Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/2668F290831411F0B6E134D7DAE4EC9C.roa
File: 2668F290831411F0B6E134D7DAE4EC9C.roa (raw, json)
Hash identifier: jBN2gKy2sYHTyZaChUaZ4ETf8P44EOEnX/7jbKxG8nE=
Subject key identifier: 71:AD:24:5C:A9:1E:C5:5C:76:51:E7:83:48:E3:12:A1:C1:BD:A3:15
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0D2D
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/2668F290831411F0B6E134D7DAE4EC9C.roa
Signing time: Wed 27 Aug 2025 07:05:02 +0000
ROA not before: Wed 27 Aug 2025 07:04:57 +0000
ROA not after: Tue 16 Jun 2026 07:04:57 +0000
asID: 34450
IP address blocks: 102.135.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 09 Sep 2025 00:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3373 (0xd2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Aug 27 07:04:57 2025 GMT
Not After : Jun 16 07:04:57 2026 GMT
Subject: CN=68aeae1e-3ab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:df:3b:64:8d:45:39:ed:ef:7c:4d:53:69:1a:
94:6c:40:e6:9d:6d:75:be:71:75:c0:72:72:c0:3f:
2f:d1:03:5c:4d:f6:bf:41:05:07:1c:f7:95:a3:84:
3f:a1:b3:37:7b:9c:00:29:55:7e:c5:f1:1d:a4:d7:
b8:bf:a3:e7:db:3a:73:f4:e4:d7:24:8d:cb:fb:fa:
af:78:81:75:95:f4:95:09:af:74:f9:09:3f:5b:dc:
bf:04:1f:40:94:14:d4:dc:f9:41:39:c1:47:43:9c:
b2:a3:ad:a7:b8:c7:5a:f6:02:8f:e8:00:5c:eb:1b:
13:1b:d9:c9:96:05:06:f9:50:b5:a1:42:3e:a4:18:
f2:43:ec:ca:60:4b:ae:cc:2a:e8:b6:53:28:e4:dd:
2f:ac:d1:c2:f4:a5:7d:9b:2f:75:ef:6b:8d:7d:44:
aa:8d:9e:52:3c:91:d6:db:5e:16:3c:6f:c8:50:4e:
0a:6b:36:03:82:3f:90:ff:00:9f:d2:e7:7d:3f:67:
fe:f0:48:2c:d6:37:de:49:43:2e:7a:72:b6:72:4b:
23:23:e6:23:72:8e:9a:54:03:60:7e:b8:d0:6b:78:
a1:93:ad:df:95:a5:71:d6:0d:eb:db:44:d6:f0:5a:
58:21:67:9e:16:62:81:c0:27:4c:d9:20:e4:e0:37:
7c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:AD:24:5C:A9:1E:C5:5C:76:51:E7:83:48:E3:12:A1:C1:BD:A3:15
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/2668F290831411F0B6E134D7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.109.0/24
Signature Algorithm: sha256WithRSAEncryption
74:a2:46:94:73:eb:c6:a3:67:e2:fa:d9:6c:a9:b8:6a:be:75:
a0:7d:14:5b:f3:a8:fb:e9:e9:fb:d8:c4:ca:dc:61:71:e2:6d:
aa:53:4d:65:82:74:83:d4:f3:0a:f3:c6:e3:ff:57:ed:73:9c:
87:68:b6:40:e4:c7:01:a2:83:31:62:6f:d9:37:a6:ed:09:f9:
27:81:f3:92:bf:f2:46:74:ea:62:d7:4d:e8:3f:b9:8f:a0:e0:
2c:09:70:b1:0a:44:7f:3f:61:67:b0:a4:8c:e5:1d:49:bc:36:
4f:41:ca:ae:8f:18:5e:e4:c2:51:d4:80:51:18:8a:99:92:e2:
5f:81:4a:76:61:4e:cb:db:18:e0:b5:90:e0:62:d7:1e:77:94:
0d:55:6a:64:26:81:13:0e:2e:bf:f8:29:56:e0:c2:ab:55:5c:
2c:04:e6:ed:94:1a:69:e8:92:f3:c5:5d:99:9d:1d:51:5b:9f:
5f:9e:b1:2e:23:2f:dc:01:30:82:78:04:46:d8:42:10:60:cb:
6e:2b:ae:1f:d9:0a:d8:af:c0:eb:85:96:b9:a3:33:7d:b4:ad:
a1:6a:6e:b5:48:f7:49:d4:cb:8e:4f:63:22:6d:37:3e:0c:5a:
47:fa:22:34:5d:48:69:95:16:0d:24:dd:be:bc:f5:49:24:45:
8c:2b:66:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:25:13 2025 by rpki-client