Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/03A1A33862C611F0A2D7F5AFDAE4EC9C.roa
File: 03A1A33862C611F0A2D7F5AFDAE4EC9C.roa (raw, json)
Hash identifier: Iahht5GA2y+pKJUF6G/OEq0GgCnobI9nCiBOoMIjm8A=
Subject key identifier: E3:6E:35:11:34:9E:0B:4C:FA:5B:52:F0:16:38:BF:B6:08:78:D8:A1
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0C6A
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/03A1A33862C611F0A2D7F5AFDAE4EC9C.roa
Signing time: Thu 17 Jul 2025 04:25:06 +0000
ROA not before: Thu 17 Jul 2025 04:25:00 +0000
ROA not after: Tue 16 Jun 2026 04:25:00 +0000
asID: 211486
IP address blocks: 102.135.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 23 Jul 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3178 (0xc6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Jul 17 04:25:00 2025 GMT
Not After : Jun 16 04:25:00 2026 GMT
Subject: CN=68787b22-2ebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f0:f0:d6:7e:70:e1:21:96:a8:e5:4e:c4:9a:
80:94:bc:49:6b:a1:d3:e4:80:9f:4d:89:b1:82:b3:
f8:0c:62:9c:01:b0:36:89:05:e4:18:74:ce:37:3d:
8e:75:51:2e:29:84:10:6a:97:ce:c6:53:e4:e9:f8:
56:31:3b:9b:3f:c6:a2:00:7e:85:f0:70:89:25:bc:
0e:c0:56:9a:d8:df:72:ee:82:a0:9f:4e:dc:da:2d:
0b:be:ca:8c:5d:c6:5e:7c:74:cc:45:4a:ea:a2:ea:
aa:49:3d:9d:c1:d5:92:be:fa:88:4c:49:82:9f:7a:
26:2b:53:ab:64:65:6c:e4:4e:89:46:be:6f:69:8d:
73:fb:6b:01:62:2f:46:88:af:1c:55:d5:32:97:90:
2d:15:db:d8:cc:c2:d6:6c:c1:f5:85:a5:c4:23:87:
a6:64:a3:11:3c:77:eb:b1:2a:b5:60:5e:43:00:c1:
89:fc:9d:be:c9:c6:ef:c0:c4:43:d7:81:8a:40:99:
2e:cf:71:b5:38:b4:50:23:56:68:5d:19:9f:a6:b8:
d7:33:df:2d:3a:41:14:90:86:1d:00:47:b1:ce:fe:
79:1a:e7:a6:c6:d5:1d:5b:3c:d0:4c:69:bf:25:ba:
cf:6c:32:b2:3b:a2:e8:f3:93:41:40:b6:3b:14:48:
c2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:6E:35:11:34:9E:0B:4C:FA:5B:52:F0:16:38:BF:B6:08:78:D8:A1
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/03A1A33862C611F0A2D7F5AFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.0.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:86:58:ca:ae:a3:2f:95:01:0b:f0:c4:c2:3a:d4:c6:09:20:
79:a7:4e:8d:01:fe:a2:29:66:70:d4:c1:ec:da:0d:ca:38:1d:
9a:71:af:c8:bc:e5:db:83:d9:41:23:a4:ce:74:24:a4:d6:1b:
82:9f:ea:c4:d5:ba:de:e1:a4:06:f6:fe:b7:b0:9e:4c:1f:08:
65:75:e6:93:0e:e0:b5:bf:66:73:06:2d:7d:4c:fa:07:10:ab:
20:32:81:6c:0b:c4:d3:d3:f4:4c:83:30:4b:db:04:3f:ec:4d:
3c:32:09:2e:9a:73:72:d0:5d:a3:3d:b5:74:c5:18:d1:6c:98:
76:38:26:af:64:49:7c:b7:42:07:34:66:f1:92:f5:99:94:10:
f6:75:8f:2a:92:e3:18:85:cf:69:af:6f:a7:06:f7:8b:b5:a8:
2a:65:13:2b:bd:e4:ae:56:a4:25:d9:dc:4e:c1:09:3d:65:80:
9d:69:43:5f:a7:92:6d:f6:cb:ac:e5:a9:d3:50:82:81:7d:df:
75:31:d9:00:84:12:ec:b5:f7:aa:a8:a7:d4:7e:d7:64:7b:15:
e3:88:37:c5:4e:3b:88:45:0f:c1:be:8d:55:a1:14:f0:aa:44:
15:71:65:f2:d8:0b:07:72:b6:c1:b6:a8:ae:4b:80:c2:d2:48:
f4:ce:cd:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 18:11:08 2025 by rpki-client