Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/131974AC887E11F0BC19F9A3DAE4EC9C.roa
File: 131974AC887E11F0BC19F9A3DAE4EC9C.roa (raw, json)
Hash identifier: 3Pc+Kd27qq0AVfWt83iQw2HJR7Ui7uUp2wIOM16MKaw=
Subject key identifier: 14:2C:F8:F8:5A:C9:E5:35:BB:FE:F1:61:B3:2F:05:2F:0C:70:C4:C4
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0DA4
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/131974AC887E11F0BC19F9A3DAE4EC9C.roa
Signing time: Wed 03 Sep 2025 04:25:52 +0000
ROA not before: Wed 03 Sep 2025 04:25:47 +0000
ROA not after: Thu 01 Jan 2026 04:25:47 +0000
asID: 9009
IP address blocks: 102.135.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 07 Sep 2025 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3492 (0xda4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Sep 3 04:25:47 2025 GMT
Not After : Jan 1 04:25:47 2026 GMT
Subject: CN=68b7c350-c763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e2:90:0e:87:f8:88:db:b7:ae:68:b5:02:cd:
bf:56:28:fe:4f:e0:cb:0e:bc:14:9e:cf:0f:2b:db:
d2:ee:f7:b5:dd:68:53:4b:b1:68:3f:ed:a7:52:60:
72:a7:24:77:14:3f:c7:a0:15:80:27:4b:93:d5:cf:
9a:37:75:96:c7:fb:dc:7a:89:31:a9:ea:c6:1c:97:
0e:eb:0c:06:b1:80:e9:a3:8a:37:58:8c:d2:40:d8:
a3:84:ea:88:8d:1b:a4:0d:de:8b:1d:1f:4a:c3:7d:
5c:3f:60:d8:66:bb:ab:9b:21:18:25:be:91:fa:c1:
05:10:15:f5:fd:b7:8e:2c:ba:13:4f:99:4a:95:07:
d3:69:1d:4a:ba:e8:ba:bd:02:90:bf:87:1c:15:92:
f0:d0:c0:12:7d:c8:9d:2f:63:c7:90:6d:52:44:a0:
62:3c:fb:06:48:27:67:ed:da:45:ac:9b:6f:a0:c7:
5b:f8:c7:35:94:97:55:d4:53:09:61:81:0b:6f:78:
47:5e:c2:cd:c7:d8:9f:ef:ba:8f:2d:05:8a:d3:41:
53:1f:10:99:eb:c2:ba:7f:0f:45:a6:e3:96:fc:c0:
c6:db:b3:b2:9a:5d:17:ea:99:a3:2d:ec:cb:60:67:
46:64:e1:f7:de:20:1c:47:aa:b1:2b:d9:8e:ea:8a:
3f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:2C:F8:F8:5A:C9:E5:35:BB:FE:F1:61:B3:2F:05:2F:0C:70:C4:C4
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/131974AC887E11F0BC19F9A3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.28.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:01:75:e0:1f:3a:6a:a2:da:4a:0e:02:2d:d3:0f:fb:f6:da:
d8:da:da:63:5e:ab:cf:2d:ec:cc:c8:e5:cf:09:c5:a5:f5:77:
51:a0:14:3b:a3:4a:c0:c4:a7:71:33:c0:dd:89:a5:5e:40:85:
df:78:e6:4f:a9:d6:c9:4b:f2:a4:b1:4f:f6:8b:c9:ed:68:ef:
94:9c:2c:4c:7a:8c:0d:29:95:55:aa:9c:bd:02:17:c8:8d:d3:
2d:84:34:84:63:45:bd:3d:97:34:36:4d:f4:9e:93:f4:10:7f:
ae:bc:7a:50:06:ff:b7:e8:af:1d:51:ab:bc:9f:01:5c:7f:d5:
71:2c:ed:27:76:79:36:0b:c9:1c:8b:34:fc:3e:57:90:38:63:
a7:ee:cd:f8:f5:3b:99:b5:1c:b1:bc:d8:77:85:5f:8b:6c:9a:
0f:35:53:0c:01:1b:6f:21:86:1d:59:97:05:5f:29:7e:ed:50:
62:87:88:06:46:0f:e9:da:f2:92:57:6a:0e:9f:18:00:e4:c6:
5f:c4:6d:c3:45:ce:2a:67:73:db:16:a9:2f:68:21:f9:9d:04:
ec:ba:e1:04:d1:f1:eb:a5:50:15:7a:0e:6d:85:a1:a4:50:1a:
3c:d9:47:62:f9:b9:be:36:98:c2:83:51:0a:83:09:e8:00:91:
25:2c:04:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 05:57:59 2025 by rpki-client