Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/A37876DE60AA11F0BC488CF3DAE4EC9C.roa
File: A37876DE60AA11F0BC488CF3DAE4EC9C.roa (raw, json)
Hash identifier: yfGW6o3mOLvjWZCHgPs1b+nHN8WxLL+7oLSvsjnAQFo=
Subject key identifier: 25:01:8A:14:AE:79:0E:A6:38:7C:6B:CE:10:21:9E:FF:46:57:06:9A
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0C3D
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/A37876DE60AA11F0BC488CF3DAE4EC9C.roa
Signing time: Mon 14 Jul 2025 12:04:05 +0000
ROA not before: Mon 14 Jul 2025 12:04:01 +0000
ROA not after: Tue 16 Jun 2026 12:04:01 +0000
asID: 397373
IP address blocks: 102.135.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 23 Jul 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3133 (0xc3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Jul 14 12:04:01 2025 GMT
Not After : Jun 16 12:04:01 2026 GMT
Subject: CN=6874f235-b68b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:40:5e:75:9c:eb:fc:30:e0:14:b1:57:2c:d2:
66:68:aa:de:45:70:b0:69:c4:33:8a:aa:86:be:23:
1b:42:b0:fa:e6:65:e8:da:f8:b0:97:18:aa:da:4b:
ca:57:62:07:f7:15:a1:6d:bd:dc:f6:c9:c6:ed:0b:
d7:1e:22:b5:66:08:d5:f4:0c:04:d6:d5:2e:fe:93:
47:0c:33:6f:1c:18:da:cb:4b:72:ec:97:0e:4c:76:
2d:11:6f:2a:f1:29:d1:3a:fc:7b:c7:5d:c9:9e:b0:
87:06:a5:4a:22:54:ec:2e:d5:b6:1f:b6:b9:3d:8f:
ed:9a:8b:a8:0c:4e:0a:df:55:d1:db:a4:47:e0:44:
ac:a2:1f:be:53:f3:c9:0b:7e:d5:a7:df:44:be:28:
b7:89:79:62:0e:89:9e:d6:4f:f8:18:43:3f:aa:0b:
6a:8b:6d:67:c3:2d:66:c4:50:7c:5f:29:2a:49:da:
f0:78:18:16:56:16:90:5d:ad:ca:47:3e:94:2d:4c:
e6:af:52:98:c0:81:f8:54:22:fe:cc:30:af:6c:54:
dc:41:62:fa:8b:ec:41:97:68:25:20:03:4c:2d:3d:
19:1e:27:7b:89:3a:6c:b3:9f:0d:58:d0:44:f2:9e:
28:84:23:64:c0:66:fb:fc:45:9b:f9:ec:92:ac:29:
eb:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:01:8A:14:AE:79:0E:A6:38:7C:6B:CE:10:21:9E:FF:46:57:06:9A
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/A37876DE60AA11F0BC488CF3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.105.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:84:ab:00:13:e7:b7:9d:57:c9:59:1a:ff:27:6d:6d:a9:2c:
c1:2b:4f:2a:f4:6b:fd:0d:3b:74:b1:aa:af:2a:65:74:36:5a:
9c:d1:1e:81:3c:d8:bf:6f:3c:47:d4:59:97:8e:e2:18:c0:c9:
9c:25:43:e0:e0:bf:bc:1b:d5:50:39:23:62:bf:41:bf:d8:9c:
4c:49:8c:6f:da:92:3e:34:52:18:c7:cc:ac:21:f0:96:54:59:
90:f6:a4:07:5c:b4:41:f8:5e:37:b6:e3:3e:dc:22:23:4b:bf:
50:5f:09:db:01:88:7c:6d:6d:71:54:d1:dd:3c:d3:b4:66:d9:
cc:22:bc:32:3b:82:68:f1:a0:fc:e3:6d:88:f4:76:64:78:43:
03:7e:41:ee:d5:62:01:5c:d5:a1:d4:11:30:5d:31:41:94:07:
3f:99:33:c6:11:d0:b0:dc:ad:66:80:dc:f5:26:9f:91:e0:13:
46:7d:00:89:c1:e9:06:af:d4:a0:6d:b5:ef:f6:f6:10:eb:0d:
2c:ac:ba:83:d9:e4:18:fb:e7:49:41:9a:5d:f1:fe:4f:01:6b:
16:d4:03:4e:69:4c:16:c5:3f:56:cd:73:f7:ed:66:d4:1e:1b:
ca:fe:2f:7b:be:9a:a5:4a:2c:f7:51:66:4f:2e:33:7d:73:df:
4b:91:46:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 07:26:52 2025 by rpki-client