Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/9A16A38C83E511F0872239B5DAE4EC9C.roa
File: 9A16A38C83E511F0872239B5DAE4EC9C.roa (raw, json)
Hash identifier: owkgwcUnMN4yH9y50Ky5IpHJJrGHQ1wmTR5bvyZnBB8=
Subject key identifier: 68:BC:6F:1E:73:87:58:78:E3:89:25:A4:99:AA:23:66:72:D2:42:DF
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0D48
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/9A16A38C83E511F0872239B5DAE4EC9C.roa
Signing time: Thu 28 Aug 2025 08:04:21 +0000
ROA not before: Thu 28 Aug 2025 08:04:16 +0000
ROA not after: Tue 13 Jan 2026 08:04:16 +0000
asID: 996
IP address blocks: 102.135.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 07 Sep 2025 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3400 (0xd48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Aug 28 08:04:16 2025 GMT
Not After : Jan 13 08:04:16 2026 GMT
Subject: CN=68b00d85-bcfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:8d:83:1f:79:1b:bd:3f:74:80:94:5e:a0:19:
a1:19:4f:0a:2a:a9:46:23:06:09:59:57:ba:c5:d2:
67:22:e8:9d:5b:08:fe:84:5b:72:90:48:61:02:5f:
4e:a4:b4:f1:80:e4:fe:ef:c2:20:e3:f3:39:f5:b5:
a6:73:7c:2a:54:96:9a:24:e1:dd:e3:18:59:53:31:
6f:9c:20:d6:62:26:0e:94:ef:9d:13:11:ab:88:5e:
b1:fa:a5:b5:71:92:23:79:a6:58:a5:f1:ff:76:ee:
5e:9f:47:a0:93:c8:22:de:66:a0:0a:85:5b:66:4f:
b0:1a:32:5f:7a:12:b2:f3:3d:d2:f6:b4:40:91:5d:
ed:63:86:75:4c:fa:7a:f1:6f:6d:7e:12:20:2e:5b:
1a:65:40:43:4f:0c:e4:d9:92:27:aa:9b:b6:db:d4:
f2:4a:b6:1b:ed:a2:1c:0f:d9:4f:1f:87:31:91:dc:
47:45:d7:26:b5:23:8d:58:3d:38:8d:f2:98:db:5c:
e1:8e:e8:5f:56:3b:8a:77:1a:2d:48:c9:e5:2d:c8:
4c:3d:38:ce:72:30:5e:cc:35:d1:37:60:0a:aa:52:
58:d7:52:2d:1d:bf:ea:3f:5c:bb:a4:d2:3d:71:95:
f9:68:dc:05:85:86:89:f8:4a:ee:fb:27:7d:a1:1e:
2c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:BC:6F:1E:73:87:58:78:E3:89:25:A4:99:AA:23:66:72:D2:42:DF
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/9A16A38C83E511F0872239B5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.14.0/24
Signature Algorithm: sha256WithRSAEncryption
92:ab:5f:9b:45:90:42:51:38:99:d7:89:77:37:f7:e4:d7:c5:
c6:0b:95:8b:64:7d:8a:58:e5:4d:c5:a9:f7:d0:31:9e:b9:2d:
f7:eb:9f:d1:6c:e5:72:71:e1:5d:f3:cb:39:6d:f2:92:fb:b4:
97:bb:4d:bd:cc:7d:6f:45:4c:94:5f:89:eb:f9:41:3f:b2:8c:
c7:44:b6:05:7a:c7:17:e3:37:41:39:64:2c:8f:23:a6:0c:f5:
ae:19:1b:5a:08:7a:f6:ee:19:ac:38:90:dc:07:94:0c:51:9d:
79:16:8a:7b:3e:7d:4e:11:46:0e:ef:22:6b:26:1b:79:71:7a:
77:fd:13:5b:0c:c8:ee:dc:58:43:de:86:e1:26:6a:ff:fb:11:
e3:8b:9d:b6:4d:f6:9b:49:c8:93:3f:d9:1d:af:76:2a:d7:cd:
23:27:ce:1a:96:7a:d9:30:94:e5:a3:2d:30:87:1b:51:62:32:
54:b9:a8:fa:f9:94:e8:da:0f:df:69:91:71:ef:55:68:0a:3f:
ab:e1:b6:76:82:9b:03:5c:22:85:ce:d2:85:f1:2f:1f:20:29:
74:d6:e7:c6:36:a1:65:27:8e:9d:df:e4:0e:67:7b:e6:a8:6c:
bb:e3:d8:3e:e5:11:06:19:e8:7b:c1:3e:e5:22:20:d4:1e:8b:
1f:1b:d7:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 23:28:05 2025 by rpki-client