Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/3B0BC528A8E011F08381ECAFDAE4EC9C.roa
File: 3B0BC528A8E011F08381ECAFDAE4EC9C.roa (raw, json)
Hash identifier: p8rygDaqMlfKM5+mFXH3h51l6FuqzUHfYdCJkipQXZk=
Subject key identifier: 08:08:10:05:DE:9D:0F:AA:9C:69:34:70:2B:FB:E5:62:59:7F:04:9D
Certificate issuer: /CN=F36F0628AF/serialNumber=8605D7599A0402F70EC2F258D6C16BD2E4E8D1FE
Certificate serial: 06B3
Authority key identifier: 86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/3B0BC528A8E011F08381ECAFDAE4EC9C.roa
Signing time: Tue 14 Oct 2025 09:29:07 +0000
ROA not before: Tue 14 Oct 2025 09:29:02 +0000
ROA not after: Wed 14 Oct 2026 09:29:02 +0000
asID: 3320
IP address blocks: 196.44.120.0/22 maxlen: 24
196.44.125.0/24 maxlen: 24
196.44.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.mft
rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1715 (0x6b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F0628AF, serialNumber=8605D7599A0402F70EC2F258D6C16BD2E4E8D1FE
Validity
Not Before: Oct 14 09:29:02 2025 GMT
Not After : Oct 14 09:29:02 2026 GMT
Subject: CN=68ee17e3-802e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:24:24:01:60:4b:83:b1:d3:9f:83:ae:aa:f8:
01:26:10:dc:72:4a:a7:9f:8d:36:c9:f6:ed:3f:94:
93:6b:60:f1:c4:30:78:90:c5:65:10:4d:02:3d:25:
da:e9:06:ec:80:96:d6:51:b4:b5:41:0a:c1:d7:d1:
a9:b0:93:18:c1:6d:39:8e:6c:e5:6a:17:92:cd:9c:
74:9e:27:eb:5a:07:c2:0b:b8:3e:0e:47:4d:40:ba:
48:19:9c:ad:7e:db:1a:ef:eb:7c:79:75:73:4a:56:
e0:f5:fd:09:7f:f1:86:95:1e:2c:2e:ea:0a:e3:1d:
8d:27:a8:47:df:f4:d6:72:47:fb:5b:8d:73:f9:83:
bf:67:54:77:34:0b:79:bb:38:a4:50:02:3a:d6:d2:
5a:26:45:66:44:9d:dd:2c:a9:3f:4c:f9:c7:0f:4c:
1f:d3:8f:5f:7e:1b:0c:6f:fd:94:81:6e:84:2f:13:
de:74:01:29:df:bb:84:7f:1a:1d:fb:7b:8a:ff:57:
01:fe:a2:0f:85:4a:38:89:18:92:92:49:5f:b1:37:
51:1b:13:8e:08:dd:d6:ac:e4:0e:a4:60:97:a2:f8:
13:06:7c:3e:de:3f:3a:fc:6d:23:65:10:d7:99:6e:
7e:95:40:9b:2c:44:5f:46:39:49:00:a9:c3:20:32:
78:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:08:10:05:DE:9D:0F:AA:9C:69:34:70:2B:FB:E5:62:59:7F:04:9D
X509v3 Authority Key Identifier:
keyid:86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/3B0BC528A8E011F08381ECAFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.44.120.0/22
196.44.125.0/24
196.44.127.0/24
Signature Algorithm: sha256WithRSAEncryption
43:d5:87:7a:cc:90:42:70:d4:62:d8:21:61:76:ca:9c:32:af:
6c:ff:a4:09:b7:5f:cb:26:6b:41:e4:76:b1:6a:8b:7b:d1:19:
47:c3:39:7e:c2:d9:bf:7d:ce:87:34:12:05:09:dd:f9:33:88:
39:2e:28:a5:10:af:93:4c:ef:20:f9:3b:fe:85:48:57:3a:c9:
c8:bd:f4:6c:42:76:be:a8:d7:de:62:70:40:f8:17:d3:bb:18:
b0:4e:10:2f:ce:ab:73:91:c0:d9:36:cc:d3:bf:8c:5c:38:a3:
51:e4:37:b5:cf:f0:0f:bb:46:c1:b7:11:94:23:91:d9:03:8a:
6d:67:c2:21:45:cc:85:e0:a4:b7:21:3b:49:87:46:27:6e:80:
41:78:6e:67:5f:b3:4e:27:11:dc:01:02:83:70:0b:a8:cb:c6:
d9:45:b5:2d:53:7c:91:dd:43:a0:fe:48:0f:dd:df:40:a9:6c:
cf:9e:f4:70:2d:b1:ea:b9:9e:c3:dd:aa:d8:84:a3:af:cd:c7:
d5:45:a9:d1:7d:64:1a:39:03:6b:ec:79:d9:78:f0:3a:5b:5b:
6d:d2:77:b8:87:cb:2a:65:db:da:8f:6a:70:eb:fa:47:6e:f4:
68:7a:4f:fa:1d:7d:d5:88:8f:53:6c:1e:71:7a:75:e4:9e:9b:
44:93:71:38
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgICBrMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RjA2MjhBRjExMC8GA1UEBRMoODYwNUQ3NTk5QTA0MDJGNzBFQzJGMjU4RDZDMTZC
RDJFNEU4RDFGRTAeFw0yNTEwMTQwOTI5MDJaFw0yNjEwMTQwOTI5MDJaMBgxFjAU
BgNVBAMTDTY4ZWUxN2UzLTgwMmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDRJCQBYEuDsdOfg66q+AEmENxySqefjTbJ9u0/lJNrYPHEMHiQxWUQTQI9
JdrpBuyAltZRtLVBCsHX0amwkxjBbTmObOVqF5LNnHSeJ+taB8ILuD4OR01AukgZ
nK1+2xrv63x5dXNKVuD1/Ql/8YaVHiwu6grjHY0nqEff9NZyR/tbjXP5g79nVHc0
C3m7OKRQAjrW0lomRWZEnd0sqT9M+ccPTB/Tj19+Gwxv/ZSBboQvE950ASnfu4R/
Gh37e4r/VwH+og+FSjiJGJKSSV+xN1EbE44I3das5A6kYJei+BMGfD7ePzr8bSNl
ENeZbn6VQJssRF9GOUkAqcMgMnj3AgMBAAGjggKxMIICrTAdBgNVHQ4EFgQUCAgQ
Bd6dD6qcaTRwK/vlYll/BJ0wHwYDVR0jBBgwFoAUhgXXWZoEAvcOwvJY1sFr0uTo
0f4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkYwNjI4L0YwQ0NCRTdDRkJBMDExRUJBQjc4NkM0OUQ4QTAxNENFL2hnWFhX
Wm9FQXZjT3d2Slkxc0ZyMHVUbzBmNC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2hnWFhXWm9FQXZjT3d2Slkxc0ZyMHVUbzBmNC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkYwNjI4L0YwQ0NCRTdDRkJBMDExRUJBQjc4NkM0OUQ4
QTAxNENFLzNCMEJDNTI4QThFMDExRjA4MzgxRUNBRkRBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBIDBALELHgDBADELH0DBADELH8w
DQYJKoZIhvcNAQELBQADggEBAEPVh3rMkEJw1GLYIWF2ypwyr2z/pAm3X8sma0Hk
drFqi3vRGUfDOX7C2b99zoc0EgUJ3fkziDkuKKUQr5NM7yD5O/6FSFc6yci99GxC
dr6o195icED4F9O7GLBOEC/Oq3ORwNk2zNO/jFw4o1HkN7XP8A+7RsG3EZQjkdkD
im1nwiFFzIXgpLchO0mHRidugEF4bmdfs04nEdwBAoNwC6jLxtlFtS1TfJHdQ6D+
SA/d30CpbM+e9HAtseq5nsPdqtiEo6/Nx9VFqdF9ZBo5A2vsedl48DpbW23Sd7iH
yypl29qPanDr+kdu9Gh6T/odfdWIj1NsHnF6deSem0STcTg=
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:55:52 2025 by rpki-client