Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/7082BD4C8D4211F0A5C094A6DAE4EC9C.roa
File: 7082BD4C8D4211F0A5C094A6DAE4EC9C.roa (raw, json)
Hash identifier: /xJSgNMQFwipTHio3ZT85+RIdhT6oS8XFfvlrXFbfa8=
Subject key identifier: 11:EC:20:B6:69:E6:95:BE:AD:B1:41:67:DA:3C:7B:08:4A:1D:6B:ED
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0E05
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/7082BD4C8D4211F0A5C094A6DAE4EC9C.roa
Signing time: Tue 09 Sep 2025 06:01:35 +0000
ROA not before: Tue 09 Sep 2025 06:01:30 +0000
ROA not after: Sat 05 Sep 2026 06:01:30 +0000
asID: 9009
IP address blocks: 102.135.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3589 (0xe05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Sep 9 06:01:30 2025 GMT
Not After : Sep 5 06:01:30 2026 GMT
Subject: CN=68bfc2bf-8232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d2:a7:55:13:df:73:14:5c:89:13:1b:78:19:
94:3b:60:25:8f:88:e9:59:87:ac:b6:84:d1:b6:9b:
fd:63:2e:c7:ee:b6:6c:60:fa:96:9d:ab:31:6f:58:
14:48:b8:38:e1:06:77:19:a6:e4:85:0e:24:6d:8a:
4f:cf:c7:f0:d4:0e:e4:c5:f2:0d:92:5f:56:3e:e1:
40:18:28:8a:3f:a9:9f:e3:48:f3:79:9f:2f:d2:bf:
0f:27:61:52:8d:69:b7:3a:0a:77:f7:3b:58:b1:65:
56:6b:19:4f:13:ba:fc:a9:94:f2:c0:37:f1:f3:c5:
0c:af:90:da:6a:48:4b:a4:dc:7a:a6:fa:b8:de:1f:
f7:70:18:18:76:c5:ef:b5:ae:e2:e6:c4:1b:02:07:
2b:9b:5d:c9:27:42:21:e7:a6:d6:6c:91:82:cd:2e:
e8:6d:e0:3a:24:af:c5:5a:c2:8c:0a:3b:2d:03:d2:
be:fb:db:b5:23:38:cd:1b:54:95:05:ce:e0:ad:6d:
c3:37:7a:10:5b:d2:20:69:d0:49:41:6b:8b:50:57:
a2:bc:01:ec:58:a8:3e:02:76:f4:0c:eb:ce:0d:74:
ed:39:88:d3:8a:f5:2f:a0:49:fc:42:7d:81:41:43:
e0:f1:80:2a:fc:e9:5e:24:5a:04:c5:a5:f3:19:01:
97:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:EC:20:B6:69:E6:95:BE:AD:B1:41:67:DA:3C:7B:08:4A:1D:6B:ED
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/7082BD4C8D4211F0A5C094A6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.85.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:e2:5b:22:05:2c:fc:b9:6f:20:c0:71:7d:fe:66:0b:2a:2b:
d7:d1:34:0a:61:46:91:54:eb:7d:4d:06:8c:8b:36:35:11:c9:
db:26:a8:eb:14:85:67:09:57:7f:e4:2b:c4:d3:d8:cd:9c:ad:
fa:f4:be:0d:7e:9c:20:1b:9c:40:c1:7a:70:65:eb:69:10:1c:
32:30:a4:ad:b6:05:78:e1:15:a8:14:03:0d:1b:b0:bc:df:a0:
b7:a8:e3:ba:0d:0f:07:5b:51:66:00:9e:bf:75:d1:b7:eb:1f:
3c:71:cc:e0:9c:02:85:65:b9:84:aa:c7:ba:84:e2:da:2e:52:
5e:d1:10:d9:9f:af:7c:7b:52:8a:f8:bc:f2:34:4b:3f:0c:38:
5f:4a:44:8f:b9:50:24:31:82:41:e4:82:59:0e:87:3f:54:a2:
51:c4:fd:a4:f0:48:4a:39:e3:85:d1:66:82:13:fe:2b:24:6c:
78:d7:46:c2:57:e4:35:d0:33:1c:35:87:83:c9:fa:e6:e6:90:
d6:74:29:5e:21:2f:9b:11:81:16:6b:0f:07:3c:20:f8:b1:9e:
e1:d4:98:f4:e4:3c:39:d9:cb:76:29:be:5b:ba:1c:2a:83:03:
93:27:e3:69:05:ac:4f:ff:ba:ef:d7:77:0d:d4:ec:87:d7:d7:
26:ae:80:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 07:05:58 2025 by rpki-client