Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/AF13F8FA887E11F0A39513A8DAE4EC9C.roa
File: AF13F8FA887E11F0A39513A8DAE4EC9C.roa (raw, json)
Hash identifier: nT46cSTu91xeGHmJvaLZI038TJRzH8LJNMmGb1M4LQo=
Subject key identifier: 0A:02:CF:BA:4E:54:A7:60:41:AA:1F:48:E8:86:00:91:AE:A6:08:E8
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0DAF
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/AF13F8FA887E11F0A39513A8DAE4EC9C.roa
Signing time: Wed 03 Sep 2025 04:30:14 +0000
ROA not before: Wed 03 Sep 2025 04:30:08 +0000
ROA not after: Thu 01 Jan 2026 04:30:08 +0000
asID: 9009
IP address blocks: 102.135.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 07 Sep 2025 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3503 (0xdaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Sep 3 04:30:08 2025 GMT
Not After : Jan 1 04:30:08 2026 GMT
Subject: CN=68b7c456-7771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a5:86:e3:e6:be:de:98:0c:02:7e:dc:79:34:
92:21:29:cc:5b:20:97:30:31:f7:72:f6:81:d9:53:
a5:f7:db:c0:78:d3:51:fa:90:80:61:e4:1b:cb:3a:
de:d6:97:91:9f:25:2e:aa:d9:3a:ae:64:2a:31:96:
19:0f:d4:0f:f6:39:60:47:27:03:37:cc:94:86:ea:
37:b0:e5:0a:01:26:2e:f4:d2:24:9e:d8:55:81:ee:
a2:d4:5a:be:b4:7d:37:18:a4:b4:32:d2:96:55:56:
a8:8d:e8:80:84:da:d2:98:6b:cb:c4:77:d9:8c:57:
36:0c:22:7d:9f:71:ad:b2:2f:b9:a3:4a:d9:08:fc:
c6:44:0d:aa:53:11:64:a9:c9:4d:8f:e3:12:bb:1c:
c3:2f:c3:75:d4:b0:21:ce:30:84:b7:64:f7:ce:7d:
74:3d:07:a9:64:f7:70:52:55:13:8e:13:6a:07:e2:
29:60:58:eb:ac:02:8d:73:bc:0a:5e:8a:a5:7c:f3:
46:82:83:90:24:82:c8:9e:a7:6b:a7:96:40:30:39:
88:d7:84:e9:75:14:2e:e6:2c:a5:63:23:9c:26:d2:
3f:91:8b:03:d7:28:3f:1b:eb:9a:09:14:70:c3:a8:
f5:37:1a:06:5c:11:d3:cd:04:0f:ac:90:e9:e0:3c:
f1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:02:CF:BA:4E:54:A7:60:41:AA:1F:48:E8:86:00:91:AE:A6:08:E8
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/AF13F8FA887E11F0A39513A8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.9.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:5e:28:70:d3:81:d1:93:00:6b:10:fe:73:48:52:06:b4:b9:
1f:ff:b6:e5:70:3f:b4:c3:b4:4f:fc:aa:6a:0c:96:6b:87:10:
ad:5d:8c:af:f7:7a:75:f1:93:9d:a3:11:46:c4:c5:28:d6:5f:
5a:4d:ad:17:21:14:a3:98:3b:22:a1:f6:8f:2b:3f:d1:2a:11:
69:80:00:d5:cf:f2:26:d2:38:cd:01:de:51:d4:6d:41:27:20:
f7:fc:eb:9e:33:33:4f:7b:c3:e9:b2:b0:0d:2f:da:5b:37:48:
57:8b:64:b0:76:52:96:ec:a8:9c:93:5a:eb:c1:ed:db:d2:50:
c6:b3:db:aa:e4:df:8c:27:a4:c8:0f:13:1f:e9:ba:e3:65:ff:
e3:66:01:ee:5d:16:16:28:af:50:93:1e:e3:ae:cb:ef:87:b5:
9a:89:64:ed:1d:06:1f:c2:ec:6c:56:e6:fa:88:f9:6e:98:1a:
3c:71:06:7d:fb:f3:2d:d7:8f:b6:d1:d7:ac:6a:af:da:58:78:
f1:d3:ae:0f:f2:bc:22:f9:e1:4d:77:fd:76:23:ee:a8:0b:25:
2d:15:99:6c:6a:7f:6e:9d:ff:85:18:e4:9d:a0:fb:dc:af:58:
89:f0:3b:b3:cb:47:1f:db:71:44:9d:f6:e7:25:21:00:7c:36:
26:1d:a1:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 05:55:41 2025 by rpki-client