Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/92D2869A83E511F0824C35B5DAE4EC9C.roa
File: 92D2869A83E511F0824C35B5DAE4EC9C.roa (raw, json)
Hash identifier: zbaOwXyIu3G7kQZIxTPCw2Y9DT+bLHPr97XKVvWnxPk=
Subject key identifier: DA:3B:C0:E5:0E:CE:08:8A:15:66:6E:9B:47:65:83:68:B1:2C:F2:79
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0D46
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/92D2869A83E511F0824C35B5DAE4EC9C.roa
Signing time: Thu 28 Aug 2025 08:04:09 +0000
ROA not before: Thu 28 Aug 2025 08:04:04 +0000
ROA not after: Thu 01 Jan 2026 08:04:04 +0000
asID: 401838
IP address blocks: 102.135.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 09 Sep 2025 00:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3398 (0xd46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Aug 28 08:04:04 2025 GMT
Not After : Jan 1 08:04:04 2026 GMT
Subject: CN=68b00d78-49bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:67:3b:88:1c:3b:cd:27:89:5e:eb:45:e0:88:
6e:62:ad:06:63:f6:32:c2:05:30:45:72:00:cf:67:
3b:ea:4a:5c:bc:f9:a3:a6:a4:07:92:72:1e:b3:62:
a6:c5:b6:39:d1:4a:15:0f:fd:92:0c:f2:0f:c0:d8:
6d:54:32:27:c7:4c:64:f8:f9:56:02:14:c6:5d:8e:
b1:ff:6e:af:d8:dc:2e:8c:d4:b4:f2:92:02:e1:11:
09:61:f5:a1:36:4f:d2:6a:bd:97:47:0d:ef:68:63:
90:58:20:d3:6c:39:c5:af:4d:6f:42:17:c9:67:b8:
82:92:43:89:41:79:1b:7c:76:4e:b0:87:62:44:35:
9f:29:08:7b:5a:56:cc:78:02:4a:03:83:dc:d0:d5:
c4:4e:ee:f5:9d:56:c8:b7:29:00:5b:fe:ae:22:eb:
9d:fa:20:3c:83:a4:94:df:b1:54:cb:2a:30:64:63:
55:53:58:02:ca:95:8a:ee:7f:65:39:dc:a7:24:c1:
de:20:d0:2b:df:ce:18:34:18:5a:8b:c8:f6:22:b4:
90:89:a3:b8:68:5c:22:b6:8d:19:61:61:51:50:5f:
2e:3d:e8:7b:43:8a:8d:11:5a:60:bc:be:c5:86:97:
29:4f:59:1a:52:f8:31:78:06:27:22:5a:54:46:33:
5e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:3B:C0:E5:0E:CE:08:8A:15:66:6E:9B:47:65:83:68:B1:2C:F2:79
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/92D2869A83E511F0824C35B5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.14.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:c7:82:b9:9f:69:b6:b3:e9:91:13:9b:e4:4c:54:60:5c:25:
34:34:54:e8:ee:68:35:07:7e:c2:e7:9e:98:7d:bd:c9:55:84:
ec:2c:ee:fa:95:ab:3b:c3:fa:e8:99:1f:ad:2d:8a:d7:69:06:
26:90:20:c6:a0:24:ac:9a:17:ff:23:00:ee:45:47:26:67:10:
bf:b4:bc:ab:dd:15:0c:ec:aa:5d:f8:d3:58:8e:59:0e:04:a7:
53:1c:28:56:b0:aa:0d:e1:f0:5a:aa:de:7b:ba:a3:ae:61:84:
d6:a1:a3:0d:e7:31:77:69:06:28:1b:71:a3:0b:51:fc:57:95:
9c:34:32:5f:c6:e9:86:1b:69:c0:07:17:ff:e3:2d:53:ec:b2:
cb:e0:bb:dc:4c:83:f9:a1:2b:86:50:70:e8:4d:69:f1:8d:64:
38:9a:49:55:8f:d8:57:9e:de:0b:d5:53:87:6b:09:88:a3:65:
32:3b:35:f1:63:16:ac:05:c1:06:33:6b:f9:49:67:ed:fa:17:
e8:c3:08:eb:5f:ae:14:32:75:ff:2f:3b:6e:65:33:75:3d:af:
47:b5:8e:b7:78:59:fd:2b:8f:53:c3:b0:aa:23:06:33:49:e7:
f4:ed:c2:f6:69:cb:e0:12:2a:67:d3:01:e1:70:65:8e:80:a5:
f0:da:a1:db
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDUYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNTA4MjgwODA0MDRaFw0yNjAxMDEwODA0MDRaMBgxFjAU
BgNVBAMTDTY4YjAwZDc4LTQ5YmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCVZzuIHDvNJ4le60XgiG5irQZj9jLCBTBFcgDPZzvqSly8+aOmpAeSch6z
YqbFtjnRShUP/ZIM8g/A2G1UMifHTGT4+VYCFMZdjrH/bq/Y3C6M1LTykgLhEQlh
9aE2T9JqvZdHDe9oY5BYINNsOcWvTW9CF8lnuIKSQ4lBeRt8dk6wh2JENZ8pCHta
Vsx4AkoDg9zQ1cRO7vWdVsi3KQBb/q4i6536IDyDpJTfsVTLKjBkY1VTWALKlYru
f2U53Kckwd4g0Cvfzhg0GFqLyPYitJCJo7hoXCK2jRlhYVFQXy496HtDio0RWmC8
vsWGlylPWRpS+DF4BiciWlRGM14LAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU2jvA
5Q7OCIoVZm6bR2WDaLEs8nkwHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3LzkyRDI4NjlBODNFNTExRjA4MjRDMzVCNURBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmhw4wDQYJKoZIhvcNAQEL
BQADggEBAB3Hgrmfabaz6ZETm+RMVGBcJTQ0VOjuaDUHfsLnnph9vclVhOws7vqV
qzvD+uiZH60titdpBiaQIMagJKyaF/8jAO5FRyZnEL+0vKvdFQzsql3401iOWQ4E
p1McKFawqg3h8Fqq3nu6o65hhNahow3nMXdpBigbcaMLUfxXlZw0Ml/G6YYbacAH
F//jLVPsssvgu9xMg/mhK4ZQcOhNafGNZDiaSVWP2Fee3gvVU4drCYijZTI7NfFj
FqwFwQYza/lJZ+36F+jDCOtfrhQydf8vO25lM3U9r0e1jrd4Wf0rj1PDsKojBjNJ
5/TtwvZpy+ASKmfTAeFwZY6ApfDaods=
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:24 2025 by rpki-client