Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/0992C6208CCC11F0948BF198DAE4EC9C.roa
File: 0992C6208CCC11F0948BF198DAE4EC9C.roa (raw, json)
Hash identifier: 5qh+n6rxk3LESAUpeMhmuK64ARPqsC72h8a2eoAxWW4=
Subject key identifier: EA:EE:EC:DF:28:12:39:BC:BC:74:A0:F3:D8:ED:96:82:E3:CB:FB:A5
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0DFC
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/0992C6208CCC11F0948BF198DAE4EC9C.roa
Signing time: Mon 08 Sep 2025 15:54:01 +0000
ROA not before: Mon 08 Sep 2025 15:53:57 +0000
ROA not after: Sat 05 Sep 2026 15:53:57 +0000
asID: 9009
IP address blocks: 102.135.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3580 (0xdfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Sep 8 15:53:57 2025 GMT
Not After : Sep 5 15:53:57 2026 GMT
Subject: CN=68befc19-7fa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:32:07:6b:4a:94:6f:7c:7d:f3:a5:da:29:8f:
5a:13:ee:e7:59:8e:2c:c9:d5:a3:be:78:e2:1e:dd:
f4:e4:69:31:71:e8:eb:61:bf:19:aa:95:68:33:15:
93:6f:72:c6:2a:f6:55:69:91:15:a3:4a:13:93:a8:
f8:2d:40:07:f2:bf:1e:62:0d:2b:42:bc:d2:18:07:
78:46:8c:42:04:18:7e:22:38:0f:57:e8:71:eb:e7:
37:47:8d:99:20:a9:a9:c7:06:f6:bf:70:9c:a5:f2:
9e:39:d8:45:03:ac:fe:36:5f:d6:88:76:68:41:8a:
67:0e:fb:29:13:93:2e:46:2b:fe:e7:fd:fc:2a:96:
6d:ae:09:b4:45:4b:a1:85:f5:59:8c:24:4c:4f:49:
69:e3:7f:9e:17:c3:91:6f:44:e6:fb:9a:f5:6f:3f:
82:61:5a:46:f3:42:37:af:77:24:a7:92:72:f6:0b:
7e:7e:a9:27:00:20:38:9d:8b:24:2b:91:89:45:8a:
7e:91:dc:c6:ad:50:3b:d1:f7:3f:ad:21:89:24:23:
97:97:81:bc:e5:54:2e:5e:ea:80:75:f5:0e:a2:0c:
8f:b8:8a:98:4e:e5:38:cc:ff:96:56:75:7d:9d:c0:
fa:9b:32:57:2d:ec:0c:b9:09:f3:51:3d:03:15:2e:
67:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:EE:EC:DF:28:12:39:BC:BC:74:A0:F3:D8:ED:96:82:E3:CB:FB:A5
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/0992C6208CCC11F0948BF198DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.78.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:e8:cc:61:b4:61:25:9f:ae:37:bf:69:a4:58:55:18:92:87:
31:c4:0a:b3:8b:14:e3:38:d8:45:89:41:93:2c:ea:31:0a:a5:
7f:8a:20:25:fb:2c:8c:49:b5:af:c8:ff:3b:95:14:77:61:c4:
7b:2d:9c:8c:68:1b:a4:e8:4c:4b:61:33:b5:6b:51:bf:46:ec:
af:e3:1a:ac:77:c8:4c:95:d2:c6:21:4a:e1:2e:00:8c:0c:80:
c9:cc:97:12:41:9e:f9:b6:66:44:75:3c:30:01:28:8c:4a:83:
21:38:77:a4:ca:1a:74:0a:0d:27:cd:a2:9f:f1:6e:53:d8:2a:
b9:5c:9a:3f:e2:e5:3a:58:c9:32:c7:f8:41:e4:16:5a:cc:23:
a4:55:4a:65:7d:8c:dd:d0:96:5a:26:94:79:f1:02:72:c9:ed:
a4:35:04:62:df:30:d2:b8:a1:ff:f6:8d:08:e6:1b:d0:ae:e9:
9c:11:57:db:40:d0:85:c0:20:3f:8b:5e:37:37:b0:3d:d3:5d:
f9:74:90:1a:51:aa:2f:31:bd:2b:67:74:b2:25:91:23:ca:c4:
7a:47:34:4a:53:d9:7c:db:44:c7:69:83:5b:b3:be:62:82:ca:
4d:53:3f:4e:64:a5:4f:6d:93:6e:37:0c:bd:6a:46:48:4a:b3:
ef:a5:e8:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 07:13:37 2025 by rpki-client