Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/8F8CF0CC8D4211F099C5A0A6DAE4EC9C.roa
File: 8F8CF0CC8D4211F099C5A0A6DAE4EC9C.roa (raw, json)
Hash identifier: s51OZgzQY90bA+b+H/Uk+5cBt7qAY3YEbj90JAgE7nc=
Subject key identifier: 1B:6E:04:69:9B:20:67:4E:0C:63:EA:E5:F0:84:F7:15:20:E1:A5:EB
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0E07
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/8F8CF0CC8D4211F099C5A0A6DAE4EC9C.roa
Signing time: Tue 09 Sep 2025 06:02:27 +0000
ROA not before: Tue 09 Sep 2025 06:02:22 +0000
ROA not after: Sat 05 Sep 2026 06:02:22 +0000
asID: 9009
IP address blocks: 102.135.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3591 (0xe07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Sep 9 06:02:22 2025 GMT
Not After : Sep 5 06:02:22 2026 GMT
Subject: CN=68bfc2f3-876b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:46:6b:3c:4a:d4:34:02:e1:d2:d1:a6:bc:cd:
2b:3b:01:da:cf:bb:64:86:a2:4a:06:77:24:37:9f:
a0:0e:1c:da:91:34:0d:6b:60:38:35:6e:22:e1:b1:
be:fa:17:0b:f9:fe:d5:0b:a1:5d:18:ba:e7:82:12:
cc:6b:eb:d2:55:7b:c8:ea:3b:48:e1:9f:47:ed:6a:
52:33:32:31:7e:b8:5f:43:4d:93:b1:5e:32:1b:bb:
02:8b:28:ab:ed:7b:88:d8:07:03:1a:e4:4c:5d:9e:
c3:90:fe:1f:f5:8e:8f:78:c9:b9:5c:f8:68:f3:54:
18:6f:bd:a2:06:ff:ff:42:08:10:e6:24:88:5f:7a:
40:e9:50:c7:aa:4d:95:7b:58:e8:77:0f:96:31:43:
02:2a:b6:f0:97:47:91:00:23:9c:77:a5:39:79:4f:
7c:ee:8a:7a:c4:bd:6f:2c:09:fb:c6:e4:fa:d8:c7:
60:7a:36:5d:4d:45:77:18:0f:dc:26:a3:1a:f7:47:
1c:d9:54:bb:43:ce:d1:3d:c0:2d:32:49:2a:12:dd:
f7:e5:1a:c4:1b:28:fa:81:9f:fe:77:f9:f3:d6:da:
c3:62:5b:e8:08:6c:7c:c3:d7:2f:ca:62:fb:3e:fe:
34:cf:4c:90:b3:3c:68:7d:54:bb:f5:b5:23:4b:2e:
a4:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:6E:04:69:9B:20:67:4E:0C:63:EA:E5:F0:84:F7:15:20:E1:A5:EB
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/8F8CF0CC8D4211F099C5A0A6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.86.0/24
Signature Algorithm: sha256WithRSAEncryption
df:5e:dc:4a:b6:07:d2:a9:65:34:2d:0f:e8:01:d8:ee:b5:ec:
64:6d:31:d1:fb:4a:1d:cd:58:f4:f8:2b:b9:d3:e9:1d:32:73:
c8:24:66:7d:a6:9e:f7:5b:25:fd:4c:8e:15:37:fd:28:00:59:
8f:23:46:b1:93:a5:c5:6d:ab:51:c9:1d:51:ba:08:8c:41:32:
b2:c5:98:d2:4a:b0:db:5c:31:3f:74:d2:4b:ca:4d:d8:96:96:
11:c3:77:c5:cc:e8:fd:dd:0a:17:fe:55:e2:4d:9e:d6:98:7f:
60:dc:6a:33:7a:f7:c6:72:90:9e:28:1f:23:bc:08:cd:94:48:
f6:9d:e3:ae:d5:24:b6:dc:b1:46:56:95:b5:a9:74:ad:5b:db:
0a:e1:5b:cf:26:c6:4f:ac:66:60:57:3f:42:42:ff:e4:d9:d0:
68:c9:b9:ef:25:79:15:57:3b:2c:13:99:80:62:1c:22:08:8a:
75:ea:be:0d:04:ac:d3:5c:9d:ea:38:71:7b:1b:26:a6:52:30:
1b:1b:ba:99:86:ca:89:66:26:2f:cd:d2:b0:de:01:0b:9a:2c:
26:b3:33:b5:13:f2:3e:af:69:4c:9d:e3:5e:ac:63:54:7c:3e:
81:a1:6a:6a:3e:0d:b7:56:ab:20:50:89:25:7b:7d:64:03:5e:
e7:b6:65:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 07:13:38 2025 by rpki-client