Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/9A7DF88C679011F0B455E9F3DAE4EC9C.roa
File: 9A7DF88C679011F0B455E9F3DAE4EC9C.roa (raw, json)
Hash identifier: DqzHQfDuvL4YrjMJokidyvNwcF5esN+Y9RdafAwqkNU=
Subject key identifier: BD:85:62:7E:6C:84:98:6C:AF:E3:44:40:49:D2:C9:92:7D:55:B5:E6
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0C9B
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/9A7DF88C679011F0B455E9F3DAE4EC9C.roa
Signing time: Wed 23 Jul 2025 06:45:22 +0000
ROA not before: Wed 23 Jul 2025 06:45:16 +0000
ROA not after: Thu 01 Jan 2026 06:45:16 +0000
asID: 29802
IP address blocks: 102.135.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Jul 2025 08:45:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3227 (0xc9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Jul 23 06:45:16 2025 GMT
Not After : Jan 1 06:45:16 2026 GMT
Subject: CN=68808502-e54a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:34:e3:8e:79:e5:13:e7:55:c2:09:87:71:36:
c5:72:d8:8f:33:8f:d0:ea:dc:55:ee:8a:8b:e3:9b:
f3:64:39:7e:6d:4a:63:63:3f:c9:92:e5:59:25:53:
02:62:74:4b:45:15:55:b4:36:0e:25:16:6f:97:13:
8e:be:c5:ec:07:8d:c8:22:c3:17:f3:41:3b:df:12:
98:b7:ec:c4:a9:57:54:b5:af:c7:69:d5:c0:69:57:
9e:1a:4b:2a:07:90:85:99:08:37:43:5b:6d:22:66:
f1:7f:3f:bd:04:ec:57:da:6d:e0:3a:39:76:b0:7b:
cf:9c:41:d1:84:db:d7:f9:ca:6b:f6:08:3d:f1:d3:
7a:22:cd:a3:a8:0c:5e:9f:11:dd:e4:9b:f8:74:f4:
ab:36:f6:a5:dc:bc:1e:ea:09:9c:80:09:46:8c:a1:
f0:23:db:3a:44:57:3f:d3:6b:0e:cd:d2:29:f1:17:
ba:55:92:47:55:ec:a5:f6:3e:a3:1c:ef:18:94:2c:
04:00:91:a3:6b:dd:42:b6:1b:7e:18:00:11:fa:95:
4d:5c:4f:af:f6:69:a2:38:36:d2:25:7b:05:fb:8f:
75:1d:0e:6b:a5:a3:bc:7d:3d:e2:13:b9:32:ff:61:
74:a5:b8:f7:26:96:ac:ae:73:f8:a9:0c:56:2b:ef:
43:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:85:62:7E:6C:84:98:6C:AF:E3:44:40:49:D2:C9:92:7D:55:B5:E6
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/9A7DF88C679011F0B455E9F3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.95.0/24
Signature Algorithm: sha256WithRSAEncryption
43:cc:b5:a9:f1:cd:3e:f4:c2:76:be:8a:2c:c9:59:e2:1a:80:
7f:50:99:ab:f0:60:af:13:85:fc:47:6b:f2:ea:7a:9d:a3:a2:
cd:a1:0c:e9:76:d9:07:67:98:3e:39:b4:2a:4f:e4:cd:71:16:
2d:36:f8:5c:60:df:cc:76:0c:2e:9b:64:02:ed:39:b8:9a:e9:
fe:6a:8a:15:b8:30:92:f3:86:d1:21:f5:3a:d9:dd:e8:fd:8b:
79:e4:a7:af:97:d0:7b:f6:82:b8:90:23:c8:d2:73:d3:15:33:
08:fe:ed:5c:54:79:98:6f:9b:f8:10:4f:ce:9c:c9:6f:79:9f:
07:72:06:88:44:de:0c:92:c9:e1:3f:28:7c:b6:e7:f1:73:42:
de:86:72:b1:c1:60:1f:55:3c:a7:fa:36:8c:63:d2:01:e2:2a:
3e:1d:f0:8c:53:9f:13:ed:87:98:df:2c:e4:66:83:73:bc:32:
06:fd:a1:a2:80:04:c6:85:1e:e0:c3:3f:0a:d0:39:a8:df:8e:
0a:0e:9f:19:20:0c:e9:eb:f1:f8:4a:80:33:d2:b8:5f:7b:64:
cd:fd:f7:a8:85:67:cd:2e:ca:20:40:9c:0f:61:35:78:73:df:
ff:7e:eb:8b:fb:9c:13:81:4f:ea:d6:0f:13:ac:c3:43:21:94:
93:79:b1:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 00:55:43 2025 by rpki-client