Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/26F94CDA8CCB11F08BE01B94DAE4EC9C.roa
File: 26F94CDA8CCB11F08BE01B94DAE4EC9C.roa (raw, json)
Hash identifier: rqUM8HgoyesQs6UtSQwGb47fB03rLRXXjhsM/vJSHWM=
Subject key identifier: 82:00:97:3C:9A:72:B5:8A:7F:C4:D4:DC:93:FB:81:93:73:F1:7C:5D
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0DEE
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/26F94CDA8CCB11F08BE01B94DAE4EC9C.roa
Signing time: Mon 08 Sep 2025 15:47:41 +0000
ROA not before: Mon 08 Sep 2025 15:47:35 +0000
ROA not after: Sat 05 Sep 2026 15:47:35 +0000
asID: 9009
IP address blocks: 102.135.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3566 (0xdee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Sep 8 15:47:35 2025 GMT
Not After : Sep 5 15:47:35 2026 GMT
Subject: CN=68befa9d-5f47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:99:1c:a2:15:5e:8d:6c:1f:a5:60:0c:75:83:
17:3a:34:87:c8:6d:eb:50:2d:50:6e:18:05:e0:b2:
bd:24:79:bc:9c:be:2c:30:b8:7e:47:63:c3:4a:73:
b0:c0:70:69:27:76:58:d4:98:57:73:83:bd:85:c9:
21:3b:59:51:46:91:29:a7:21:fd:32:a5:4d:1e:10:
3e:e7:25:80:75:9f:6d:14:02:1d:5c:6b:39:8b:f4:
cc:ff:53:d7:65:2d:80:2b:7d:80:c9:9b:4d:65:ee:
d8:fe:65:df:2e:67:6c:81:41:8d:b7:5a:ca:11:38:
62:f6:f2:b2:78:d6:fe:77:a8:a9:28:96:4d:e1:a7:
4a:be:98:eb:0f:2e:d1:9c:81:7d:bb:56:5d:ae:37:
65:31:b8:98:b6:76:e1:0d:e0:b4:f6:21:a6:d6:eb:
9a:b2:67:c2:47:d8:f6:4c:6f:85:c9:02:7c:98:3f:
a5:86:bd:62:79:bb:04:88:1c:1d:69:81:5e:39:3c:
b0:9a:9c:89:b4:fa:f5:42:8a:e9:7b:a1:91:d1:82:
e0:39:46:0b:ba:fb:f0:5a:6f:2f:bc:77:82:36:42:
a9:36:31:1a:c3:83:9e:89:cb:71:aa:b2:04:5f:3f:
17:3c:17:62:be:81:fd:d5:c7:93:58:37:d6:b7:d6:
64:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:00:97:3C:9A:72:B5:8A:7F:C4:D4:DC:93:FB:81:93:73:F1:7C:5D
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/26F94CDA8CCB11F08BE01B94DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.71.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:e8:1a:4e:a7:6c:1a:50:f8:a8:e2:c1:6a:4b:a8:6d:2e:6e:
66:b8:7f:f8:7d:25:b8:c9:1b:42:c8:f9:e4:3c:a4:0b:3c:a3:
23:2c:9f:cb:79:98:0e:c8:cb:e4:21:79:a3:64:c0:41:6a:46:
64:66:aa:72:fe:99:78:c1:ed:56:57:84:c7:30:c2:85:87:e9:
e3:95:3c:b8:02:f7:e6:1a:91:9c:d3:ec:6b:b9:32:96:20:c5:
c3:13:76:b3:dd:8a:67:28:db:3e:30:35:1e:15:8d:de:9d:75:
2e:91:42:8f:41:a1:03:92:67:bb:1a:82:df:8e:67:a0:3f:f9:
e6:5f:9d:19:a6:5a:77:7f:97:a7:3d:48:27:a7:5b:a6:6c:17:
06:37:dc:3e:ef:91:d4:14:09:23:c5:e4:e5:79:b1:54:ac:7b:
9e:26:41:b4:b7:bd:99:39:ba:06:3d:ab:82:9c:a5:7b:fa:7b:
2b:af:25:6c:6f:5f:35:a0:62:17:00:2f:65:da:aa:ce:9b:88:
59:6a:3c:cd:af:fb:ce:33:76:76:eb:5f:2c:38:6c:55:d4:69:
6e:72:8f:e0:39:43:48:e1:f0:46:f8:fc:72:e1:7b:15:89:02:
97:02:ad:1c:b5:93:5e:a3:39:2d:a8:93:82:52:63:39:95:8d:
a2:78:bd:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 07:13:39 2025 by rpki-client