Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/3892D95C58D711F0BA148DA9DAE4EC9C.roa
File: 3892D95C58D711F0BA148DA9DAE4EC9C.roa (raw, json)
Hash identifier: hJHymMlcO7DdVJOm0NGCuayTVjM/ukIEk+x9bfNKekU=
Subject key identifier: 16:A7:4A:C5:24:43:34:E4:3A:2A:6F:CE:6C:B6:A8:ED:9A:F9:1B:9D
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0C20
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/3892D95C58D711F0BA148DA9DAE4EC9C.roa
Signing time: Fri 04 Jul 2025 13:03:04 +0000
ROA not before: Fri 04 Jul 2025 13:02:59 +0000
ROA not after: Sat 04 Jul 2026 13:02:59 +0000
asID: 29802
IP address blocks: 102.135.104.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Jul 2025 02:50:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3104 (0xc20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Jul 4 13:02:59 2025 GMT
Not After : Jul 4 13:02:59 2026 GMT
Subject: CN=6867d108-0817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:bc:d7:6c:c5:2d:bb:b6:1b:dc:75:24:5e:16:
8d:93:8e:ef:ce:cf:f0:1f:6f:84:8f:e4:a2:4e:04:
a0:de:68:20:e3:ae:3b:9d:2e:81:4e:cb:58:df:13:
d8:27:d0:b7:1c:6d:3b:9e:ef:6d:b7:3f:94:0e:6c:
32:8e:cc:a8:9b:f7:e2:bb:b4:11:7c:21:27:3e:ee:
c0:2b:5b:1e:4a:c9:1c:95:0e:86:1b:65:a8:0a:74:
f7:99:3e:c1:ce:5a:6f:b5:4e:af:40:78:94:9a:32:
b2:bb:2c:58:98:e3:9a:40:0c:d4:42:f7:a7:c3:9b:
66:b0:4a:e9:aa:84:79:f6:bd:19:5b:f7:f4:c2:d9:
e3:86:51:a8:cd:14:ee:8c:6f:1d:64:26:44:2c:84:
db:af:eb:67:cc:4a:8b:91:67:e3:f0:77:35:0e:f6:
1f:df:10:81:b7:df:d4:bb:f1:77:eb:81:6f:49:85:
ee:a7:b3:99:d5:aa:b7:d8:38:4d:dd:12:2d:0d:60:
43:6f:41:31:8e:d1:c3:ed:7e:f4:85:7f:35:61:21:
b9:42:ac:96:0a:4c:5b:21:35:07:5a:99:f6:b3:42:
eb:7d:cf:bc:f2:9f:11:75:f5:b9:23:3a:cc:d8:ac:
02:9b:66:af:b8:20:25:f9:89:76:cc:0d:63:d9:ca:
9e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:A7:4A:C5:24:43:34:E4:3A:2A:6F:CE:6C:B6:A8:ED:9A:F9:1B:9D
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/3892D95C58D711F0BA148DA9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.104.0/21
Signature Algorithm: sha256WithRSAEncryption
15:6a:4a:e7:cb:a9:c6:05:6e:0e:e7:ee:eb:9e:9e:68:18:a1:
0f:6e:38:5b:7f:55:89:d2:a6:61:9a:5a:05:29:97:e7:c5:af:
0e:01:4d:31:9c:ee:72:b7:eb:57:94:8b:5b:21:68:cb:0f:78:
e1:38:1e:99:40:12:ac:88:e0:dc:bd:a1:8c:19:5b:f3:db:05:
78:a8:16:8e:9e:40:76:03:72:84:09:15:b7:5c:b4:40:9a:aa:
db:62:c7:37:04:42:fb:50:ec:7a:ca:ed:91:29:15:e6:24:fa:
46:bd:ff:86:8f:d0:23:52:a6:5d:1b:2c:21:56:fa:97:af:1c:
82:20:71:9d:02:9d:e4:7c:cf:bf:21:98:a6:84:59:6e:91:f6:
ff:e4:79:47:4a:9a:45:cb:3a:92:bc:c4:88:45:d4:1d:31:5f:
77:c7:42:93:69:62:be:55:f9:29:1e:46:e8:58:40:82:39:36:
ca:cd:28:f5:cc:d7:c0:92:63:73:75:eb:43:ae:19:b7:21:67:
b3:a9:9e:45:4c:a1:9b:b7:cf:13:cf:7c:09:1b:18:c3:2d:90:
e1:58:b4:70:a9:f6:fb:fb:1e:71:c3:40:85:54:17:7c:0c:78:
db:d5:c2:40:64:47:2c:93:7a:5c:c3:e0:75:af:49:01:4a:d8:
e6:cf:46:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 7 03:19:07 2025 by rpki-client