Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/917737668CCB11F0AF64C596DAE4EC9C.roa
File: 917737668CCB11F0AF64C596DAE4EC9C.roa (raw, json)
Hash identifier: lwGs03vl3Mqzw4HlPHLkHc4pZemBbe12CshH2o25vlI=
Subject key identifier: CE:86:00:63:2D:31:14:A5:44:30:51:8F:D3:2E:93:34:DB:29:DF:DB
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0DF6
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/917737668CCB11F0AF64C596DAE4EC9C.roa
Signing time: Mon 08 Sep 2025 15:50:40 +0000
ROA not before: Mon 08 Sep 2025 15:50:33 +0000
ROA not after: Sat 05 Sep 2026 15:50:33 +0000
asID: 9009
IP address blocks: 102.135.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3574 (0xdf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Sep 8 15:50:33 2025 GMT
Not After : Sep 5 15:50:33 2026 GMT
Subject: CN=68befb50-5378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:94:dd:c5:3f:c5:5d:94:bf:cc:6e:3c:f1:01:
b3:85:f8:da:54:9c:08:73:d4:40:3f:a8:5e:a3:c3:
87:35:4c:43:0b:cb:a6:50:a9:84:2a:29:84:2f:75:
6d:6e:71:f9:3f:50:16:09:5c:7f:10:2e:09:88:92:
c5:58:65:a2:97:41:a3:d6:a8:80:4a:6f:8e:13:48:
4c:dc:c5:ae:e7:1d:f5:5f:33:f7:66:24:23:66:e9:
ca:a3:30:8b:cd:49:fa:d3:b7:29:99:ac:35:3f:c6:
ca:ac:e5:93:39:38:2e:81:f4:d2:e3:67:c0:07:00:
40:f3:57:de:db:4f:ea:f0:b8:a1:5c:1f:f5:53:60:
4c:2c:62:29:a7:8d:1d:76:a6:ce:f2:9c:e9:ac:42:
b6:ac:c4:c6:17:cd:ae:59:ca:01:94:ed:da:1a:34:
28:a2:53:48:5e:4c:9e:91:d9:70:bf:69:2d:0e:e7:
ae:e0:15:55:5f:ac:c7:85:d4:69:92:2c:7c:37:d2:
2b:41:30:45:fc:7f:dc:0a:39:83:c2:3a:c0:f3:a3:
f8:20:6f:41:0d:79:4a:97:29:e6:93:a4:f6:f8:bb:
73:6e:eb:43:45:ce:b9:7a:94:d5:40:96:00:a0:5f:
03:ac:0d:8e:7b:98:d3:4b:ca:6b:f6:4b:fe:97:8f:
04:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:86:00:63:2D:31:14:A5:44:30:51:8F:D3:2E:93:34:DB:29:DF:DB
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/917737668CCB11F0AF64C596DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.77.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:d9:0a:b6:6e:da:24:90:7c:f4:77:d4:d0:f9:48:18:7e:73:
3a:4d:f2:bb:d8:4e:bf:1d:28:25:c2:e9:45:bb:3b:db:2b:8f:
67:bb:69:fd:a8:1b:7a:cf:48:4b:b4:68:f9:32:66:c3:25:2a:
1d:aa:2d:56:09:96:73:56:9b:97:1f:0d:34:11:58:9d:e3:0e:
6e:8f:4e:0d:cd:84:04:49:7c:67:d1:01:45:e4:ba:2a:8b:bd:
78:75:27:5e:e7:90:cb:e8:a8:c9:ef:8f:c8:e9:6a:79:44:84:
2a:91:af:39:66:64:4a:ea:ff:ef:af:fb:57:9d:49:54:c6:b3:
b1:85:4b:0e:5c:43:99:f7:94:cc:90:98:3d:2b:a6:e7:ca:a7:
d3:54:0b:d8:2e:13:20:f5:74:11:5d:a6:fb:42:94:78:b7:12:
01:a3:89:72:83:ac:97:57:7b:68:48:83:ad:8a:ef:3c:fb:1c:
ce:77:4e:85:fd:89:87:04:33:98:5d:15:83:05:93:07:f2:90:
a4:93:23:e0:ea:ab:2f:0f:54:0d:3a:e9:08:2e:31:52:28:93:
d0:19:b7:69:3c:ae:d5:ca:f2:20:e3:1a:e6:87:8a:23:f2:8d:
3c:80:f9:7d:70:f7:56:2b:91:0e:1f:c1:57:0d:1b:7f:a3:93:
2a:b6:2c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 07:13:38 2025 by rpki-client