Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/F594628E60AA11F0A587EEF3DAE4EC9C.roa
File: F594628E60AA11F0A587EEF3DAE4EC9C.roa (raw, json)
Hash identifier: PqEfIYP0oerniSdv77y7mOIVXOwIfBjF/lF2FHsK5pk=
Subject key identifier: BD:3B:45:94:F8:21:EE:97:EE:03:15:80:F4:ED:B3:9A:CF:CC:53:A7
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0C43
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/F594628E60AA11F0A587EEF3DAE4EC9C.roa
Signing time: Mon 14 Jul 2025 12:06:24 +0000
ROA not before: Mon 14 Jul 2025 12:06:16 +0000
ROA not after: Tue 16 Jun 2026 12:06:16 +0000
asID: 397373
IP address blocks: 102.135.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 23 Jul 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3139 (0xc43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Jul 14 12:06:16 2025 GMT
Not After : Jun 16 12:06:16 2026 GMT
Subject: CN=6874f2c0-8b70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:36:7e:49:40:b5:05:78:db:08:e6:ca:1b:e2:
10:11:ba:2f:14:3f:8d:c9:95:86:2b:d0:9e:42:6c:
d5:d1:91:11:66:14:5c:29:7f:7d:6a:e5:19:9f:04:
ed:97:7a:5f:07:c6:e4:a0:03:25:e1:c5:dd:5b:20:
6c:65:10:bd:b2:2d:1a:bd:ff:f1:13:0d:a9:c3:92:
22:b8:38:80:14:57:d9:17:b7:7e:02:bc:5c:ae:dd:
85:70:ac:90:07:ed:e8:21:de:a0:ad:cf:b7:3c:51:
0f:b6:12:9a:5a:be:4f:11:b2:ae:7d:c2:cc:13:09:
1e:e2:13:74:89:ba:3f:91:52:3f:67:b3:b3:3c:71:
0a:4e:b1:89:e8:32:64:a8:4a:ae:59:10:7c:6c:7d:
76:6a:81:a5:c3:2c:d6:75:bb:f3:6d:93:b8:77:d1:
51:c3:af:c1:68:33:24:72:d7:1c:08:30:9b:b1:13:
93:03:cc:56:ee:09:87:3b:9a:0f:4b:16:e5:0a:7f:
10:0a:aa:db:80:6c:7a:9c:d4:7b:ff:0a:73:6e:07:
5f:e0:4f:d8:45:68:5a:c4:55:7e:3d:b5:1b:63:9a:
2f:e9:71:ff:6a:52:69:12:3f:66:3e:41:43:e7:64:
88:5e:6c:0d:4d:1a:d9:a1:f0:f9:34:75:6f:7c:c6:
ed:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:3B:45:94:F8:21:EE:97:EE:03:15:80:F4:ED:B3:9A:CF:CC:53:A7
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/F594628E60AA11F0A587EEF3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.108.0/24
Signature Algorithm: sha256WithRSAEncryption
28:26:b4:7a:f9:e8:02:26:a5:d2:b1:0a:9b:e7:ce:b7:cc:a2:
2a:20:07:55:d5:8e:cf:e4:2d:76:0c:d9:a1:0a:84:8a:64:7a:
0a:12:a0:2e:66:31:e0:2d:df:59:79:af:d3:92:1c:ba:5e:dd:
63:39:14:e7:02:fe:01:17:d8:d2:0b:78:0b:f6:ed:55:24:42:
6d:4a:06:fd:3a:cd:08:54:4b:f5:ae:b2:30:37:77:bd:81:6b:
70:f2:ed:f8:ac:c0:b4:33:a1:62:0c:aa:0a:05:6e:16:ce:a6:
5a:e0:6f:91:81:de:d4:9d:4a:58:79:b8:cc:80:f4:84:ed:a7:
eb:30:d9:4f:44:f0:56:dc:b4:68:46:db:f3:12:a1:7c:44:2b:
4c:d2:f7:c3:bd:30:39:3d:7c:37:20:13:7a:16:c0:d0:57:b9:
2b:eb:25:12:db:c8:3f:82:47:4b:55:ee:6b:85:1b:2e:85:58:
12:7a:09:2b:2f:29:e2:22:d8:50:12:31:f6:5a:83:b2:04:ce:
08:77:8f:c4:b1:f2:4d:9e:24:61:cc:50:31:cf:60:7b:8a:b7:
46:df:b3:c5:ea:6f:f0:86:07:b6:3b:85:4f:70:d0:96:a6:72:
4b:da:23:59:24:94:76:70:0b:b0:78:9d:92:15:cb:01:7a:86:
9b:d0:8a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 07:28:15 2025 by rpki-client