Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/36ECDFEA8D7E11F090ABC1A0DAE4EC9C.roa
File: 36ECDFEA8D7E11F090ABC1A0DAE4EC9C.roa (raw, json)
Hash identifier: DJ94R0QIJYj93cGE8E9DoZLCv43bzGhStlE0m8pbs3k=
Subject key identifier: 37:6E:F4:FF:95:5F:E7:CA:DF:17:2D:40:EC:EC:05:A3:29:76:90:4F
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0E1B
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/36ECDFEA8D7E11F090ABC1A0DAE4EC9C.roa
Signing time: Tue 09 Sep 2025 13:09:28 +0000
ROA not before: Tue 09 Sep 2025 13:09:23 +0000
ROA not after: Sat 05 Sep 2026 13:09:23 +0000
asID: 9009
IP address blocks: 102.135.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3611 (0xe1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Sep 9 13:09:23 2025 GMT
Not After : Sep 5 13:09:23 2026 GMT
Subject: CN=68c02708-5499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0e:79:2f:85:a3:1f:50:03:24:05:ce:61:fc:
e2:be:4f:c1:59:4f:e0:fc:23:7d:72:bc:f8:77:a2:
0a:2a:58:b3:37:18:5c:5b:14:e5:36:75:a4:b7:81:
2d:47:ff:00:6c:b2:bd:56:56:23:c3:44:1b:8d:53:
91:61:83:13:cd:1e:b9:c5:0f:48:b3:d8:4b:c7:80:
85:e8:b9:15:4f:4b:3f:25:2c:f5:50:d9:97:49:41:
ff:12:15:5c:2f:a2:73:b6:bc:f4:4f:a9:d2:e5:c2:
52:bf:81:84:52:04:0c:87:00:e3:47:3a:c9:7d:fe:
f8:4d:35:be:e3:b8:d4:50:3f:59:48:09:33:4a:da:
2a:97:b6:60:c0:c6:48:51:06:5a:22:16:2d:65:c8:
81:f2:13:da:ec:88:17:a6:a2:2e:ee:c3:25:f0:03:
3b:cc:b5:e9:45:43:48:03:7f:77:f2:72:ec:d4:c9:
09:10:03:17:a3:c1:fc:75:89:dd:d6:a4:19:84:52:
22:be:f8:eb:9b:50:df:dd:65:f3:f2:bc:fa:96:9c:
f6:3e:4d:c3:f9:f4:0c:94:cf:09:d1:9a:29:56:26:
e3:55:9a:c4:42:71:49:f8:25:63:ff:01:5c:3d:3b:
56:4a:df:12:b8:10:a3:9d:a1:e8:70:e1:de:02:c1:
42:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:6E:F4:FF:95:5F:E7:CA:DF:17:2D:40:EC:EC:05:A3:29:76:90:4F
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/36ECDFEA8D7E11F090ABC1A0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.116.0/24
Signature Algorithm: sha256WithRSAEncryption
68:20:16:bf:50:63:13:12:b7:37:89:0b:28:13:c6:34:c1:c1:
b9:0d:a9:7a:8f:ec:da:d9:29:75:db:36:81:fe:20:83:94:5e:
48:17:ea:b3:46:e4:1e:c5:25:9a:b8:91:f2:de:b3:3c:88:a8:
99:84:0d:60:f3:33:e0:82:31:ca:91:a2:7d:4b:af:47:b3:0f:
56:91:ea:97:80:d1:8d:20:97:72:81:fc:8b:37:8d:43:57:22:
4b:fd:26:8a:14:67:ed:98:82:ee:96:b0:7b:bf:1f:b6:34:cc:
b1:94:24:ef:f0:54:84:ff:4b:29:fc:56:ae:24:86:80:7c:12:
3b:c7:6e:26:1f:fb:79:8a:d1:56:f8:3e:72:75:af:69:0c:65:
e6:53:37:d2:50:71:50:fd:4b:71:c8:1f:e4:6a:85:7b:bb:f8:
d5:3c:99:16:2e:89:90:7b:ad:56:4e:e0:75:77:55:60:2c:9c:
c6:5f:e8:bd:97:3d:ce:26:9b:c4:df:54:fe:99:71:c2:02:f6:
19:c2:9d:11:57:15:32:d5:71:45:15:36:ea:c0:fc:ef:75:1a:
d9:85:bf:3a:6a:36:50:ad:c3:b6:cb:6f:76:20:81:3d:0a:fe:
2a:2d:d9:7d:e8:64:53:d6:c0:fa:e4:c3:19:ea:fa:e7:7d:51:
e3:dc:c3:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 07:13:41 2025 by rpki-client