Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/3C5C07DE8CCB11F09BF24194DAE4EC9C.roa
File: 3C5C07DE8CCB11F09BF24194DAE4EC9C.roa (raw, json)
Hash identifier: 7UNj/Mb+7EVOKuK6lWUpjoDohdpbfBCNNfCKOyNUjFY=
Subject key identifier: 31:29:1C:A6:B9:B5:84:F7:61:C3:6F:96:CA:D5:D3:72:FC:6D:26:71
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0DF0
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/3C5C07DE8CCB11F09BF24194DAE4EC9C.roa
Signing time: Mon 08 Sep 2025 15:48:17 +0000
ROA not before: Mon 08 Sep 2025 15:48:12 +0000
ROA not after: Sat 05 Sep 2026 15:48:12 +0000
asID: 9009
IP address blocks: 102.135.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3568 (0xdf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Sep 8 15:48:12 2025 GMT
Not After : Sep 5 15:48:12 2026 GMT
Subject: CN=68befac1-7fde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:40:95:34:f2:42:ab:4c:de:36:bd:fc:f0:f4:
d6:5b:71:42:be:e0:7e:2c:54:f7:c9:3e:e6:d1:00:
f9:55:38:ad:f2:13:dd:ed:f4:b8:26:c4:8d:27:3b:
21:0f:99:68:5e:ef:41:bb:cc:98:8b:49:6a:31:83:
6b:be:d2:25:6f:21:f2:2a:28:69:24:58:86:77:9f:
9f:87:59:ab:a4:59:6e:8c:04:4f:79:2b:d3:c2:ad:
89:56:76:6c:12:8b:4b:a8:65:26:24:b7:8e:02:e4:
5c:f9:23:f2:74:59:a7:60:1f:e5:68:1a:27:1e:19:
1e:7e:aa:1c:1b:74:af:87:59:3f:90:38:d2:f2:ad:
ce:6f:71:87:d5:33:44:ad:2a:07:6b:d9:ae:ec:9c:
5e:0c:69:98:98:7a:e1:00:7c:45:7a:e4:3d:14:6a:
32:21:96:1b:a7:d3:02:70:67:8a:8a:60:30:c9:06:
08:a8:8f:cc:98:bb:6c:1f:e5:d4:99:0b:4c:36:6b:
b8:fa:b3:03:a0:25:80:88:09:f0:88:07:99:93:d3:
8a:1c:55:e9:60:08:a6:43:3e:36:2d:5a:f6:dd:5f:
09:92:df:29:ed:06:cf:d6:b1:52:1c:fa:c2:70:60:
a8:9e:0d:5a:4a:20:ca:6e:ec:b5:23:67:72:83:f3:
ef:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:29:1C:A6:B9:B5:84:F7:61:C3:6F:96:CA:D5:D3:72:FC:6D:26:71
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/3C5C07DE8CCB11F09BF24194DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.72.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:69:bd:b7:26:b2:b6:88:8f:63:bf:b8:4b:45:4a:5f:3a:e5:
5d:9c:a5:14:4c:88:63:f5:f9:41:a2:73:51:b5:49:84:81:42:
32:57:e9:db:f5:96:5e:db:d1:63:b6:6b:b4:da:e5:51:e5:f0:
fe:84:61:91:b9:fb:6d:dc:82:96:b7:52:5e:9b:76:87:6c:67:
22:ac:f7:75:50:15:8d:55:9a:f4:5a:44:66:62:0d:54:93:16:
7e:57:3f:fe:c4:86:d4:b3:66:26:8b:c1:01:fe:84:af:c2:f2:
18:07:a3:19:75:66:7d:d0:e6:32:35:e4:df:ff:4e:24:9c:3c:
0d:81:de:1a:b4:39:8f:d6:4c:b9:cf:3a:c8:d7:15:dc:79:d5:
e1:29:ee:0d:15:58:18:19:42:d5:b1:d2:21:a2:eb:e8:ef:36:
56:71:d4:53:eb:71:61:8f:a5:aa:67:36:c7:c6:f6:62:c8:5c:
3b:7a:bd:ec:18:1b:74:e9:dc:ab:96:b1:3a:78:74:52:e4:91:
38:e8:99:33:50:3c:a4:da:09:5a:62:1c:41:49:71:6e:df:d2:
a7:34:c1:ce:12:22:c8:9b:92:06:8e:6a:b6:9a:2d:74:3b:97:
b1:52:8d:c6:2c:51:93:91:5e:c8:ac:9f:37:6a:6f:fe:de:cb:
9e:4f:f6:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 07:13:38 2025 by rpki-client