Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/A2BB83068C8A11F0BC9B417ADAE4EC9C.roa
File: A2BB83068C8A11F0BC9B417ADAE4EC9C.roa (raw, json)
Hash identifier: jfixWMFlSdLfDM9LmIsi6sNnqxa0sr5pGJwOtbb6UUY=
Subject key identifier: 62:6D:42:C2:5C:74:41:DE:7C:79:B7:5D:3F:80:0B:E6:57:96:72:BA
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0DE0
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/A2BB83068C8A11F0BC9B417ADAE4EC9C.roa
Signing time: Mon 08 Sep 2025 08:05:52 +0000
ROA not before: Mon 08 Sep 2025 08:05:45 +0000
ROA not after: Sat 05 Sep 2026 08:05:45 +0000
asID: 9009
IP address blocks: 102.135.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3552 (0xde0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Sep 8 08:05:45 2025 GMT
Not After : Sep 5 08:05:45 2026 GMT
Subject: CN=68be8e5f-a67a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:07:b9:0f:99:da:6b:15:80:d6:be:8e:bf:a9:
41:21:4f:4a:61:a9:5e:31:77:1e:c8:4f:ed:65:be:
09:26:0e:b6:b8:11:59:6c:24:d5:68:64:81:4f:24:
fe:ac:45:60:b9:08:3d:d8:4a:0b:50:bb:cc:6c:5b:
e5:d2:c8:f6:62:e0:cb:c7:9d:ea:4d:46:6b:1e:4d:
2f:d7:af:46:c8:84:07:77:d7:54:8c:8a:f7:b7:64:
95:b6:4b:ef:96:7b:64:59:ae:02:b8:31:02:15:da:
f2:71:3d:b8:ac:ce:d2:73:22:8e:00:f3:e7:26:0a:
c9:c5:e0:49:ec:46:21:af:53:b1:10:12:ae:42:83:
10:ce:0d:c4:3b:1a:39:7e:a9:bc:55:1c:3c:24:d7:
8c:82:45:17:42:c3:11:54:74:49:71:0b:4c:01:f3:
d6:67:f8:24:77:c0:fd:78:ac:2e:4b:cb:b8:f2:fe:
12:1e:1d:90:26:c7:06:89:78:4d:b4:ad:e3:20:ce:
ac:14:5e:21:b2:b2:ac:23:15:3a:42:af:25:85:49:
8d:07:63:fe:1b:9c:d6:91:47:29:ee:56:f7:9e:fd:
a1:ca:33:18:c4:d1:81:0b:34:9f:97:e5:8f:60:dd:
c4:45:0c:7a:ce:ac:be:17:3a:28:3c:a1:a4:2b:78:
7b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:6D:42:C2:5C:74:41:DE:7C:79:B7:5D:3F:80:0B:E6:57:96:72:BA
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/A2BB83068C8A11F0BC9B417ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.62.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:37:9e:ab:8b:df:c2:2c:2f:1d:ba:2d:e8:9f:cf:23:94:4d:
d4:ca:b6:a0:6b:d0:a3:3a:17:c0:f0:71:8d:79:23:d2:db:5c:
71:f1:a1:64:91:a0:7f:41:c0:c3:69:ae:de:88:f7:a8:96:1e:
34:d0:d0:3b:fd:8c:7f:ac:89:35:a5:4b:7f:89:30:24:4f:88:
91:8f:a6:2c:27:31:fa:b8:36:4e:75:74:d1:00:3f:4f:41:16:
58:21:4c:0e:8c:f1:96:b5:6a:57:81:14:3b:43:df:8a:3e:96:
44:1f:2c:d7:33:d8:f7:01:ff:e3:ec:bd:de:13:b0:41:8b:95:
ed:9f:34:27:16:ba:88:0a:ec:a8:6e:dd:3c:05:7a:b9:1e:48:
94:ca:ca:e5:97:18:9e:8e:09:69:75:de:b9:05:91:c5:ca:fc:
51:fc:b9:52:da:2f:cf:d6:9f:df:ae:cd:dd:2e:07:2b:aa:0e:
02:0c:01:1f:07:51:de:c9:4a:3f:c7:0d:53:e2:07:d9:b0:7d:
fb:05:c9:7c:60:89:bc:d2:14:5e:9f:6c:40:b5:d8:c5:21:e8:
c7:b0:ca:a8:7c:a9:a2:4c:e2:73:dd:78:7e:f0:2c:5b:c8:67:
23:d9:ba:77:a3:08:d6:cd:7f:0f:32:47:1c:32:56:20:85:cf:
99:b2:62:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 07:15:30 2025 by rpki-client