Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/58CC78909AA911F086920F9FDAE4EC9C.roa
File: 58CC78909AA911F086920F9FDAE4EC9C.roa (raw, json)
Hash identifier: K92Q8/dR768CGComi71D7DMZXPJtOGA5y3VJhUMTq84=
Subject key identifier: A1:2F:4E:E5:65:8C:37:77:B8:68:C6:4C:21:B0:C2:CE:8B:27:9F:C1
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0E9D
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/58CC78909AA911F086920F9FDAE4EC9C.roa
Signing time: Fri 26 Sep 2025 07:20:58 +0000
ROA not before: Fri 26 Sep 2025 07:20:54 +0000
ROA not after: Fri 25 Sep 2026 07:20:54 +0000
asID: 9009
IP address blocks: 102.135.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3741 (0xe9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Sep 26 07:20:54 2025 GMT
Not After : Sep 25 07:20:54 2026 GMT
Subject: CN=68d63eda-6ea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4d:10:5a:d2:63:49:bc:d4:dc:68:77:e2:8d:
17:6f:e4:11:6b:30:fc:73:08:75:c4:c8:2f:f1:df:
c6:7f:a8:0d:a5:a0:7a:9f:98:e5:b4:26:be:32:6d:
c4:07:b6:cc:7c:dc:49:65:4e:8f:1f:24:ea:63:1d:
a4:75:d2:d8:1e:c5:cb:43:2a:fb:fe:da:9a:e1:1e:
6d:1c:60:7a:db:34:95:7d:d7:a1:24:33:53:3d:e7:
26:10:e1:12:bf:7a:b8:80:28:18:ca:bd:af:36:54:
ab:8f:71:d6:1f:e2:5f:9e:02:81:e6:ae:c2:60:47:
66:93:35:75:11:11:58:e2:b5:38:e4:10:c1:40:4e:
b4:b4:67:aa:67:fe:b9:52:45:84:06:2b:d0:d8:44:
a1:5f:93:95:de:c8:a1:33:de:5f:9c:6c:c8:cc:9a:
40:45:ea:27:25:1c:6f:08:c9:54:75:36:59:99:c0:
79:1e:90:f7:63:d0:4d:50:02:99:ad:2a:eb:3e:27:
73:18:88:b6:b8:04:ec:fa:aa:d5:ac:6e:f1:25:5e:
8e:22:d6:79:86:71:66:cc:ea:fb:1a:66:67:c2:80:
09:6d:74:78:ce:b4:5f:84:4c:83:86:1b:54:9d:21:
e1:25:12:b1:8f:8d:c4:74:ca:51:97:af:bd:8c:41:
09:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:2F:4E:E5:65:8C:37:77:B8:68:C6:4C:21:B0:C2:CE:8B:27:9F:C1
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/58CC78909AA911F086920F9FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.25.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:6c:a0:04:0a:57:fc:0d:54:71:62:28:3b:72:d4:1f:30:60:
7f:23:51:09:b0:f4:b4:cc:9e:98:f4:a5:ea:37:a1:ca:7d:87:
34:35:b4:60:11:95:12:77:bf:2d:97:91:b2:a5:e0:73:eb:60:
d5:de:7b:a7:65:42:f1:d4:fd:e1:f1:22:b0:f7:21:de:67:6c:
2d:06:11:99:04:6f:55:ad:ed:80:a5:95:2f:aa:0c:a7:ae:37:
34:02:87:45:97:da:f6:82:f8:9c:88:33:1d:df:45:a4:24:a6:
60:68:c9:77:6e:f4:fe:66:04:a9:09:dc:8c:a3:a7:38:26:c2:
56:25:05:6c:79:fa:41:4a:de:12:b9:73:d3:d3:ab:12:09:97:
95:56:03:9b:cb:c3:6f:2e:3a:64:2e:1f:6a:ab:f3:6e:ea:87:
88:4e:3b:5f:79:56:c0:ff:71:29:1d:66:9f:78:5c:bb:1f:e5:
e2:29:29:b8:30:bb:d2:74:66:0c:86:1c:3a:dd:a6:5c:85:5d:
1c:75:ec:b6:4e:78:c8:53:ca:72:39:32:df:a7:24:e9:45:73:
e3:34:ee:04:67:ee:43:83:be:04:7d:31:4b:d9:b7:89:10:c9:
fc:f7:50:07:5c:9b:8f:60:92:6b:1f:0e:92:ca:92:9f:c4:c7:
c6:96:70:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 07:15:31 2025 by rpki-client