Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/8DEA9AD660AA11F0AB81C7F1DAE4EC9C.roa
File: 8DEA9AD660AA11F0AB81C7F1DAE4EC9C.roa (raw, json)
Hash identifier: NI+M5MrKixHO3Mxk1xp4Ird8qoQWF21YhrSYa4m+y8U=
Subject key identifier: 2F:05:8D:0C:5C:54:AC:7C:57:F8:F0:0D:01:7A:F3:9B:06:02:C4:37
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0C3B
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/8DEA9AD660AA11F0AB81C7F1DAE4EC9C.roa
Signing time: Mon 14 Jul 2025 12:03:29 +0000
ROA not before: Mon 14 Jul 2025 12:03:24 +0000
ROA not after: Tue 16 Jun 2026 12:03:24 +0000
asID: 397373
IP address blocks: 102.135.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 23 Jul 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3131 (0xc3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Jul 14 12:03:24 2025 GMT
Not After : Jun 16 12:03:24 2026 GMT
Subject: CN=6874f211-dd76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:51:bf:29:b8:06:d1:7e:d3:6b:22:64:9c:a3:
fa:1b:28:53:71:58:68:26:37:32:ed:8b:7b:7b:e8:
5a:dd:e2:8a:f2:d4:75:aa:19:93:eb:78:11:76:b5:
05:61:ad:f9:4f:9f:6a:9a:6c:be:1f:e2:03:43:f9:
cf:85:57:eb:d3:72:3d:8b:26:d9:20:24:78:24:41:
fc:cf:7d:dd:ea:91:b2:63:23:92:08:e7:a2:27:03:
2f:4e:b1:fa:30:64:38:fb:14:b3:bd:98:22:7b:f0:
e9:8e:67:a8:b6:09:52:04:57:8a:23:aa:49:b9:56:
56:10:66:2e:e7:c7:91:94:8f:8b:44:fd:7b:4a:c6:
3a:57:50:04:ca:a7:3d:cd:fd:f0:7d:d9:c9:0e:ac:
bd:0a:a9:b7:92:ab:0e:48:46:1b:e3:7f:bf:0f:96:
f7:7b:e0:ed:cb:fc:df:05:e9:97:3d:95:11:27:5e:
9e:28:dc:52:0a:e0:aa:aa:e1:15:3c:98:c7:f2:93:
0f:be:d4:68:81:fe:e2:3c:28:0c:0f:f7:bb:a4:94:
97:10:0f:79:86:5a:b4:b2:60:b9:ba:b3:ea:a1:b5:
e2:85:1a:10:35:4a:a3:89:d8:0b:33:c8:a7:1e:e2:
b4:26:55:6f:06:53:7b:66:5f:fa:1e:18:44:29:76:
64:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:05:8D:0C:5C:54:AC:7C:57:F8:F0:0D:01:7A:F3:9B:06:02:C4:37
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/8DEA9AD660AA11F0AB81C7F1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.104.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:9e:67:e8:48:39:f1:ea:38:47:30:be:1a:cd:7c:1c:33:bc:
aa:82:3f:91:c0:86:37:67:27:66:32:e0:32:3d:77:c6:ef:62:
05:f5:14:31:95:5c:ee:d6:34:29:82:62:98:8d:de:29:a7:23:
ff:fe:62:8f:c5:18:1f:e0:be:47:c3:81:e8:c4:4a:4f:a3:0c:
af:7d:95:e7:aa:08:93:79:4d:01:44:82:db:87:92:44:b1:0e:
c5:28:65:7d:94:5c:09:3e:31:c3:43:67:02:e7:f1:a4:cd:b3:
5e:7e:08:9a:ab:99:13:a0:bf:d1:23:cf:a2:38:70:c6:15:e4:
c8:00:b1:43:3e:9d:2a:d5:93:ee:72:86:6d:b4:1f:2e:49:68:
1e:84:d8:04:c1:95:29:4c:cb:81:c6:8f:9b:42:3d:f3:e4:81:
2a:17:cb:4d:c6:de:37:83:4e:7c:e2:aa:70:13:b4:df:71:70:
01:35:69:db:ea:d1:8f:d3:8b:8a:95:47:7b:21:28:f4:9c:b6:
7b:bc:73:4b:64:50:2b:42:a9:3d:b0:29:63:b8:d0:d5:72:c8:
aa:d2:2e:a7:0b:a3:c4:1f:0b:63:1d:dd:db:2d:06:8b:c5:ef:
10:33:c6:7c:f3:81:55:18:3b:ac:f2:51:3e:15:a0:8e:e7:2b:
41:55:5d:16
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDDswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNTA3MTQxMjAzMjRaFw0yNjA2MTYxMjAzMjRaMBgxFjAU
BgNVBAMTDTY4NzRmMjExLWRkNzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC+Ub8puAbRftNrImSco/obKFNxWGgmNzLti3t76Frd4ory1HWqGZPreBF2
tQVhrflPn2qabL4f4gND+c+FV+vTcj2LJtkgJHgkQfzPfd3qkbJjI5II56InAy9O
sfowZDj7FLO9mCJ78OmOZ6i2CVIEV4ojqkm5VlYQZi7nx5GUj4tE/XtKxjpXUATK
pz3N/fB92ckOrL0KqbeSqw5IRhvjf78Plvd74O3L/N8F6Zc9lREnXp4o3FIK4Kqq
4RU8mMfykw++1GiB/uI8KAwP97uklJcQD3mGWrSyYLm6s+qhteKFGhA1SqOJ2Asz
yKce4rQmVW8GU3tmX/oeGEQpdmRpAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQULwWN
DFxUrHxX+PANAXrzmwYCxDcwHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3LzhERUE5QUQ2NjBBQTExRjBBQjgxQzdGMURBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmh2gwDQYJKoZIhvcNAQEL
BQADggEBANGeZ+hIOfHqOEcwvhrNfBwzvKqCP5HAhjdnJ2Yy4DI9d8bvYgX1FDGV
XO7WNCmCYpiN3imnI//+Yo/FGB/gvkfDgejESk+jDK99leeqCJN5TQFEgtuHkkSx
DsUoZX2UXAk+McNDZwLn8aTNs15+CJqrmROgv9Ejz6I4cMYV5MgAsUM+nSrVk+5y
hm20Hy5JaB6E2ATBlSlMy4HGj5tCPfPkgSoXy03G3jeDTnziqnATtN9xcAE1advq
0Y/Ti4qVR3shKPSctnu8c0tkUCtCqT2wKWO40NVyyKrSLqcLo8QfC2Md3dstBovF
7xAzxnzzgVUYO6zyUT4VoI7nK0FVXRY=
-----END CERTIFICATE-----
Generated at Mon Jul 21 07:27:21 2025 by rpki-client