Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/3251F2EA8D4211F080238DA2DAE4EC9C.roa
File: 3251F2EA8D4211F080238DA2DAE4EC9C.roa (raw, json)
Hash identifier: qgEuVsI8n81PqUMhL/Enet/tb5O0Cn3llsB3hvALFbo=
Subject key identifier: D5:FF:55:89:B7:6D:74:9A:91:66:E8:A3:03:E7:57:9B:AC:0E:15:C2
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0DFF
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/3251F2EA8D4211F080238DA2DAE4EC9C.roa
Signing time: Tue 09 Sep 2025 05:59:51 +0000
ROA not before: Tue 09 Sep 2025 05:59:45 +0000
ROA not after: Sat 05 Sep 2026 05:59:45 +0000
asID: 9009
IP address blocks: 102.135.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3583 (0xdff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Sep 9 05:59:45 2025 GMT
Not After : Sep 5 05:59:45 2026 GMT
Subject: CN=68bfc256-cc5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ab:50:5f:f0:ab:fa:c4:76:70:67:25:59:8a:
47:f9:41:e4:24:f0:b9:ad:66:20:22:7b:27:ab:fe:
34:b4:4a:0f:4a:ba:cb:de:f6:0b:d0:3f:8b:fb:55:
f5:ff:5a:81:7e:7f:82:73:3a:e7:ae:89:3a:6b:ac:
7b:26:a4:af:0e:b0:28:90:81:4d:35:74:36:c6:fd:
0e:b1:06:b8:79:55:f2:7a:07:79:74:01:3c:1c:3d:
84:8c:e9:9b:97:38:b1:4c:2f:c6:6c:3a:79:62:09:
59:24:df:1b:a6:64:9d:dc:51:0a:9c:49:43:a6:68:
cd:98:f0:da:7a:bf:0f:88:40:5c:ca:5e:52:1e:a1:
c1:99:06:c1:69:fc:01:f4:b5:18:d1:47:0f:f4:aa:
5f:e9:d8:68:58:e3:c0:2e:83:a4:08:2b:63:69:63:
15:3c:91:31:87:b5:a3:7e:01:fd:b7:c4:31:dc:28:
2d:20:bd:d7:f0:1b:d6:e1:3f:69:76:4b:cc:e3:71:
52:e0:81:10:c4:bc:dd:76:0e:b7:69:5a:f5:f2:e2:
a1:1a:cb:bd:ce:da:3d:5f:18:73:5d:19:11:4d:16:
fe:0e:79:7e:e0:9e:6a:fc:75:27:b6:8a:d1:4a:33:
85:11:7f:42:d0:50:e7:d3:1b:86:2c:97:35:10:a6:
03:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:FF:55:89:B7:6D:74:9A:91:66:E8:A3:03:E7:57:9B:AC:0E:15:C2
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/3251F2EA8D4211F080238DA2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.82.0/24
Signature Algorithm: sha256WithRSAEncryption
49:af:c2:82:22:d2:d0:ad:b3:d7:51:e2:81:39:11:63:26:a4:
4d:6b:b6:29:ee:0c:48:e5:0c:c6:45:88:1c:e0:d6:6b:f6:b6:
bd:d9:e4:c0:48:aa:76:18:c0:f5:4e:d2:82:fc:ef:b8:02:34:
d4:9b:82:e6:95:00:32:ee:6e:a7:18:ca:77:fb:3c:d9:fd:2c:
e3:a1:94:89:7f:c0:57:fe:14:a5:2d:a3:9f:d7:7e:20:03:09:
86:c7:ff:bc:e8:33:fe:3b:b2:a0:28:3d:c7:b0:19:c1:31:e2:
4f:57:85:1d:0d:ce:42:5e:51:06:6e:02:0c:ca:17:fc:3e:26:
06:70:b0:de:5b:67:0a:40:c8:c4:83:50:2b:86:ff:43:4f:89:
26:b9:f3:8f:ff:81:d5:09:57:44:aa:19:b9:98:28:b0:25:51:
41:00:16:96:06:3d:cc:96:01:8a:d7:12:db:6c:36:4c:9c:28:
d0:fb:ba:5d:2d:1f:14:d9:56:10:b6:be:f4:fe:37:63:6e:9b:
2c:9a:94:87:e4:3a:ca:11:13:8f:9e:68:70:4b:8c:b7:af:69:
6e:7d:94:33:dc:d7:4a:11:da:1f:5c:4a:cd:4d:85:77:b0:2c:
5f:b1:da:f7:4e:e9:66:56:62:d4:fa:e3:f2:f1:fb:63:49:46:
24:bf:88:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 07:13:38 2025 by rpki-client