Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/642D293C9AA911F0AB2D149FDAE4EC9C.roa
File: 642D293C9AA911F0AB2D149FDAE4EC9C.roa (raw, json)
Hash identifier: JHcKEeGPfE0Vtcrdh0LCq4X4WLHq6I43gKwSubSJ//w=
Subject key identifier: B7:66:40:B7:D9:4B:CA:93:F6:8C:3D:50:50:1B:31:E9:7D:1F:CB:FA
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0E9F
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/642D293C9AA911F0AB2D149FDAE4EC9C.roa
Signing time: Fri 26 Sep 2025 07:21:17 +0000
ROA not before: Fri 26 Sep 2025 07:21:13 +0000
ROA not after: Fri 25 Sep 2026 07:21:13 +0000
asID: 9009
IP address blocks: 102.135.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3743 (0xe9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Sep 26 07:21:13 2025 GMT
Not After : Sep 25 07:21:13 2026 GMT
Subject: CN=68d63eed-f3bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:95:69:af:f4:4d:3e:3a:68:42:8c:eb:bf:1d:
29:41:df:fb:b4:80:ed:91:d7:d1:2f:f3:9c:ba:df:
bb:2d:36:45:bc:e6:67:9d:af:d8:e3:91:47:38:6f:
8c:82:7f:b0:e6:2c:59:5f:22:e7:e0:db:3d:09:51:
0a:78:40:34:7c:f1:99:a4:62:52:d0:68:cb:5c:f8:
cf:23:b0:43:3a:32:58:e5:bb:c6:f0:6e:0b:79:f4:
84:38:f8:12:88:2a:1c:35:a1:82:16:43:bf:c8:77:
fe:d4:eb:f0:41:18:77:b8:d9:14:67:5a:58:91:c8:
e0:39:3e:64:12:ec:d2:fb:41:85:1e:e5:01:f3:84:
d5:be:95:15:fb:a0:36:b9:4f:55:b1:ec:74:83:15:
75:8e:2b:7c:22:34:4d:9c:e7:1a:58:f5:14:c7:56:
a3:a2:32:a2:5b:e8:75:86:6c:19:8b:d3:2f:50:62:
8b:48:43:aa:d7:a0:04:a4:ba:0a:c2:1a:b2:c9:23:
c4:7c:af:d3:cf:6b:d4:24:26:1e:77:3b:ae:07:c3:
37:60:a4:5f:25:04:0f:15:d3:4a:0b:58:1d:8c:46:
db:37:bc:5b:97:9f:0a:6f:d9:54:23:a1:4f:61:9b:
05:65:fc:1d:60:5a:a1:a3:a8:3a:36:0b:d9:9b:fc:
62:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:66:40:B7:D9:4B:CA:93:F6:8C:3D:50:50:1B:31:E9:7D:1F:CB:FA
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/642D293C9AA911F0AB2D149FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.37.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:c9:a7:57:f4:57:84:db:ec:de:d5:ab:83:db:80:5b:c6:8a:
83:14:58:b8:a7:cc:66:50:6f:cd:11:e5:39:39:0e:4c:96:ac:
90:8f:68:b1:a6:1f:53:99:09:b0:04:14:26:f3:40:b4:5a:44:
9a:1c:e2:2b:7f:3d:9d:c6:d5:07:d1:9d:58:a2:87:16:97:5e:
16:13:85:e5:83:5f:0e:20:c0:5f:7c:3b:33:2b:e5:93:40:39:
49:24:83:13:cc:7a:95:b1:51:07:bc:49:bf:61:36:d3:68:63:
1f:ed:8c:a5:4f:ab:c8:1d:53:2d:47:4f:d6:61:ad:44:24:55:
26:fc:65:e6:71:88:0f:bf:d4:5b:4d:79:a2:71:c0:dd:1a:19:
2c:3b:63:0e:8b:73:fe:19:67:23:49:72:dd:b9:ed:98:21:b6:
6e:fe:8d:4c:62:4e:37:f7:38:82:2c:4b:f9:4a:07:fc:d3:f9:
57:75:86:ba:15:2d:64:d8:57:05:94:32:02:66:50:e7:7e:92:
c0:ab:21:1f:e4:35:56:d3:1f:bc:5f:ed:6f:58:b4:34:45:52:
99:83:db:fb:8b:33:03:90:f2:db:7e:fb:44:e4:bc:27:66:16:
d4:ba:45:5b:54:82:50:7e:60:d9:77:17:f4:be:3a:19:c5:e4:
73:ea:d2:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 07:13:41 2025 by rpki-client