Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/B684BE128D4211F09A16D5A6DAE4EC9C.roa
File: B684BE128D4211F09A16D5A6DAE4EC9C.roa (raw, json)
Hash identifier: Ks3C3sEqsF1sg6QEROM9HyNXXnxREAMttP4pukQ73S0=
Subject key identifier: 0B:0D:17:2B:39:F7:3D:3B:A5:D0:8C:13:75:43:06:52:DC:E2:51:01
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0E09
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/B684BE128D4211F09A16D5A6DAE4EC9C.roa
Signing time: Tue 09 Sep 2025 06:03:32 +0000
ROA not before: Tue 09 Sep 2025 06:03:27 +0000
ROA not after: Sat 05 Sep 2026 06:03:27 +0000
asID: 9009
IP address blocks: 102.135.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3593 (0xe09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Sep 9 06:03:27 2025 GMT
Not After : Sep 5 06:03:27 2026 GMT
Subject: CN=68bfc334-0565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:77:90:04:52:c4:97:9d:e0:49:32:bb:3c:f0:
df:de:c8:24:2e:af:3c:71:c3:8c:1a:55:36:e1:6f:
0a:95:09:30:e4:70:c5:c5:45:9e:64:39:2a:f7:df:
cf:b8:3f:a3:3c:5c:31:b2:ef:9f:8b:88:12:ad:63:
2b:17:bc:b9:07:c8:01:1b:75:d6:82:01:66:a0:cc:
20:d6:c4:13:a3:c1:92:c8:45:90:a4:27:c1:c4:d9:
00:a7:c4:6d:a4:46:ae:a6:2b:56:09:fd:51:5a:47:
1d:14:b5:4b:91:90:96:9d:99:6a:d1:bc:09:3c:a5:
8e:c1:e6:0b:92:6f:8b:0e:d3:8c:ea:23:00:ae:cb:
ec:06:9f:52:9e:bb:c5:18:d1:9e:c1:a4:0f:e7:ab:
34:7b:3b:30:85:d6:5c:a7:f5:1b:c5:15:a5:e3:08:
5f:ef:0f:94:5f:f5:62:52:73:b8:1a:29:47:c7:98:
23:10:9c:9f:1d:8c:8f:68:2b:65:bd:4c:a1:39:9a:
4c:90:04:86:0b:42:19:2c:95:af:34:77:27:24:e1:
0b:0b:43:d8:c3:99:cf:04:0e:dc:5e:8f:a1:d5:2a:
11:b9:de:87:b9:9f:d5:a6:d9:1f:57:c9:b9:94:b2:
b7:cf:4c:ca:6c:63:04:15:90:85:00:b7:6a:d4:23:
22:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:0D:17:2B:39:F7:3D:3B:A5:D0:8C:13:75:43:06:52:DC:E2:51:01
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/B684BE128D4211F09A16D5A6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.87.0/24
Signature Algorithm: sha256WithRSAEncryption
96:04:f1:2f:f3:98:e8:a5:ca:d8:84:e4:76:52:db:8f:c7:7d:
38:6a:53:32:1c:ba:3e:93:0f:96:f8:23:f4:5f:92:13:3f:89:
9f:d3:0a:15:a9:c6:f8:4e:5c:77:86:6b:ed:77:6e:97:4f:4d:
ae:63:a0:1f:68:84:10:77:e4:a8:70:e4:fa:c3:3d:76:f8:4f:
eb:b2:34:e3:8e:b7:3f:0a:fb:a6:35:e3:da:50:d7:54:c1:ab:
5f:ac:d7:30:61:f5:d8:75:a2:fe:e2:e2:11:39:5b:cb:c4:d8:
61:10:8f:27:3f:7d:a3:92:04:0c:43:94:7d:2a:9f:70:6f:2c:
36:86:f9:e1:21:45:5f:fa:87:59:30:08:75:94:32:6b:ad:12:
44:24:2e:2f:d7:29:56:cd:73:0d:d6:e4:f3:a2:95:ef:06:93:
b4:8d:76:22:b2:4d:c2:e3:c4:cb:41:04:4c:5e:7f:a8:b6:05:
9e:8e:46:c0:2f:48:4b:6c:29:54:b6:b9:a8:e1:6f:ac:44:ad:
70:b5:27:4a:b3:ac:19:71:65:67:97:f0:8b:e0:33:a8:03:1f:
20:61:eb:62:af:82:ca:60:a1:89:6d:2f:75:8a:93:95:2b:4b:
51:fd:5d:b4:a1:a6:9d:8b:6a:3c:1a:19:9f:c8:b6:3f:35:94:
9a:97:94:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 07:13:40 2025 by rpki-client