Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/17624B74887E11F0B9EA09A4DAE4EC9C.roa
File: 17624B74887E11F0B9EA09A4DAE4EC9C.roa (raw, json)
Hash identifier: s5FBf1e4UlSUmbp0p1/Iequtm+t8mBZV/hbBc1m4TyI=
Subject key identifier: 1C:E5:1C:1A:95:AD:17:E8:34:E7:16:DF:96:30:4F:81:CA:83:D9:2B
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0DA7
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/17624B74887E11F0B9EA09A4DAE4EC9C.roa
Signing time: Wed 03 Sep 2025 04:25:59 +0000
ROA not before: Wed 03 Sep 2025 04:25:54 +0000
ROA not after: Thu 01 Jan 2026 04:25:54 +0000
asID: 9009
IP address blocks: 102.135.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 07 Sep 2025 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3495 (0xda7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Sep 3 04:25:54 2025 GMT
Not After : Jan 1 04:25:54 2026 GMT
Subject: CN=68b7c357-1432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:cd:a1:69:69:3e:62:dc:c3:2b:89:f9:e0:0e:
a0:44:55:f3:b7:b7:57:48:f0:40:19:bf:99:c2:a5:
ae:fd:af:44:73:71:d5:a0:c0:4c:0e:ff:b4:04:4c:
ec:76:f3:b0:09:cf:c1:88:a4:f9:8b:32:23:d6:e7:
81:a2:bb:23:b3:66:d9:b2:3c:db:41:5f:d0:75:1c:
bb:73:cd:16:ee:86:50:91:49:09:d8:3a:ba:98:05:
de:b2:28:d4:f1:9c:af:a1:54:34:64:f7:22:4b:60:
ae:b0:a6:c8:6d:5b:33:86:d6:6a:d0:fc:ca:2f:4a:
28:b8:2e:64:46:f8:af:85:8f:25:10:0e:06:a4:98:
e4:70:4b:cf:1e:79:fc:ea:78:a1:b2:14:6f:f0:74:
21:87:17:8a:7d:55:88:02:d1:20:d4:bf:64:88:07:
3a:10:f2:56:51:55:35:5b:d7:ff:bb:1e:5a:f5:0a:
cb:98:85:04:53:f7:77:66:56:ab:41:b3:df:20:76:
21:a5:75:9d:e7:e3:0f:9a:63:6b:f0:7e:3c:2f:b1:
57:35:3e:64:dd:27:69:12:be:35:9e:15:c5:8e:8f:
8a:14:f8:08:e5:ec:4b:fc:57:7d:f7:12:e8:fa:06:
7c:e1:53:51:b1:2e:6b:51:cd:3f:e2:25:df:c8:8e:
5b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:E5:1C:1A:95:AD:17:E8:34:E7:16:DF:96:30:4F:81:CA:83:D9:2B
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/17624B74887E11F0B9EA09A4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.26.0/24
Signature Algorithm: sha256WithRSAEncryption
39:7e:f7:3b:b4:9b:92:d7:85:8f:61:9b:d8:ba:0b:1b:05:90:
3b:79:6c:56:ca:7b:3f:66:4e:6a:35:55:df:50:2b:9e:87:a3:
ee:dc:df:9c:4e:33:38:10:40:92:ed:c8:9c:c5:c8:bd:9f:2a:
30:4b:ad:24:90:c9:ce:55:5b:a8:b7:f6:f8:a0:a0:94:8b:d1:
02:18:68:58:68:69:6c:b1:24:16:f2:26:eb:b6:5a:15:17:79:
f6:b6:12:cb:49:ec:fc:55:f2:c3:06:f8:db:d4:8f:a5:da:87:
25:15:46:e3:ad:e2:de:a2:fd:0f:99:cd:39:58:3b:00:10:7d:
65:b9:28:03:86:77:68:7a:ee:93:e6:87:bb:bc:dd:d5:e1:45:
3f:28:af:6f:fb:c5:14:bc:d2:60:b7:6d:41:43:dc:be:22:d6:
ed:99:42:0f:5e:b2:11:ea:5d:32:a5:27:f4:5f:c7:d7:a9:d6:
5c:20:ee:b9:34:ab:7c:e9:53:8a:d0:28:6f:0b:23:c9:7d:23:
e1:4a:03:da:16:3a:02:25:f4:e8:c8:ea:60:a2:8a:e5:9d:cd:
84:35:30:32:ed:c1:25:63:26:5b:6b:e5:e8:c7:b4:fe:05:93:
4f:8c:02:0d:82:66:cf:c5:26:5e:ea:09:6e:fc:ac:57:6f:fb:
d5:dc:f9:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 05:58:07 2025 by rpki-client