Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/10A74028661911F0AA9978E0DAE4EC9C.roa
File: 10A74028661911F0AA9978E0DAE4EC9C.roa (raw, json)
Hash identifier: Ao0ZocJSZ8tMWT6zV3q4DRxw29mvwCpuvi3cgwjVsmU=
Subject key identifier: 10:66:3E:BD:22:18:EA:FB:9B:B4:F4:48:4A:E5:5C:63:30:C7:BF:0D
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0C80
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/10A74028661911F0AA9978E0DAE4EC9C.roa
Signing time: Mon 21 Jul 2025 09:57:09 +0000
ROA not before: Mon 21 Jul 2025 09:57:04 +0000
ROA not after: Tue 21 Jul 2026 09:57:04 +0000
asID: 398704
IP address blocks: 196.251.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Jul 2025 08:45:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3200 (0xc80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Jul 21 09:57:04 2025 GMT
Not After : Jul 21 09:57:04 2026 GMT
Subject: CN=687e0ef5-2c01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b6:5b:98:fc:9b:8c:00:14:50:a3:4d:26:24:
fa:ce:4e:d3:a8:fa:30:9c:90:36:0f:d5:7b:7e:46:
51:a1:e4:92:20:4a:5d:22:e4:54:f2:90:0e:a7:73:
37:9a:06:3e:61:79:22:39:ee:76:2c:d8:93:5a:35:
95:3b:8d:f4:49:67:b8:1c:25:bf:3f:0c:69:e7:e4:
6b:1c:d9:42:7c:33:2c:7b:ca:e8:19:95:6d:81:36:
93:45:a6:65:02:a6:b0:55:c6:d2:60:c0:77:c9:5a:
ee:8c:b5:cf:88:c5:79:7c:af:45:f1:fe:57:08:f5:
62:82:60:32:36:39:26:4d:84:5a:23:b1:2a:f5:17:
3f:95:0f:2c:26:5f:21:0d:ba:f1:ed:3c:e0:04:6b:
67:16:92:7c:9d:66:92:b3:a8:30:43:6d:08:90:5d:
c5:31:ed:64:2d:1a:96:a7:db:9a:cf:be:56:db:b5:
6f:55:98:41:59:14:f7:69:4f:a1:1d:b6:45:3b:86:
b1:af:46:1a:ed:c3:07:52:b1:f9:da:e6:2a:51:26:
b6:23:87:45:0d:ad:9d:9a:bf:f4:00:73:6f:4a:95:
64:05:e8:69:82:a2:e2:63:be:c1:3a:88:55:d8:b0:
4a:aa:a4:5b:93:b3:76:7b:55:10:6b:15:f1:ee:98:
97:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:66:3E:BD:22:18:EA:FB:9B:B4:F4:48:4A:E5:5C:63:30:C7:BF:0D
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/10A74028661911F0AA9978E0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.106.0/24
Signature Algorithm: sha256WithRSAEncryption
51:a8:02:15:2d:b0:32:8d:6d:da:bb:f3:14:f5:4d:f7:49:c9:
51:1c:4b:28:89:0a:00:8d:97:a3:4a:c0:6b:c1:db:b9:e0:1c:
a5:8e:42:c4:0d:4f:08:ce:44:f1:19:5e:0e:12:2f:89:e8:d8:
35:30:df:b1:f9:ab:01:fb:0b:e5:a7:d2:9c:d7:67:92:a4:05:
73:e3:a9:b6:dc:ee:e0:f9:dc:3f:2e:b9:75:37:3b:f9:6c:dc:
17:14:b0:fa:31:0e:43:af:40:c3:32:ce:5b:73:72:26:58:40:
86:c1:63:7d:24:ea:38:fe:d6:c3:6c:74:b8:fa:1c:31:c9:7e:
6c:3f:d0:b8:78:fb:71:03:58:19:06:e9:38:d6:48:c9:e4:df:
2a:bd:d4:c9:23:13:8d:7d:1a:50:11:a3:9b:b8:9e:53:07:f0:
bc:f9:71:cb:36:93:14:7a:2f:81:1e:7d:e3:97:17:2f:d3:23:
44:73:d7:5a:e0:7c:96:71:53:8e:97:4b:e5:b3:3e:5b:4d:93:
4e:5e:44:5e:0f:33:d1:30:a4:d6:10:11:d3:5d:30:3b:99:da:
d0:3f:a9:ce:cc:60:6c:a7:ec:fa:7f:b4:fd:33:16:30:69:89:
f6:b2:02:69:84:39:94:ff:f6:06:c1:02:8f:21:46:96:b9:fe:
1b:39:8a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 01:37:05 2025 by rpki-client