Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/1B496B3C60AB11F091416BF4DAE4EC9C.roa
File: 1B496B3C60AB11F091416BF4DAE4EC9C.roa (raw, json)
Hash identifier: 2n8pc+79/wnJ9idhs4JeDPYki+JEgSNsQf+ehNBPvDY=
Subject key identifier: BC:BA:5C:EA:22:B9:2E:31:C0:F4:F8:8E:CC:8A:1B:0E:6A:C0:94:90
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0C45
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/1B496B3C60AB11F091416BF4DAE4EC9C.roa
Signing time: Mon 14 Jul 2025 12:07:27 +0000
ROA not before: Mon 14 Jul 2025 12:07:22 +0000
ROA not after: Tue 16 Jun 2026 12:07:22 +0000
asID: 397373
IP address blocks: 102.135.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 23 Jul 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3141 (0xc45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Jul 14 12:07:22 2025 GMT
Not After : Jun 16 12:07:22 2026 GMT
Subject: CN=6874f2fe-5080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c3:31:60:62:66:52:9f:06:3e:91:55:f9:33:
5c:e8:39:c8:1d:ac:2a:90:e2:95:c7:e5:d6:9b:1a:
0f:75:6a:3e:ee:e3:c8:04:6b:70:7d:36:31:9d:9a:
a8:aa:c5:47:e9:9d:a4:ff:e6:1b:a4:07:d8:0c:82:
20:41:3a:fd:6e:3a:c7:7f:8e:3a:ae:76:b7:40:4f:
a8:b0:a3:f9:5f:6c:73:26:36:7c:c7:78:a4:ca:32:
78:7a:49:4e:91:b7:f0:b3:18:b9:8e:dd:84:57:0b:
25:fc:50:9c:b8:b1:47:dc:8b:9b:6e:cd:59:33:92:
1f:17:ff:1b:53:e8:df:bc:37:36:61:f2:a9:01:60:
7d:ab:16:c7:5a:22:1a:0c:73:f5:7c:b7:09:33:4e:
50:e7:ed:af:30:ee:f4:de:d6:ba:c3:0a:f6:35:68:
63:6e:75:81:a9:0e:a1:cb:ca:06:25:de:39:43:ff:
4e:9e:80:53:2c:bd:1f:eb:3e:a1:f6:e7:73:95:0c:
81:c4:d4:34:10:fa:e2:9b:ca:ed:09:30:b8:dd:f5:
6a:4b:ba:26:37:ee:b8:b9:73:95:f2:98:d7:1e:19:
6c:e8:5f:3a:12:02:43:b4:39:d3:01:a0:46:a1:c2:
6e:e6:20:d0:f4:d0:50:63:bd:90:f2:05:88:14:04:
62:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:BA:5C:EA:22:B9:2E:31:C0:F4:F8:8E:CC:8A:1B:0E:6A:C0:94:90
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/1B496B3C60AB11F091416BF4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.109.0/24
Signature Algorithm: sha256WithRSAEncryption
22:61:5c:a0:f3:7f:78:46:ed:2f:38:92:02:ae:e8:a1:64:0f:
7d:b4:6a:ca:5e:7f:5e:ff:b7:81:0f:1c:fa:72:b0:0b:e9:12:
1e:83:b4:a5:73:0a:04:3d:72:37:80:5c:c4:10:52:f5:d2:14:
72:d4:2e:c9:f2:17:ff:5e:25:b1:2e:56:e0:14:5e:6d:4f:e7:
01:e2:91:80:4e:8c:09:51:63:d3:1e:0b:aa:ef:26:61:bb:e2:
38:c0:c9:f0:43:d5:17:ce:04:af:09:b4:43:2b:3f:2c:70:60:
51:17:85:29:2b:48:54:f4:bd:88:fb:48:18:49:a3:78:44:43:
08:1a:e3:93:83:34:a5:0e:c7:9d:4c:0d:9f:44:17:60:a7:09:
2c:c8:51:5a:0b:6b:0c:0b:a9:3d:bf:b3:19:1c:7a:62:64:02:
6e:5d:5b:9c:4d:af:1c:ae:37:3a:61:ac:03:19:90:94:cf:45:
38:4e:50:33:96:8a:79:aa:37:88:1e:2c:49:91:77:08:8d:0c:
e9:3a:cb:a8:6b:ad:62:95:59:9a:11:d9:99:c2:cc:1e:94:42:
90:68:da:bd:5b:ac:ab:ec:19:fb:82:1d:85:e5:d5:ed:51:15:
69:c8:ac:4b:c5:ad:14:f1:41:d6:1f:3f:fa:5a:70:a3:4a:59:
cb:68:d2:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 07:27:00 2025 by rpki-client