
Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/3E45294C60AA11F0BDFC75EFDAE4EC9C.roa
File: 3E45294C60AA11F0BDFC75EFDAE4EC9C.roa (raw, json)
Hash identifier: PUwtnSu9ZYtGeaENmMLC+SfqYntkWgvjrRSS9HPwEoY=
Subject key identifier: 89:04:E8:0E:1A:C5:DA:3F:DF:BF:AD:80:2E:66:C0:D0:ED:7C:86:EA
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0C35
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/3E45294C60AA11F0BDFC75EFDAE4EC9C.roa
Signing time: Mon 14 Jul 2025 12:01:16 +0000
ROA not before: Mon 14 Jul 2025 12:01:11 +0000
ROA not after: Tue 16 Jun 2026 12:01:11 +0000
asID: 397373
IP address blocks: 102.135.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 23 Jul 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3125 (0xc35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Jul 14 12:01:11 2025 GMT
Not After : Jun 16 12:01:11 2026 GMT
Subject: CN=6874f18c-9973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5e:72:6b:d6:2c:23:11:32:0b:c4:4b:5b:39:
2c:b2:80:eb:c3:58:3c:bc:67:40:d1:f1:1f:a1:1c:
49:19:d9:86:ed:2d:1e:6f:e6:5c:f4:d3:30:bf:0f:
e4:d4:f3:50:ea:04:7f:1d:6a:c6:bd:ab:18:67:ca:
1f:60:02:8f:7c:80:2e:c7:89:b3:d8:9f:c6:14:6a:
ff:48:23:39:13:c1:58:13:50:1c:68:10:66:67:6d:
38:80:08:a6:c7:4d:f0:0e:fe:08:d7:b6:77:5a:76:
1f:2e:1e:7a:00:e2:5e:6b:b2:bd:10:b0:48:b0:81:
0c:c9:e4:81:b6:ed:28:c2:30:9f:c0:33:34:95:92:
17:fd:fc:0c:ca:53:87:af:26:00:c4:94:99:e2:84:
75:86:c7:d1:ea:2b:49:96:23:f9:d8:b2:ad:d2:49:
9d:0c:b2:08:aa:40:b9:11:9a:7f:13:64:66:dd:94:
a7:20:e9:5a:ab:b1:2c:2b:30:26:ed:bc:bf:99:af:
27:fe:b6:80:f5:27:27:ae:de:0f:c1:3b:63:48:09:
b7:6f:de:61:8c:62:65:ea:7c:ef:e9:58:9d:be:1c:
a3:2a:c8:a7:43:1b:20:de:9d:2b:28:3a:a2:94:42:
da:0f:58:34:95:23:a4:b0:9a:f1:14:55:c7:06:9e:
68:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:04:E8:0E:1A:C5:DA:3F:DF:BF:AD:80:2E:66:C0:D0:ED:7C:86:EA
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/3E45294C60AA11F0BDFC75EFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.10.0/24
Signature Algorithm: sha256WithRSAEncryption
74:4c:bf:f8:d6:0a:78:c5:a1:02:35:f1:7c:84:ad:27:70:f8:
d1:77:6d:30:ba:25:82:85:19:bd:74:31:8a:3c:74:db:81:b4:
4d:05:17:97:56:32:9b:4d:1f:00:6c:be:23:e2:0c:51:28:d7:
14:b2:1a:ef:e8:54:37:3a:a5:78:f7:17:2a:97:57:1a:f8:d8:
2c:e6:0b:92:92:58:10:93:91:a2:76:72:b2:5f:d8:da:44:33:
77:70:ae:b0:2f:29:8a:a4:7b:b1:cf:d9:ac:ae:80:41:46:c4:
28:4e:5e:ab:c7:7b:63:6f:b1:f9:e4:b7:88:7a:a2:c8:38:49:
47:fd:46:29:dc:fd:b9:ed:5c:94:16:71:13:f6:84:f4:71:ce:
82:d4:ca:1b:e7:b9:25:3b:d4:1b:a7:c7:f9:5e:2e:bb:b5:96:
b8:12:ab:e5:14:75:8d:94:24:49:19:32:b3:75:30:f9:e2:4e:
e9:7e:33:ab:fd:86:81:d7:4e:06:ba:11:b1:6b:87:b1:c1:85:
e9:09:7c:b7:57:be:0c:47:e2:49:f3:ce:12:a6:21:a6:4c:58:
b5:07:32:c9:6f:21:77:25:c7:ec:0b:4f:ec:d3:b1:45:37:5c:
0d:9f:68:f3:f8:fc:fe:fb:63:ae:1a:ae:24:e3:91:e5:b2:f2:
54:0d:32:bb
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDDUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNTA3MTQxMjAxMTFaFw0yNjA2MTYxMjAxMTFaMBgxFjAU
BgNVBAMTDTY4NzRmMThjLTk5NzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDBXnJr1iwjETILxEtbOSyygOvDWDy8Z0DR8R+hHEkZ2YbtLR5v5lz00zC/
D+TU81DqBH8dasa9qxhnyh9gAo98gC7HibPYn8YUav9IIzkTwVgTUBxoEGZnbTiA
CKbHTfAO/gjXtndadh8uHnoA4l5rsr0QsEiwgQzJ5IG27SjCMJ/AMzSVkhf9/AzK
U4evJgDElJnihHWGx9HqK0mWI/nYsq3SSZ0MsgiqQLkRmn8TZGbdlKcg6VqrsSwr
MCbtvL+Zryf+toD1Jyeu3g/BO2NICbdv3mGMYmXqfO/pWJ2+HKMqyKdDGyDenSso
OqKUQtoPWDSVI6SwmvEUVccGnmivAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUiQTo
DhrF2j/fv62ALmbA0O18huowHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3LzNFNDUyOTRDNjBBQTExRjBCREZDNzVFRkRBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmhwowDQYJKoZIhvcNAQEL
BQADggEBAHRMv/jWCnjFoQI18XyErSdw+NF3bTC6JYKFGb10MYo8dNuBtE0FF5dW
MptNHwBsviPiDFEo1xSyGu/oVDc6pXj3FyqXVxr42CzmC5KSWBCTkaJ2crJf2NpE
M3dwrrAvKYqke7HP2ayugEFGxChOXqvHe2Nvsfnkt4h6osg4SUf9Rinc/bntXJQW
cRP2hPRxzoLUyhvnuSU71Bunx/leLru1lrgSq+UUdY2UJEkZMrN1MPniTul+M6v9
hoHXTga6EbFrh7HBhekJfLdXvgxH4knzzhKmIaZMWLUHMslvIXclx+wLT+zTsUU3
XA2faPP4/P77Y64ariTjkeWy8lQNMrs=
-----END CERTIFICATE-----
Generated at Mon Jul 21 07:24:46 2025 by rpki-client