Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/70DEC97A60AB11F09A178779DAE4EC9C.roa
File: 70DEC97A60AB11F09A178779DAE4EC9C.roa (raw, json)
Hash identifier: JKEs7q38XOvn03wjR/K6IFQYUlVg2u1dU9j8xj6Ogb4=
Subject key identifier: 4B:4D:0D:9A:22:1F:A6:50:86:F7:64:82:AF:DA:17:CA:EE:08:72:88
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0C4D
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/70DEC97A60AB11F09A178779DAE4EC9C.roa
Signing time: Mon 14 Jul 2025 12:09:50 +0000
ROA not before: Mon 14 Jul 2025 12:09:45 +0000
ROA not after: Tue 16 Jun 2026 12:09:45 +0000
asID: 397373
IP address blocks: 102.135.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 23 Jul 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3149 (0xc4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Jul 14 12:09:45 2025 GMT
Not After : Jun 16 12:09:45 2026 GMT
Subject: CN=6874f38e-f95e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a4:a1:aa:1e:5e:5b:d0:5d:b0:16:ec:d6:5b:
2e:95:85:83:d0:1f:16:85:33:83:64:43:75:17:9e:
ce:50:4a:12:74:3e:0d:4d:5b:68:8e:62:f5:b4:1f:
68:47:5c:be:e1:03:26:d1:1e:04:9d:a3:ac:c0:b1:
97:4f:7b:9a:ac:c3:05:c4:93:20:d7:7c:96:3c:12:
58:74:e1:66:b6:59:d2:d2:24:17:12:56:6d:17:ac:
40:bb:78:04:68:54:9f:3e:20:5d:29:2f:c8:2b:22:
91:ab:4f:f6:7e:aa:19:22:d0:76:02:ce:f7:03:e3:
49:31:75:c9:1e:35:ff:e0:15:66:ba:05:da:f9:d9:
13:40:d2:ca:e2:a3:65:aa:3e:fe:3a:e1:63:b5:14:
99:af:d0:98:99:55:3c:e3:59:49:a8:37:15:57:d2:
e8:97:0f:8e:2e:0c:6a:5e:95:6a:6b:3a:b2:54:df:
4f:36:ee:0a:64:69:fd:cb:86:e0:9e:5a:22:73:d2:
00:5d:37:8d:fc:41:d4:85:88:c7:d6:44:1e:45:fe:
a9:ec:fd:d8:54:c6:81:10:bc:c5:1b:6f:2f:0a:b3:
96:9b:8a:90:89:27:e0:26:b5:af:40:ca:c8:e0:ea:
00:71:66:f2:da:03:6c:7a:09:15:23:ff:c2:24:e1:
3b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:4D:0D:9A:22:1F:A6:50:86:F7:64:82:AF:DA:17:CA:EE:08:72:88
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/70DEC97A60AB11F09A178779DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.113.0/24
Signature Algorithm: sha256WithRSAEncryption
d8:94:41:37:32:0d:49:1b:1d:02:1c:5c:e9:db:1c:1c:79:fd:
9e:ff:80:58:96:42:d9:ef:2b:76:71:76:49:e9:af:92:30:74:
7a:17:e5:72:a1:12:35:b6:78:48:c0:b7:45:0e:a9:e9:1c:fd:
d3:cf:73:b9:92:6c:bf:56:ea:84:3c:fd:49:13:8b:1b:71:60:
be:98:c5:d6:1c:85:c4:31:07:43:4c:3d:26:0a:66:c0:4f:9b:
30:a6:d2:cf:3a:37:e5:7f:44:30:9c:07:d8:6d:9b:03:10:69:
ab:e2:93:e0:37:44:e4:be:70:70:df:3c:1c:7c:75:af:15:ee:
5a:be:0e:8e:86:ba:c6:8f:58:9e:b9:80:28:cf:37:4c:13:c3:
25:0b:c0:54:15:59:c0:a4:13:fd:35:97:6e:69:e4:3b:04:aa:
02:c0:ae:82:76:be:3a:49:45:04:9d:a7:d6:4a:0c:84:9e:5b:
0c:8c:92:87:f1:70:ed:87:8b:08:af:44:76:75:09:09:27:69:
e4:de:b6:a6:07:a1:fd:52:19:2e:8b:09:28:bf:35:04:1d:03:
77:35:df:82:7e:84:2b:a5:15:f9:c4:27:b0:66:84:8a:f8:2f:
d6:4b:09:e9:85:50:00:ee:f1:cf:15:f5:92:94:0d:91:9a:f1:
7b:47:f2:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 07:26:38 2025 by rpki-client