Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/AF6FB8BE888011F0BBC685B4DAE4EC9C.roa
File: AF6FB8BE888011F0BBC685B4DAE4EC9C.roa (raw, json)
Hash identifier: nV9EHOOU38SiGv8idH3mJk5IYHOE/GkhQqxCtglG17k=
Subject key identifier: F0:97:17:0B:B0:0E:5F:1C:62:02:90:0A:B0:F5:FA:BD:8F:D0:87:C6
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0DBE
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/AF6FB8BE888011F0BBC685B4DAE4EC9C.roa
Signing time: Wed 03 Sep 2025 04:44:33 +0000
ROA not before: Wed 03 Sep 2025 04:44:28 +0000
ROA not after: Tue 13 Jan 2026 04:44:28 +0000
asID: 9009
IP address blocks: 102.135.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 07 Sep 2025 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3518 (0xdbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Sep 3 04:44:28 2025 GMT
Not After : Jan 13 04:44:28 2026 GMT
Subject: CN=68b7c7b1-9309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:02:44:f9:50:4c:6b:fc:41:8c:a5:4f:d0:d0:
ed:7a:bc:f3:65:e8:d9:a4:88:e0:01:eb:76:2d:f9:
11:e0:2b:ac:77:6a:6c:b0:61:6f:23:12:8a:02:9e:
43:8c:7a:ce:14:4c:36:1e:7b:35:5b:27:55:7c:99:
1c:32:93:3e:45:38:8b:56:d6:43:6f:28:69:98:77:
f6:4d:1e:1e:5a:09:ce:7e:99:60:bf:2e:60:d8:f0:
1d:23:f8:30:98:a5:8a:cf:74:d0:08:99:17:9e:a9:
c9:5a:94:d7:b5:69:0f:98:c3:f8:b1:cd:1f:c2:ac:
06:f7:ce:81:1b:bc:9e:49:3c:f5:f8:a6:e0:cd:d3:
3f:0e:a6:29:0b:2b:35:ea:cf:55:b3:eb:bf:ee:9f:
ad:93:da:cd:05:84:95:e2:4c:b2:91:30:8e:2f:69:
bc:13:9b:8e:c9:8c:41:56:0c:a8:da:5e:ae:f8:e7:
98:4a:37:54:9f:1a:6d:0d:a6:bf:a8:62:6f:2b:e1:
c4:09:b6:f0:8a:92:3a:c1:f2:44:3e:10:3e:98:ca:
50:e2:fb:fe:73:b9:0a:28:83:2c:09:e9:bf:68:ad:
24:69:78:ee:c3:c8:ea:a9:b4:b9:36:fa:d2:10:29:
a2:99:65:b5:92:d1:de:b5:4b:ad:9d:bc:73:27:ab:
4b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:97:17:0B:B0:0E:5F:1C:62:02:90:0A:B0:F5:FA:BD:8F:D0:87:C6
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/AF6FB8BE888011F0BBC685B4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.38.0/24
Signature Algorithm: sha256WithRSAEncryption
91:1c:ec:b5:66:c4:d2:ba:d8:cb:bb:72:67:47:c4:a8:6f:0b:
ae:6a:77:9a:c9:4e:d0:fb:93:56:2f:13:54:fd:dd:9d:65:0d:
7b:ea:69:53:93:d1:4d:bd:22:dc:e7:5c:8b:dc:89:58:72:e1:
b7:9e:0b:3e:a4:0e:34:72:77:1d:cf:e4:c1:21:ec:fe:07:51:
19:55:c2:6b:c0:61:a8:a9:e0:8b:32:96:64:7d:b0:b9:b7:e4:
2c:09:a9:1b:c7:0a:35:24:50:97:be:95:a4:eb:33:55:50:bf:
6c:39:b5:27:41:1a:d8:b5:03:31:e2:8f:64:9e:87:10:cd:93:
da:d5:af:1f:1c:bd:93:cd:76:d4:5d:c8:51:62:f5:43:ed:98:
29:cb:0f:c5:f7:1c:ac:d6:f8:b0:94:c7:a9:13:4d:5b:3f:d6:
66:77:1e:cb:fa:03:1e:d0:66:b0:fd:9f:f1:23:92:33:c6:d0:
c3:23:7a:bf:32:c5:b3:50:b6:3e:81:2c:b5:32:4d:3c:f2:f5:
40:c5:1b:60:0a:b0:cb:06:0e:ba:69:16:15:9e:2b:81:cc:e8:
3d:d0:08:e9:ca:b0:24:03:f0:7f:5d:c1:c9:2e:f9:92:9a:79:
ff:63:33:6b:8c:4d:cf:9c:4d:b4:39:6b:2e:1e:dd:9c:1c:81:
d6:af:18:e1
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDb4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNTA5MDMwNDQ0MjhaFw0yNjAxMTMwNDQ0MjhaMBgxFjAU
BgNVBAMTDTY4YjdjN2IxLTkzMDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDIAkT5UExr/EGMpU/Q0O16vPNl6NmkiOAB63Yt+RHgK6x3amywYW8jEooC
nkOMes4UTDYeezVbJ1V8mRwykz5FOItW1kNvKGmYd/ZNHh5aCc5+mWC/LmDY8B0j
+DCYpYrPdNAImReeqclalNe1aQ+Yw/ixzR/CrAb3zoEbvJ5JPPX4puDN0z8OpikL
KzXqz1Wz67/un62T2s0FhJXiTLKRMI4vabwTm47JjEFWDKjaXq7455hKN1SfGm0N
pr+oYm8r4cQJtvCKkjrB8kQ+ED6YylDi+/5zuQoogywJ6b9orSRpeO7DyOqptLk2
+tIQKaKZZbWS0d61S62dvHMnq0tjAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU8JcX
C7AOXxxiApAKsPX6vY/Qh8YwHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3L0FGNkZCOEJFODg4MDExRjBCQkM2ODVCNERBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmhyYwDQYJKoZIhvcNAQEL
BQADggEBAJEc7LVmxNK62Mu7cmdHxKhvC65qd5rJTtD7k1YvE1T93Z1lDXvqaVOT
0U29ItznXIvciVhy4beeCz6kDjRydx3P5MEh7P4HURlVwmvAYaip4IsylmR9sLm3
5CwJqRvHCjUkUJe+laTrM1VQv2w5tSdBGti1AzHij2SehxDNk9rVrx8cvZPNdtRd
yFFi9UPtmCnLD8X3HKzW+LCUx6kTTVs/1mZ3Hsv6Ax7QZrD9n/EjkjPG0MMjer8y
xbNQtj6BLLUyTTzy9UDFG2AKsMsGDrppFhWeK4HM6D3QCOnKsCQD8H9dwcku+ZKa
ef9jM2uMTc+cTbQ5ay4e3ZwcgdavGOE=
-----END CERTIFICATE-----
Generated at Fri Sep 5 04:18:00 2025 by rpki-client