Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/5846F5548D7E11F0BF3DE2A2DAE4EC9C.roa
File: 5846F5548D7E11F0BF3DE2A2DAE4EC9C.roa (raw, json)
Hash identifier: dQ1JVgFkLJvxxC3ZTMSTiwE1gzbXdTD5bdCCXGO9NII=
Subject key identifier: 43:EB:A8:91:6D:05:20:E7:14:00:7A:6B:B3:E2:BA:9E:46:64:39:5C
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0E1D
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/5846F5548D7E11F0BF3DE2A2DAE4EC9C.roa
Signing time: Tue 09 Sep 2025 13:10:24 +0000
ROA not before: Tue 09 Sep 2025 13:10:19 +0000
ROA not after: Sat 05 Sep 2026 13:10:19 +0000
asID: 9009
IP address blocks: 102.135.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3613 (0xe1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Sep 9 13:10:19 2025 GMT
Not After : Sep 5 13:10:19 2026 GMT
Subject: CN=68c02740-bb21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:af:84:56:69:24:61:a6:65:29:a2:67:7a:c8:
41:1a:ad:bb:49:57:4f:c5:17:ee:91:1a:1d:1e:93:
8e:47:2c:f3:ac:08:60:a6:f0:d1:7f:8e:7b:05:20:
b5:f6:2e:da:ec:ae:02:3a:11:aa:86:fb:cf:29:6e:
ac:38:20:b7:2d:f0:2f:80:7f:48:6c:bf:61:46:17:
85:3c:79:70:67:5f:7f:99:c8:01:67:15:b2:71:05:
71:71:1f:2d:fc:ef:67:08:1c:52:47:00:72:7d:69:
f2:48:82:78:31:eb:df:99:aa:8a:80:ab:8e:f7:1d:
ab:47:31:94:79:34:38:ea:be:03:bf:18:a9:bc:43:
40:85:f7:27:be:b9:28:23:bd:06:01:b8:da:0e:11:
f2:c3:0f:2c:46:58:f2:12:e9:d5:19:b6:db:70:c2:
ba:ab:02:a3:49:27:b0:01:61:aa:1d:23:8b:f2:50:
f8:f3:eb:d5:6b:f9:1b:20:8b:9b:6b:da:0e:ce:28:
54:c8:ee:e9:9e:ba:09:eb:9e:98:d0:aa:4c:5f:94:
2f:f0:c5:5c:ae:98:47:50:2a:2a:ae:73:20:69:02:
c6:43:57:6e:ae:ce:32:a5:98:29:d9:fe:45:6a:d9:
ef:d3:df:4b:57:a1:e2:36:93:17:25:d3:f9:4f:97:
05:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:EB:A8:91:6D:05:20:E7:14:00:7A:6B:B3:E2:BA:9E:46:64:39:5C
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/5846F5548D7E11F0BF3DE2A2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.117.0/24
Signature Algorithm: sha256WithRSAEncryption
44:f3:de:67:e3:69:13:ba:2a:2a:38:01:b0:96:62:3c:27:34:
46:d1:42:23:9a:83:8f:b7:7c:76:00:d5:39:d4:cc:ed:db:67:
6f:2b:25:7d:30:7a:22:5e:96:d0:dc:d1:c4:a9:4a:ea:fd:47:
f4:c1:1c:80:11:24:af:14:49:ec:7a:9f:e3:54:aa:c9:c2:43:
df:8a:e4:b7:48:9e:57:0c:8f:3d:3c:a4:5c:f0:5d:86:86:b9:
91:70:2d:70:c5:c2:40:d4:37:4f:71:2f:c2:f2:29:8d:7e:70:
66:d5:59:c3:fd:93:49:71:76:fc:c4:40:a9:95:cc:4e:31:80:
7c:03:15:fc:a4:5f:29:bf:c4:51:c5:ab:87:95:c1:ae:c9:b7:
44:53:0d:81:eb:b6:f7:74:09:2c:74:8d:f0:36:c3:a3:78:6b:
18:41:15:ab:a9:f1:66:7e:50:a0:f7:50:5e:15:39:1b:13:44:
81:6c:32:e1:7a:c0:bf:59:d3:e7:3c:2d:a8:39:e1:b6:40:66:
8c:95:87:ab:ea:f2:1c:3b:5d:3d:71:84:6e:02:33:2b:f6:b2:
3e:44:de:d3:de:ba:42:73:93:f5:03:e1:ad:00:6e:67:7e:a2:
1a:ff:02:91:8a:d3:0f:d4:02:22:67:52:43:e7:3d:f9:e2:6e:
2c:6e:0e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 07:15:30 2025 by rpki-client