Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/79410DCE405011F0B03D738BDAE4EC9C.roa
File: 79410DCE405011F0B03D738BDAE4EC9C.roa (raw, json)
Hash identifier: S7ecuEup9yT0jLqLiKcY1AozuHfsn1ORPOjOKLh+9BM=
Subject key identifier: 9B:DA:66:82:32:E2:3A:F3:A6:65:B1:D6:D6:13:05:F4:07:1F:96:08
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0B09
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/79410DCE405011F0B03D738BDAE4EC9C.roa
Signing time: Tue 03 Jun 2025 07:58:03 +0000
ROA not before: Tue 03 Jun 2025 07:57:58 +0000
ROA not after: Wed 03 Jun 2026 07:57:58 +0000
asID: 9304
IP address blocks: 102.135.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Jun 2025 00:06:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2825 (0xb09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Jun 3 07:57:58 2025 GMT
Not After : Jun 3 07:57:58 2026 GMT
Subject: CN=683eab0b-917f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:fb:dd:8d:65:92:96:42:f2:e0:7c:36:2d:c6:
94:af:3f:58:6b:f8:93:15:b1:70:3f:53:24:50:a2:
be:37:54:52:9e:14:83:7a:83:87:c3:31:92:6d:a5:
2b:49:9f:8b:5f:18:47:d0:60:26:ab:40:52:b4:c1:
39:d3:cc:4d:e4:fd:b9:c4:15:4e:34:d0:0f:c6:a8:
a8:2a:87:d9:ae:9a:89:8f:36:67:2d:08:6c:94:d5:
d6:f4:f3:b6:22:d6:13:d7:d7:25:5f:b2:59:3c:2f:
d0:78:ba:65:e0:91:0b:36:fe:04:75:5d:50:0d:8d:
e9:86:8c:63:66:34:7e:4c:bf:e9:59:e1:57:03:cd:
9e:5d:fb:f0:18:06:78:a6:47:48:6e:40:b0:44:57:
64:f6:01:bc:a2:66:df:dc:0d:e8:e8:02:a4:d0:35:
08:b1:d8:6a:13:63:44:11:f4:5e:fe:75:60:a1:22:
8d:d9:81:c9:d9:4e:51:fd:ed:78:8f:50:20:a1:ec:
22:52:d7:da:e6:dd:df:ee:f1:0c:2a:93:a2:94:2e:
7b:f6:d5:ae:db:7d:58:68:01:9d:82:c3:c0:55:20:
7e:de:31:85:26:7a:38:dc:4a:08:b6:21:e0:00:53:
9d:d0:f5:3c:f2:fb:e0:06:4e:8e:86:ab:f8:91:b3:
ba:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:DA:66:82:32:E2:3A:F3:A6:65:B1:D6:D6:13:05:F4:07:1F:96:08
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/79410DCE405011F0B03D738BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.98.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:0a:2b:05:b5:eb:e1:40:18:4f:43:b1:f0:db:bd:67:36:6e:
3a:cd:2b:a6:91:b5:b1:6c:71:c2:e9:60:75:df:1f:ee:9d:d1:
56:ed:b6:b1:fc:44:ee:30:a0:52:10:69:e3:41:3f:ca:fe:43:
02:3b:bd:c5:41:f6:da:a0:23:9a:2b:83:69:8e:88:15:47:99:
e9:f6:22:83:e7:34:c4:8d:16:30:13:95:5a:f2:b5:39:3c:5d:
66:61:09:0c:f1:5f:51:66:ec:cb:d6:1d:d8:81:ae:df:1f:bd:
e7:18:1b:a0:90:b6:ba:c5:4c:af:d7:cf:29:df:c3:f0:51:f0:
c2:8c:fd:bc:a0:de:b3:f1:06:43:2d:d7:33:a9:1a:45:f1:0a:
48:e3:2f:27:69:68:2f:bf:1c:75:75:a7:5a:e5:b4:95:c6:1d:
f1:46:a7:e5:32:4f:33:68:e0:67:ee:1c:cc:b7:ca:cd:60:79:
3c:b2:dc:bc:c1:1e:6a:9f:65:9d:e1:49:37:3b:d8:80:a4:f6:
3a:33:d2:fd:82:fd:b9:91:05:23:e9:75:ea:0f:f3:1e:bb:95:
47:f8:0b:7b:6b:06:c1:b1:35:8b:5d:80:a0:3a:69:58:d5:77:
10:6c:93:54:0d:10:e3:e3:70:fe:de:40:a0:26:a7:dd:cf:ca:
87:df:17:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:50:09 2025 by rpki-client