Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/7FB3E11E8CCB11F0949FF894DAE4EC9C.roa
File: 7FB3E11E8CCB11F0949FF894DAE4EC9C.roa (raw, json)
Hash identifier: UxPbmDsOC5GpCoWc7u05vEBVA0fMJoHaYCGKqG+eHCk=
Subject key identifier: 84:3D:67:B9:B1:02:23:8C:26:19:5D:C8:51:87:EE:5B:B0:14:E3:DE
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0DF4
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/7FB3E11E8CCB11F0949FF894DAE4EC9C.roa
Signing time: Mon 08 Sep 2025 15:50:10 +0000
ROA not before: Mon 08 Sep 2025 15:50:05 +0000
ROA not after: Sat 05 Sep 2026 15:50:05 +0000
asID: 9009
IP address blocks: 102.135.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3572 (0xdf4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Sep 8 15:50:05 2025 GMT
Not After : Sep 5 15:50:05 2026 GMT
Subject: CN=68befb32-ff13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:26:8f:9c:ac:ba:82:88:a5:0d:3c:17:aa:9a:
85:83:82:42:26:05:6a:7c:e7:52:69:3f:24:8d:4c:
9e:30:21:34:f9:f6:4e:f1:23:47:0c:ac:a2:5f:45:
ab:8e:c6:2b:67:22:01:46:36:a1:39:d9:90:10:7c:
7e:58:f8:d8:8c:be:96:f0:ed:3e:bf:ee:b2:35:68:
96:ae:b2:fc:92:05:55:f3:1a:f1:f3:e3:be:59:b5:
b3:94:c2:62:50:6e:db:80:7f:92:49:ce:50:1e:07:
6a:6b:00:3b:7d:6c:5e:e3:f1:bf:70:a4:3c:1d:2a:
ca:c5:e8:73:10:0e:f2:57:c5:05:d3:3d:b3:25:37:
f5:08:03:52:5f:04:0a:42:ab:2c:7f:d0:d9:b9:93:
77:ba:f9:a3:84:2e:5e:84:ab:d3:16:e4:e9:07:09:
02:65:65:3d:44:5d:f1:80:33:d7:d8:0b:81:b7:92:
9b:5a:36:e6:9f:1c:e3:55:3e:a3:1c:c4:47:41:5b:
06:ae:8b:8e:3a:b1:40:13:32:11:0c:0f:ff:e5:f0:
88:be:61:7c:77:45:ae:4f:d8:cb:13:93:c3:1e:05:
0e:2f:94:23:82:07:e0:26:f8:4a:58:6c:f9:1b:ac:
4e:27:53:98:06:91:89:95:60:34:a5:15:b3:d6:ba:
a9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:3D:67:B9:B1:02:23:8C:26:19:5D:C8:51:87:EE:5B:B0:14:E3:DE
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/7FB3E11E8CCB11F0949FF894DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.76.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:12:6c:9b:32:46:5d:d4:99:16:7f:4c:a2:91:6b:34:1b:4a:
0e:34:b5:35:9a:dd:12:fb:a7:42:d6:88:a3:23:f1:05:9f:f9:
3a:eb:61:a5:b2:0b:6e:aa:2e:a2:a0:2a:94:ce:2f:88:c8:03:
10:6a:04:b9:67:1f:45:c2:db:5c:ff:93:cd:42:8c:b5:23:f7:
5c:0a:24:18:94:15:b1:0b:dc:71:52:18:6a:dc:03:42:2a:0d:
03:bd:27:96:27:b5:42:11:4e:a3:01:2b:1b:dd:4c:71:25:fa:
b3:2a:94:c6:4f:e6:25:23:f2:c5:8e:cc:6a:a6:c7:55:3d:30:
18:b4:34:55:9e:3f:f3:93:50:96:ab:e6:66:eb:60:7a:b1:5a:
e5:65:a9:5b:1c:13:ff:fe:d0:c9:06:a0:22:84:63:b3:c4:50:
ab:22:f3:ab:8a:b2:16:9b:97:f4:0d:b6:19:88:36:64:05:5d:
31:d6:36:3a:05:64:05:fb:8c:f8:56:50:20:89:cc:d1:d2:d6:
0c:3f:21:52:94:fd:40:57:0b:c7:91:fc:96:b9:74:7c:23:37:
e8:7b:21:11:de:b9:e5:9e:f3:ba:51:2c:9f:67:a5:bf:4a:96:
70:9d:8a:5c:85:5e:56:57:3a:2f:a5:7f:6d:98:c1:27:df:93:
bd:bc:25:bc
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDfQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNTA5MDgxNTUwMDVaFw0yNjA5MDUxNTUwMDVaMBgxFjAU
BgNVBAMTDTY4YmVmYjMyLWZmMTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDpJo+crLqCiKUNPBeqmoWDgkImBWp851JpPySNTJ4wITT59k7xI0cMrKJf
RauOxitnIgFGNqE52ZAQfH5Y+NiMvpbw7T6/7rI1aJausvySBVXzGvHz475ZtbOU
wmJQbtuAf5JJzlAeB2prADt9bF7j8b9wpDwdKsrF6HMQDvJXxQXTPbMlN/UIA1Jf
BApCqyx/0Nm5k3e6+aOELl6Eq9MW5OkHCQJlZT1EXfGAM9fYC4G3kptaNuafHONV
PqMcxEdBWwaui446sUATMhEMD//l8Ii+YXx3Ra5P2MsTk8MeBQ4vlCOCB+Am+EpY
bPkbrE4nU5gGkYmVYDSlFbPWuqkjAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUhD1n
ubECI4wmGV3IUYfuW7AU494wHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3LzdGQjNFMTFFOENDQjExRjA5NDlGRjg5NERBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmh0wwDQYJKoZIhvcNAQEL
BQADggEBAI8SbJsyRl3UmRZ/TKKRazQbSg40tTWa3RL7p0LWiKMj8QWf+TrrYaWy
C26qLqKgKpTOL4jIAxBqBLlnH0XC21z/k81CjLUj91wKJBiUFbEL3HFSGGrcA0Iq
DQO9J5YntUIRTqMBKxvdTHEl+rMqlMZP5iUj8sWOzGqmx1U9MBi0NFWeP/OTUJar
5mbrYHqxWuVlqVscE//+0MkGoCKEY7PEUKsi86uKshabl/QNthmINmQFXTHWNjoF
ZAX7jPhWUCCJzNHS1gw/IVKU/UBXC8eR/Ja5dHwjN+h7IRHeueWe87pRLJ9npb9K
lnCdilyFXlZXOi+lf22YwSffk728Jbw=
-----END CERTIFICATE-----
Generated at Sun Oct 19 07:13:39 2025 by rpki-client