:18:3d:f5:83:
23:43:21:6f:8f:1f:38:0a:cd:3b:38:16:34:9c:c5:
1b:c4:5a:2c:5d:07:95:36:16:ca:ec:d2:78:6b:51:
7a:9b:22:5a:b0:99:26:cd:71:2c:71:85:de:ae:18:
ae:3d:31:96:c1:f9:ce:0c:a6:80:69:f1:2a:73:4a:
e3:d0:3a:22:81:3e:10:e2:1e:eb:51:b2:ad:41:f9:
c0:92:a3:f1:6a:f3:b6:23:51:e6:2d:bd:18:a8:8b:
33:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:5B:9B:81:C2:80:52:3C:73:65:0A:0D:76:9C:17:FA:A0:2E:B4:84
X509v3 Authority Key Identifier:
keyid:7F:37:38:A2:B2:8B:6F:AC:0E:E1:68:DA:CD:A1:02:09:91:F6:5E:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CAD03/90CF9CCA1F4211EEB18184614AD9E6FC/fzc4orKLb6wO4WjazaECCZH2Xv8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/fzc4orKLb6wO4WjazaECCZH2Xv8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CAD03/90CF9CCA1F4211EEB18184614AD9E6FC/FB21D3049AA111F0A09833EDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.206.112.0/23
Signature Algorithm: sha256WithRSAEncryption
51:32:7c:44:22:0e:32:4a:0e:b1:a4:33:00:db:eb:10:db:62:
0d:92:16:84:f8:3a:8b:6e:74:7d:67:10:0d:05:8c:e4:e9:95:
1e:f4:23:12:7b:b8:73:e2:b8:39:4f:4e:c2:88:28:61:38:11:
86:7e:a5:29:09:20:81:a4:06:47:b7:85:cf:e4:09:e7:72:ea:
3f:c9:9b:58:17:e6:6f:d5:7a:8f:5a:9a:b0:b0:90:ad:79:67:
12:65:16:14:c6:a5:78:2a:e6:db:a0:4f:27:50:b0:3d:df:04:
1c:7c:dc:20:55:d2:4c:74:c3:c6:af:6e:b4:58:da:d2:2b:9a:
99:ed:09:78:a2:5b:dd:18:6a:81:28:9a:9d:c2:65:d6:24:dc:
e9:08:89:93:8a:b9:26:d2:7e:c1:76:5b:aa:c8:bb:0d:ea:f2:
b0:9a:96:0a:dc:8e:5f:55:fc:f8:3d:d0:80:b9:b4:18:94:b5:
31:60:5f:50:63:4d:e8:bf:42:4f:30:e5:67:dc:61:32:d0:c4:
88:ce:87:95:98:5d:17:68:23:74:18:3c:8b:6e:85:73:b7:f0:
1e:87:a4:1d:4f:31:91:93:7b:b0:05:b3:12:ef:d4:13:2a:0a:
c2:9e:a6:8b:3c:e8:8d:65:19:37:f2:1e:cc:f8:02:d4:54:00:
5a:9d:a4:e0
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICA0gwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
Q0FEMDNBRjExMC8GA1UEBRMoN0YzNzM4QTJCMjhCNkZBQzBFRTE2OERBQ0RBMTAy
MDk5MUY2NUVGRjAeFw0yNTA5MjYwNjI4MDlaFw0yODA5MTkwNjI4MDlaMBgxFjAU
BgNVBAMTDTY4ZDYzMjdlLTY4N2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC9err/HKDkEb3UT0xtIht5hv+4ZOoShk4WvDbUhUKS1Hym+ja7y3I7efPv
fkZCcho7AxQ/M6nDxWYuswKWhR1hhAXdAfmX67XTXF/4VBjqdnTD0nSjpCZydAFb
A9Ms3fFHWPT5N+Tvv7FDZQyLneCWy2YzJWogMKyGhTkTR373nbdSkJ60jO6SEpLX
LP1uBvDp5tJP03CK2SEtE7as1okZGD31gyNDIW+PHzgKzTs4FjScxRvEWixdB5U2
Fsrs0nhrUXqbIlqwmSbNcSxxhd6uGK49MZbB+c4MpoBp8SpzSuPQOiKBPhDiHutR
sq1B+cCSo/Fq87YjUeYtvRioizMHAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUeVub
gcKAUjxzZQoNdpwX+qAutIQwHwYDVR0jBBgwFoAUfzc4orKLb6wO4WjazaECCZH2
Xv8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkNBRDAzLzkwQ0Y5Q0NBMUY0MjExRUVCMTgxODQ2MTRBRDlFNkZDL2Z6YzRv
cktMYjZ3TzRXamF6YUVDQ1pIMlh2OC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2Z6YzRvcktMYjZ3TzRXamF6YUVDQ1pIMlh2OC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkNBRDAzLzkwQ0Y5Q0NBMUY0MjExRUVCMTgxODQ2MTRB
RDlFNkZDL0ZCMjFEMzA0OUFBMTExRjBBMDk4MzNFRERBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFmznAwDQYJKoZIhvcNAQEL
BQADggEBAFEyfEQiDjJKDrGkMwDb6xDbYg2SFoT4OotudH1nEA0FjOTplR70IxJ7
uHPiuDlPTsKIKGE4EYZ+pSkJIIGkBke3hc/kCedy6j/Jm1gX5m/Veo9amrCwkK15
ZxJlFhTGpXgq5tugTydQsD3fBBx83CBV0kx0w8avbrRY2tIrmpntCXiiW90YaoEo
mp3CZdYk3OkIiZOKuSbSfsF2W6rIuw3q8rCalgrcjl9V/Pg90IC5tBiUtTFgX1Bj
Tei/Qk8w5WfcYTLQxIjOh5WYXRdoI3QYPItuhXO38B6HpB1PMZGTe7AFsxLv1BMq
CsKepos86I1lGTfyHsz4AtRUAFqdpOA=
-----END CERTIFICATE-----
Generated at Mon Oct 20 20:49:05 2025 by rpki-client