Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/3711B7D437CA11F0AB38BC92DAE4EC9C.roa
File: 3711B7D437CA11F0AB38BC92DAE4EC9C.roa (raw, json)
Hash identifier: /JU33f7TTQFlt0otqqp0/M0hKzVHslbMpHQpkXPDUBs=
Subject key identifier: 41:DA:5E:5D:C6:1D:46:48:87:F0:BA:D9:81:B8:9D:D6:99:4D:35:92
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0A4A
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/3711B7D437CA11F0AB38BC92DAE4EC9C.roa
Signing time: Fri 23 May 2025 11:36:50 +0000
ROA not before: Fri 23 May 2025 11:36:41 +0000
ROA not after: Sat 23 May 2026 11:36:41 +0000
asID: 834
IP address blocks: 102.135.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 07 Jun 2025 00:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2634 (0xa4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: May 23 11:36:41 2025 GMT
Not After : May 23 11:36:41 2026 GMT
Subject: CN=68305dd2-631f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5c:e6:72:c3:13:55:f8:0b:8b:a7:ff:32:37:
3c:8d:04:51:0d:e9:1b:76:b9:9f:b7:6a:a2:a3:0e:
f5:38:09:f9:ca:13:89:13:a5:98:c9:80:cf:7d:d6:
53:18:25:7d:72:52:5a:f7:75:5d:f6:da:ad:87:da:
96:ee:ae:fc:74:54:4f:58:de:8f:6a:4d:6f:13:4c:
b1:f7:7c:17:6f:16:3f:5a:f4:6f:a2:9e:21:05:93:
1f:db:d2:b6:6a:b3:a6:62:bb:19:32:79:c7:1b:d7:
f1:2a:14:f2:d5:c1:2b:60:ba:0c:19:59:ef:2d:26:
20:b8:f2:a1:29:c3:0b:e8:f2:ac:54:f8:82:fc:fc:
f7:1f:df:e3:e9:03:de:e3:e6:fd:80:0a:2b:6d:37:
e7:ff:92:7e:30:56:34:74:6e:e2:32:52:a5:c0:19:
89:af:cd:49:7b:cb:4f:bb:4e:7a:e4:74:7f:b9:a9:
a5:ee:31:2a:e1:71:7d:ed:16:dd:cb:e5:58:db:da:
fa:83:07:85:1c:e6:97:c6:cd:9c:0c:d7:ae:4e:61:
e5:49:c9:c5:5a:e0:39:a3:e2:5a:10:51:4f:41:f6:
78:2d:d1:5f:9c:65:b2:27:47:7e:f1:13:cf:77:38:
bd:fd:12:e4:70:e4:5e:41:09:9f:b1:ed:ce:a0:7e:
df:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:DA:5E:5D:C6:1D:46:48:87:F0:BA:D9:81:B8:9D:D6:99:4D:35:92
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/3711B7D437CA11F0AB38BC92DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.20.0/24
Signature Algorithm: sha256WithRSAEncryption
46:07:50:74:32:18:b3:82:b9:5b:b0:23:96:e1:2a:c8:71:0c:
f2:44:53:11:8c:1e:f1:27:d1:42:8d:10:02:ba:f4:84:8f:0b:
5e:3d:1a:d5:b3:7d:a2:2d:e1:90:33:94:10:96:91:10:c1:1e:
55:99:17:f2:4d:05:4b:22:b9:27:b1:95:89:83:8d:8f:c6:b0:
a3:f2:b0:fe:ec:72:f7:0d:d2:30:51:77:9c:37:7f:de:44:ec:
50:77:3f:05:ca:15:bd:9e:29:02:f0:1c:02:74:97:52:ab:2f:
36:41:ca:ad:c4:78:4a:81:29:f5:19:bc:3f:86:23:be:e0:a2:
76:3d:29:72:0e:2a:0d:bd:ec:48:73:c4:4a:6e:67:e5:fe:a1:
96:95:67:8d:3d:7e:b2:93:b1:27:9f:f5:e4:a3:7b:12:2b:85:
3b:09:64:bd:ae:84:e1:4d:0e:51:ff:d6:30:f9:98:bf:f0:5a:
60:df:95:c0:24:f5:07:2c:58:bf:14:8e:b1:b1:2f:bb:4b:19:
01:35:af:7c:53:d7:f4:dc:f4:f0:b1:ea:33:77:7e:07:71:6f:
bb:42:93:a6:2c:e7:3e:54:18:5d:36:17:64:89:ad:c5:3f:7b:
f3:6d:bc:5f:81:d5:17:01:5a:6b:49:e5:87:73:c3:81:13:da:
22:ae:1e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:34:42 2025 by rpki-client