Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/22EF3DD48D7F11F0ABEC21A9DAE4EC9C.roa
File: 22EF3DD48D7F11F0ABEC21A9DAE4EC9C.roa (raw, json)
Hash identifier: nsTtVVV8FLUNLjzdiCv9B85HnaOUNbhoEX909EoR+Ic=
Subject key identifier: 88:86:C5:8B:6A:F3:9D:8F:90:23:0E:5C:00:DA:15:7E:68:7D:15:FE
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0E29
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/22EF3DD48D7F11F0ABEC21A9DAE4EC9C.roa
Signing time: Tue 09 Sep 2025 13:16:04 +0000
ROA not before: Tue 09 Sep 2025 13:15:59 +0000
ROA not after: Sat 05 Sep 2026 13:15:59 +0000
asID: 9009
IP address blocks: 102.135.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3625 (0xe29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Sep 9 13:15:59 2025 GMT
Not After : Sep 5 13:15:59 2026 GMT
Subject: CN=68c02894-30e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:55:ff:9e:24:72:9b:28:39:6f:36:08:ba:18:
5b:ea:f6:39:99:0e:66:d8:ca:cb:c4:7e:7a:02:0f:
49:73:ac:11:79:8d:ed:c7:04:9e:82:e8:94:6c:39:
fb:b7:f0:5e:ec:e9:23:d6:2b:6a:fd:9e:9e:ea:71:
dd:00:5c:a5:8f:fc:a2:76:08:cb:02:46:23:d7:c7:
8b:de:21:54:4a:fd:ae:7f:ac:41:36:0b:2b:53:76:
16:2b:4a:e5:cf:b0:05:2c:6b:2f:f4:71:de:20:10:
ef:25:48:42:73:2c:47:27:bb:03:c7:b1:95:df:e5:
54:73:fd:2f:02:90:97:c0:ab:62:5f:d9:b1:d3:4c:
7c:67:46:e2:33:9e:a6:1f:36:7d:a2:53:a4:ca:ef:
93:b7:4e:2c:a3:63:74:5d:f8:d9:3b:13:3e:e5:3e:
ef:97:e3:9a:38:05:e4:82:79:1d:b1:0a:29:bb:fa:
86:dd:12:ed:8f:26:b7:9d:1a:66:63:e9:1e:58:b1:
73:36:e6:7d:75:6f:1f:0e:1b:99:af:70:6b:01:0b:
d0:42:2e:0e:fe:a6:b5:99:82:82:0d:0f:48:4c:23:
3c:3d:5d:70:ef:1c:69:6f:3e:f9:99:07:eb:73:30:
c9:74:ed:d9:e9:9e:a7:20:5a:00:7c:c6:13:9c:f3:
2e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:86:C5:8B:6A:F3:9D:8F:90:23:0E:5C:00:DA:15:7E:68:7D:15:FE
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/22EF3DD48D7F11F0ABEC21A9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.127.0/24
Signature Algorithm: sha256WithRSAEncryption
30:98:0c:dd:64:68:5c:2b:18:13:d1:8f:77:2c:2d:47:af:b4:
96:b2:34:84:0c:dd:bf:b0:fe:a0:42:cc:af:d8:d9:3c:4f:0e:
7a:15:be:d1:58:06:2f:94:6d:ec:00:0e:17:d7:ed:f7:ba:5b:
41:f8:7f:7c:6b:33:7e:29:e1:25:26:57:59:50:7e:e1:28:61:
34:8b:f7:16:01:07:7f:7f:8a:d4:b5:fd:4b:b5:1d:9f:02:bc:
22:86:b6:c3:d3:8a:21:8c:5d:be:2a:fa:f6:23:24:ac:83:c8:
8b:1f:33:5f:48:ec:b9:1f:36:9f:2e:1d:17:34:e1:b8:94:02:
16:d8:a9:a5:08:ab:bb:83:f1:51:83:07:c3:8c:96:aa:69:76:
7e:d6:f6:c5:dc:53:d4:5d:6c:46:92:3d:f4:53:91:2a:57:48:
2d:50:8f:46:d1:aa:3e:9d:1f:f2:76:86:70:1a:58:fe:b8:f0:
27:97:b5:c9:1c:ae:d0:e6:0a:ee:b4:1d:66:d2:e0:0b:80:69:
f5:1f:50:c9:66:57:3a:6b:ac:59:72:1b:70:90:7e:c9:31:c5:
fc:d2:3a:f5:46:e2:86:e8:7a:c0:15:0d:ec:e5:61:cb:01:41:
f3:88:9a:ec:83:92:26:81:01:df:14:27:c4:d7:f5:70:80:a3:
fc:ee:92:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 07:15:29 2025 by rpki-client