Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/2089C4EC9AA911F088D7129BDAE4EC9C.roa
File: 2089C4EC9AA911F088D7129BDAE4EC9C.roa (raw, json)
Hash identifier: U4LCP+DfNvYB0VifK1yUMrRVtWLayu5aONKwsmgMXW8=
Subject key identifier: 26:51:05:C0:CA:C5:AE:F0:F4:EB:62:F7:FB:0A:AE:47:A6:29:51:82
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0E99
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/2089C4EC9AA911F088D7129BDAE4EC9C.roa
Signing time: Fri 26 Sep 2025 07:19:24 +0000
ROA not before: Fri 26 Sep 2025 07:19:19 +0000
ROA not after: Fri 25 Sep 2026 07:19:19 +0000
asID: 9009
IP address blocks: 102.135.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3737 (0xe99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Sep 26 07:19:19 2025 GMT
Not After : Sep 25 07:19:19 2026 GMT
Subject: CN=68d63e7c-9319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:44:5f:c5:69:26:fc:ca:27:65:fe:fa:46:df:
af:dd:8d:e5:3b:3e:fc:36:a7:6b:c2:ec:ba:32:92:
b1:7f:93:2a:bd:2c:4c:0b:bd:3c:b4:39:2e:f8:12:
fc:a0:4a:33:5a:6d:f4:86:05:5f:1e:ec:8b:ba:65:
45:26:3a:45:f4:a0:30:0d:43:4f:27:ad:a6:c1:51:
38:f2:20:9b:83:23:9c:f3:7d:6b:4e:a1:15:8c:1b:
02:f2:b8:df:db:34:53:84:28:08:da:79:41:49:01:
88:88:fb:bc:d3:77:55:d0:8e:8a:cd:c3:3f:b1:49:
7c:51:90:62:25:f6:61:77:90:da:82:18:fa:62:5a:
4e:3c:34:82:29:97:aa:73:8b:62:d9:fb:20:1c:00:
6a:69:ca:97:0d:59:de:3b:95:5b:2e:b1:92:67:27:
87:c4:ed:d8:73:d2:23:6b:a8:15:59:63:ae:19:4d:
b7:07:59:56:fa:47:a6:53:3f:a0:ed:89:3e:93:72:
ad:c7:e3:c3:9f:55:a6:38:a8:b4:12:e0:97:84:d1:
e8:a8:09:82:4f:6a:49:76:ad:49:23:29:da:0b:93:
50:71:ea:e3:60:ae:73:04:7a:11:fb:7f:8b:26:49:
85:e7:76:82:77:d6:8e:df:b8:49:9c:f8:e3:88:31:
ce:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:51:05:C0:CA:C5:AE:F0:F4:EB:62:F7:FB:0A:AE:47:A6:29:51:82
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/2089C4EC9AA911F088D7129BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.0.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:61:10:d5:f3:6b:2f:d5:bc:93:65:6f:e1:c1:b8:e7:9d:80:
fa:b3:89:ad:e5:cf:f9:22:98:80:61:c2:f2:c8:c3:4c:ba:05:
05:49:32:d2:88:28:3a:0e:df:2d:43:9f:74:d9:9f:d5:c0:df:
cf:24:35:70:3a:2d:7f:3b:28:59:8e:8d:28:95:58:d1:f2:3d:
62:f8:01:ad:c4:73:4d:39:cc:ab:d5:60:bc:74:17:ae:7d:9d:
65:8d:d3:01:6f:06:3b:86:cb:79:ed:dd:8e:be:90:33:14:b7:
d1:e8:c0:bd:ed:45:66:03:7f:9c:1b:81:de:2d:a4:47:23:b5:
e0:7a:8a:09:f5:0d:c9:73:f7:cc:61:11:9d:93:ef:c1:7d:9a:
bf:65:cb:02:cf:6e:b6:08:e1:a3:1e:2b:51:b9:9b:6e:39:44:
af:cc:bc:66:7e:50:ca:8a:3b:85:4f:7e:d5:ca:3a:a4:64:88:
b6:ef:a2:24:ed:94:f9:3f:df:a0:4a:bf:31:4e:1a:9b:df:57:
33:6d:5d:16:21:62:2c:d7:a8:9a:73:10:18:ed:7e:39:f8:b2:
0b:d6:e7:4e:87:14:b2:23:c3:fa:ab:7c:29:7a:d4:eb:a7:30:
fc:1b:97:47:f6:3a:d4:f4:3b:3f:99:5f:28:1d:9e:74:6a:44:
a9:ab:70:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 07:13:41 2025 by rpki-client