Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/A526B3CC9AA911F08C77409FDAE4EC9C.roa
File: A526B3CC9AA911F08C77409FDAE4EC9C.roa (raw, json)
Hash identifier: 9snROKFYIMXi9dg0SvljfJwykeig6zG98oYO57Ki4ps=
Subject key identifier: 57:7A:14:FA:2C:3E:CC:1B:6E:53:C8:BE:47:D2:A4:60:D0:C6:7E:82
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0EA5
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/A526B3CC9AA911F08C77409FDAE4EC9C.roa
Signing time: Fri 26 Sep 2025 07:23:06 +0000
ROA not before: Fri 26 Sep 2025 07:23:00 +0000
ROA not after: Fri 25 Sep 2026 07:23:00 +0000
asID: 9009
IP address blocks: 102.135.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3749 (0xea5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Sep 26 07:23:00 2025 GMT
Not After : Sep 25 07:23:00 2026 GMT
Subject: CN=68d63f5a-540d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:0e:8b:8c:38:4f:d6:50:15:5f:0a:8e:59:51:
71:1c:34:ee:5f:6e:37:4b:9d:ca:a4:78:57:24:9f:
33:00:c7:22:e7:1f:f8:30:91:65:90:a0:98:0b:e7:
a9:23:73:f4:f9:9a:2c:07:56:f2:9b:9c:5b:8a:bf:
84:71:8a:43:04:af:ea:3d:1e:48:f3:38:1b:21:79:
ff:b9:f0:ab:61:e2:91:2c:4a:81:6b:59:e4:07:43:
89:3f:2a:c7:c4:b0:81:9a:cf:39:58:f4:2e:f8:cd:
a5:af:20:41:8a:dd:8f:f4:0f:51:53:f1:f5:56:de:
39:5c:ed:4e:e4:07:01:02:89:fe:d5:99:c9:73:89:
fc:36:28:38:21:ec:35:d9:40:87:04:a1:cf:fc:fd:
83:4f:47:6c:90:07:e9:e2:04:92:7a:c3:b1:f5:72:
f4:e3:9d:df:90:24:b6:e8:e2:8a:06:82:ab:d4:7b:
76:02:3c:a4:ba:a4:24:c0:ae:f2:54:70:d3:c0:fa:
26:f3:49:f9:02:8b:7f:90:4b:db:16:d1:4d:32:c3:
48:dd:1e:9a:37:72:35:72:b5:64:96:d7:fc:ad:7c:
4b:34:0b:79:14:30:b7:ad:cd:9c:7f:71:81:d9:e6:
eb:13:cf:68:74:7d:7f:b0:16:9e:a5:8b:9a:97:c1:
b3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:7A:14:FA:2C:3E:CC:1B:6E:53:C8:BE:47:D2:A4:60:D0:C6:7E:82
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/A526B3CC9AA911F08C77409FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.75.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:95:18:ae:91:28:0b:45:fc:30:8d:c3:04:5f:4b:37:d9:2c:
7e:96:9c:ad:a5:6e:72:0d:85:bb:dd:45:b8:31:34:3a:95:9f:
03:36:17:51:a3:a7:10:87:83:64:e6:30:c1:3c:fa:51:d8:dc:
da:1d:e5:3d:b7:ac:d6:05:dd:ea:3f:18:bf:fe:4c:00:29:fe:
01:70:0b:e1:a1:d2:f0:e5:14:71:79:1c:3e:49:b9:3c:e7:c8:
41:3a:42:db:42:23:4a:92:a4:4c:3b:cf:a5:36:2b:78:aa:a6:
51:51:ec:fa:0f:04:28:c6:42:0a:43:d6:59:c5:33:92:ef:3b:
3c:82:d1:e3:e7:f3:75:b0:18:05:bd:61:ad:b4:eb:6a:41:7a:
ff:41:a6:ca:3f:bd:9f:17:3b:3a:79:dd:37:66:59:8f:ad:87:
89:f0:d6:b7:1e:b9:29:ef:36:6d:b2:42:c3:49:2f:11:13:14:
87:7f:93:2e:e5:03:75:53:9b:4d:01:1b:16:f9:12:ea:50:89:
4b:f4:fa:95:be:d1:d8:e1:fc:82:34:1e:ce:02:51:22:90:48:
72:9c:ef:28:7c:d5:49:a2:6b:e4:c0:c8:e6:db:91:c2:78:33:
9b:80:7c:2d:43:7d:9f:ce:45:74:38:24:dd:74:e8:de:4f:30:
17:68:49:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 07:15:32 2025 by rpki-client