Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/5A143128888111F08DEF4BB9DAE4EC9C.roa
File: 5A143128888111F08DEF4BB9DAE4EC9C.roa (raw, json)
Hash identifier: pjqbNv5Htfbjj6JOr5Y4sOYI7dCL9lp86uERSa1yKUw=
Subject key identifier: 7F:FA:E6:F3:C5:35:E2:03:91:DB:63:01:9B:CE:6F:B4:2C:D7:5B:B2
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0DCA
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/5A143128888111F08DEF4BB9DAE4EC9C.roa
Signing time: Wed 03 Sep 2025 04:49:20 +0000
ROA not before: Wed 03 Sep 2025 04:49:15 +0000
ROA not after: Tue 10 Feb 2026 04:49:15 +0000
asID: 9009
IP address blocks: 102.135.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 06 Sep 2025 02:47:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3530 (0xdca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Sep 3 04:49:15 2025 GMT
Not After : Feb 10 04:49:15 2026 GMT
Subject: CN=68b7c8cf-7764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8a:78:fd:be:99:01:3d:9f:4b:24:35:38:f6:
a5:c7:cb:a4:30:5f:32:2f:c4:f1:3b:ae:da:67:95:
5c:ec:7a:9a:70:c5:8a:fa:30:26:54:1e:ce:5e:d7:
0f:3a:6c:db:cd:62:db:43:1a:c7:3b:8c:10:24:1d:
c4:f8:de:fd:c6:37:0e:f1:f1:6b:d3:f6:ce:12:81:
76:d3:f6:6e:0e:7c:f9:80:82:f6:6b:fd:be:6d:2f:
f6:56:a8:5e:d7:28:1d:78:0d:77:63:bb:84:2b:98:
bc:43:72:94:00:ae:a5:6c:0d:19:26:9f:59:fe:2d:
91:d9:9d:96:9f:7d:61:68:87:a2:0f:ba:06:f7:0d:
c6:e7:45:92:a6:22:03:6c:14:41:04:6c:14:0f:4a:
8a:37:98:86:9f:42:f0:72:16:42:89:97:e9:a5:42:
8a:6b:be:3b:8c:aa:06:9f:df:9c:07:6e:b7:d0:e6:
af:d0:28:81:a5:cb:7f:c5:1b:60:e2:24:0d:81:9d:
6f:06:bf:52:4a:97:e4:fa:c4:2d:43:6b:23:14:c6:
0e:8b:6c:60:eb:ec:cb:59:06:f6:37:c5:e1:56:0a:
2b:da:9c:51:db:7d:97:80:05:62:1c:b0:88:19:ad:
66:94:8a:5a:27:bb:99:71:53:06:0f:d3:6b:57:95:
cc:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:FA:E6:F3:C5:35:E2:03:91:DB:63:01:9B:CE:6F:B4:2C:D7:5B:B2
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/5A143128888111F08DEF4BB9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.42.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:e0:e1:f8:63:81:ea:43:98:f0:85:ae:66:2a:c0:b9:e0:c2:
12:1a:ea:a6:de:7f:9b:25:b3:50:5d:36:c3:cd:81:78:3d:37:
45:e4:e4:4c:89:3e:ec:86:1d:f0:30:c3:55:a8:7d:bd:1c:fd:
2f:52:80:7d:bc:94:bb:3a:9f:bc:c4:e7:b1:9f:d6:e4:0a:eb:
92:02:c3:1f:4f:44:a5:02:f4:27:1d:69:c7:f7:d4:ac:7f:3b:
19:8f:74:0a:60:ea:83:94:90:ae:da:70:66:ce:61:cd:52:42:
e7:5d:36:51:5e:b4:a1:bb:f3:d9:12:b7:da:b8:88:c6:3b:27:
ce:e0:55:ff:f8:c0:16:b0:54:f6:cd:2c:48:c1:18:ff:8b:7d:
3b:13:c4:99:53:9b:68:50:0a:f8:1d:2b:43:8f:85:57:3a:0c:
1c:12:65:79:cb:b8:63:d8:b9:4b:17:98:27:ef:a1:48:14:8c:
ec:92:d2:da:dd:1f:a4:b4:a0:c7:15:27:f8:cd:52:99:ae:85:
4e:77:6b:ce:2e:72:51:98:4b:cc:d0:97:dc:00:d4:14:bb:3a:
92:6e:f0:3d:42:25:ba:8d:d1:0a:4f:6d:d7:e2:25:bf:52:31:
4d:fc:9b:77:01:86:1d:49:a9:54:11:68:8c:b3:10:6e:ea:26:
d4:28:a1:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 02:25:13 2025 by rpki-client