Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/43E2123E831411F0966E50D9DAE4EC9C.roa
File: 43E2123E831411F0966E50D9DAE4EC9C.roa (raw, json)
Hash identifier: +zJm/WMkeQKKadGQROf+yfJ2ZMdrdJCRAVidAdqo008=
Subject key identifier: B9:14:16:F3:BC:D9:17:E0:2A:04:9F:DC:B0:11:EE:ED:BA:F3:6D:1F
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0D2F
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/43E2123E831411F0966E50D9DAE4EC9C.roa
Signing time: Wed 27 Aug 2025 07:05:51 +0000
ROA not before: Wed 27 Aug 2025 07:05:47 +0000
ROA not after: Tue 10 Feb 2026 07:05:47 +0000
asID: 34450
IP address blocks: 102.135.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 09 Sep 2025 00:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3375 (0xd2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Aug 27 07:05:47 2025 GMT
Not After : Feb 10 07:05:47 2026 GMT
Subject: CN=68aeae4f-745f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:99:cd:16:95:99:12:c6:9b:45:7d:da:91:c5:
40:50:2c:50:e3:8d:a0:a3:d0:cb:27:8a:2a:29:d5:
06:99:67:d2:84:9b:77:d9:79:74:d8:6d:e2:58:c1:
91:a6:8a:a5:10:7a:6b:18:b5:fb:5c:ab:51:d3:0d:
9f:a2:2e:bd:75:81:5f:fe:4f:43:c4:4f:36:ee:fc:
c0:ab:14:5b:0b:c2:70:75:6c:3e:0b:10:b2:dc:e1:
eb:11:96:89:e0:13:4f:50:bc:7e:1c:cc:d3:a5:33:
d3:b6:76:12:fe:d3:0e:44:37:2d:95:e6:fe:a0:23:
a3:f0:ae:a7:25:9c:e1:d3:68:9e:c9:f8:b8:d4:60:
67:73:2e:1c:27:cc:77:71:8b:68:5e:11:f4:66:fd:
3c:10:7f:36:8f:ca:6d:13:c4:c2:48:a5:0d:1a:fc:
0d:30:6d:08:a8:57:01:1f:19:ff:48:21:d1:ea:36:
d0:67:7d:d1:51:85:90:f8:e8:9f:26:bb:41:cb:5d:
bc:89:4a:1b:58:d5:3a:6c:11:20:9d:c5:4b:58:86:
13:f6:61:e0:99:c7:45:94:1d:f9:75:74:41:82:1b:
58:a6:cc:b2:c8:a9:ae:69:08:08:b2:4c:14:c0:48:
40:a7:71:0b:44:82:5f:24:a7:18:c2:e4:2d:4a:ae:
a0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:14:16:F3:BC:D9:17:E0:2A:04:9F:DC:B0:11:EE:ED:BA:F3:6D:1F
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/43E2123E831411F0966E50D9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.121.0/24
Signature Algorithm: sha256WithRSAEncryption
95:2a:3c:37:72:8c:24:6e:d4:db:92:fe:63:02:c8:07:99:5f:
c8:ca:39:1e:49:86:ae:b9:c1:c1:b5:72:3e:45:80:8e:ea:e1:
01:fa:3a:71:57:2d:53:d5:10:ed:25:26:0c:2b:c8:4c:38:0c:
f0:0a:9e:e0:d1:07:d4:57:9d:99:fc:ac:53:8c:69:f5:81:fc:
c4:58:c2:8c:f8:00:43:69:cf:3f:32:fe:be:2f:6c:96:f3:96:
7a:39:7d:b7:1b:6a:15:8d:4d:4b:be:71:8f:38:bc:18:de:b8:
6a:68:21:47:a8:0e:b6:64:35:e1:f2:50:9e:d6:59:fd:66:70:
1e:7a:d3:bf:fe:10:9a:81:5d:6f:34:72:5d:90:f3:73:8e:1b:
82:d8:d8:a9:9f:d3:b9:ab:38:5b:36:85:28:2f:2a:03:07:38:
26:3c:b1:18:1f:7b:86:a4:97:ab:1d:a7:f3:51:78:01:6e:55:
31:4b:2f:c0:59:a0:d4:6d:b1:85:39:63:b1:9d:ef:2f:51:4a:
62:e5:5d:ee:4e:4b:05:82:8d:06:e1:93:0b:78:c6:b6:96:7d:
15:e8:ba:c8:57:dc:7d:e9:a0:7c:e0:d7:b0:ec:cf:db:b7:a7:
e5:9f:f9:89:54:02:66:e8:1c:aa:a7:a0:f0:a6:8a:c2:61:55:
73:e8:30:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:37:08 2025 by rpki-client