Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/86F08AB460AB11F0A822E179DAE4EC9C.roa
File: 86F08AB460AB11F0A822E179DAE4EC9C.roa (raw, json)
Hash identifier: ODV1BlUlsw0+uwsPNd0P3tYcH9zJpGn/wteti+iUSqI=
Subject key identifier: 88:2C:38:69:E1:89:5B:C2:7D:84:38:3C:46:9B:B5:B0:E0:05:96:C7
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0C4F
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/86F08AB460AB11F0A822E179DAE4EC9C.roa
Signing time: Mon 14 Jul 2025 12:10:27 +0000
ROA not before: Mon 14 Jul 2025 12:10:22 +0000
ROA not after: Tue 16 Jun 2026 12:10:22 +0000
asID: 397373
IP address blocks: 102.135.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 23 Jul 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3151 (0xc4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Jul 14 12:10:22 2025 GMT
Not After : Jun 16 12:10:22 2026 GMT
Subject: CN=6874f3b3-451a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:63:83:6c:8c:0d:d3:ba:0d:ca:c7:f4:9d:af:
e0:b6:f1:e8:40:3d:99:d6:76:0f:e9:b9:ae:5b:ab:
e3:20:fd:58:91:64:0c:df:01:e6:39:29:8c:cc:e9:
2b:e9:be:79:80:f3:c0:db:ae:1f:39:09:f1:a3:83:
36:05:a2:97:c8:91:13:3c:c5:5d:1e:a3:4f:5f:67:
9c:04:90:c9:b9:d0:35:1e:4a:f8:a4:44:c4:c9:2b:
fb:e6:49:96:10:bc:5d:12:a9:30:d0:0c:6d:da:a3:
1d:6b:27:3e:01:55:b4:50:54:f4:75:c5:0c:6a:30:
55:1e:d4:ce:09:82:f4:6c:86:f4:ec:47:d8:d9:d7:
28:7f:33:37:4e:4a:f3:21:25:96:95:a7:c5:55:9b:
51:3e:1e:eb:64:00:2a:69:db:c2:95:0b:e5:46:ec:
6b:4c:0e:a9:c3:15:9f:2a:fb:f1:ae:04:da:16:24:
8d:30:10:65:a3:1f:81:64:9b:a9:93:b5:59:ea:e8:
f3:50:26:dd:ee:77:5d:c1:5c:5d:ab:62:00:e7:a0:
9c:bd:57:4e:53:5d:22:92:e2:51:27:31:9f:da:36:
49:a4:4a:8f:2c:07:d9:1d:97:83:e9:e0:e2:a7:ab:
1c:8e:89:26:b1:de:14:57:fd:29:fd:8f:4d:73:50:
5b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:2C:38:69:E1:89:5B:C2:7D:84:38:3C:46:9B:B5:B0:E0:05:96:C7
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/86F08AB460AB11F0A822E179DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.114.0/24
Signature Algorithm: sha256WithRSAEncryption
74:e3:c5:ff:44:48:b0:b8:8c:53:8a:f4:37:d7:60:ac:91:d0:
e7:a3:f7:ea:85:1e:8e:66:76:ff:26:4b:30:15:d0:52:89:98:
23:4f:59:42:94:b8:34:35:fd:98:8e:4b:27:90:a4:20:b7:30:
0b:43:30:88:49:48:a1:e5:1f:de:8d:91:92:91:49:12:1d:f7:
ab:b3:9d:fb:f8:f1:aa:ef:36:98:4e:22:8a:b2:af:b9:35:0d:
06:16:f7:88:3b:cb:d1:42:51:a8:da:70:50:d8:42:c5:a0:1c:
05:ea:8d:9c:3e:ba:e7:96:72:1a:63:01:8c:85:db:6c:f2:5c:
20:05:51:e4:5c:76:90:64:65:cb:79:ae:b3:d7:d9:31:0a:cb:
eb:ce:46:a4:d1:2d:57:b4:cd:30:d2:40:b3:5a:c7:b9:5b:fc:
a1:b2:6a:0a:09:a8:3c:55:67:f8:6d:05:c8:38:80:90:4d:16:
ef:f1:da:44:ea:8f:15:cf:f9:5d:e8:e8:d1:a0:4b:2b:c0:ed:
8f:9d:8d:65:9d:84:8c:72:f1:7b:8e:04:b1:6f:25:fc:50:4d:
fb:cc:fe:e6:e9:21:c5:f7:dc:d4:aa:db:43:84:cd:d1:ea:47:
1d:95:ec:d4:c6:e6:c9:e1:d4:60:11:9d:33:ca:28:94:12:bb:
77:ff:4d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 07:26:59 2025 by rpki-client