
Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/BD47E6248A5511F0B1E072A8DAE4EC9C.roa
File: BD47E6248A5511F0B1E072A8DAE4EC9C.roa (raw, json)
Hash identifier: U1+InisRO3WZUFkD2zNAdBcgsItvdlWcG7M+8mH5LgY=
Subject key identifier: 66:30:9B:36:5C:91:B4:6E:65:79:EB:3F:6A:8D:22:3F:F0:15:AD:60
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0DD9
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/BD47E6248A5511F0B1E072A8DAE4EC9C.roa
Signing time: Fri 05 Sep 2025 12:42:10 +0000
ROA not before: Fri 05 Sep 2025 12:42:05 +0000
ROA not after: Sat 05 Sep 2026 12:42:05 +0000
asID: 208185
IP address blocks: 102.135.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 09 Sep 2025 00:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3545 (0xdd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Sep 5 12:42:05 2025 GMT
Not After : Sep 5 12:42:05 2026 GMT
Subject: CN=68badaa2-44bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:9e:c0:04:40:6a:ef:6c:ae:d2:06:ae:01:50:
14:d9:48:d2:e4:7a:2a:90:7c:24:2e:42:2a:f3:81:
fc:94:f7:cf:c8:46:a5:a6:ef:b4:2c:ab:a6:5b:95:
ac:46:56:e3:11:ec:28:72:05:4f:04:80:00:c5:ce:
31:f6:5b:a7:19:2c:15:ff:5f:9d:51:38:36:e7:1e:
c2:24:9c:71:74:69:c6:66:f3:fb:c5:05:c7:5b:ef:
0e:2b:43:92:cc:3c:b7:bb:c9:4d:77:59:56:c5:59:
41:70:20:21:2b:40:48:8b:77:83:28:d3:c6:83:75:
db:06:ec:33:b6:0b:77:27:75:de:de:e1:0a:96:d2:
b3:ce:6c:b6:d4:74:8f:27:fd:c6:85:f2:67:66:a5:
2d:c1:72:43:8a:5a:6d:98:8c:14:9f:41:0e:3f:7d:
b4:46:48:ee:2f:df:22:e0:cf:58:cc:b7:94:78:93:
49:e3:f8:b0:e5:a9:62:0c:9a:57:41:a2:43:01:a8:
bb:78:22:6c:f0:5f:81:24:77:40:b0:64:c9:9f:47:
ba:4c:fe:30:80:7b:13:e6:89:0f:4f:c8:1c:88:15:
ad:30:02:4d:a0:f2:09:b1:0f:f7:63:52:fe:09:b0:
38:8b:7b:9a:11:b6:6a:64:25:d2:dc:3c:f9:d6:c8:
9b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:30:9B:36:5C:91:B4:6E:65:79:EB:3F:6A:8D:22:3F:F0:15:AD:60
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/BD47E6248A5511F0B1E072A8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.103.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:92:c2:c6:42:9b:9f:6f:8d:9a:f4:b4:23:02:d9:ca:8c:17:
75:fd:d1:5a:b9:72:3b:db:05:00:d1:77:40:cc:46:ca:d0:50:
1e:98:64:db:2f:c0:c6:40:8f:53:41:15:d2:e0:46:f0:93:76:
41:91:71:34:fc:0e:eb:4d:24:71:2c:3d:6d:2d:de:a0:32:08:
cf:62:2d:b2:db:36:cb:73:3a:4f:a8:5e:52:e8:4c:0d:8f:20:
12:94:c0:f2:ff:92:aa:f3:51:c3:2c:44:d4:3f:01:d6:f1:4c:
52:53:bf:3e:8c:8f:c3:2d:63:dd:11:af:24:0d:84:ee:66:eb:
e7:7b:83:2e:ce:0e:bb:fe:36:16:4d:ea:87:38:17:70:9a:cb:
eb:73:25:dc:f4:06:46:3c:8f:52:9b:95:19:f3:ce:31:02:b6:
40:1d:99:2b:2f:50:bb:d0:03:62:c1:ad:c1:cc:6d:ec:6f:d5:
df:03:46:53:24:cc:ab:c2:d9:eb:26:d8:19:78:5f:98:2d:92:
9f:eb:80:0c:a8:a1:83:52:de:ad:ad:c0:90:e3:8c:00:f3:d2:
9b:83:a7:63:f7:9e:a3:bc:ae:b2:e7:79:b4:31:94:76:cd:3f:
da:95:9f:e6:2b:ad:3b:b3:43:ff:f1:0f:b7:a4:d5:00:bd:fe:
c4:28:37:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 08:55:46 2025 by rpki-client