Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/BE13DD5A888011F0A5FF94B4DAE4EC9C.roa
File: BE13DD5A888011F0A5FF94B4DAE4EC9C.roa (raw, json)
Hash identifier: z/u2JDgaZ1CX7X/10ft89P4mMbMsc5roGG6iyeZRpnw=
Subject key identifier: 96:C4:C2:67:E4:83:A1:63:5F:78:D0:D8:D6:D9:B6:95:37:2A:C7:2B
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0DC0
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/BE13DD5A888011F0A5FF94B4DAE4EC9C.roa
Signing time: Wed 03 Sep 2025 04:44:58 +0000
ROA not before: Wed 03 Sep 2025 04:44:53 +0000
ROA not after: Tue 01 Dec 2026 04:44:53 +0000
asID: 9009
IP address blocks: 102.135.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 07 Sep 2025 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3520 (0xdc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Sep 3 04:44:53 2025 GMT
Not After : Dec 1 04:44:53 2026 GMT
Subject: CN=68b7c7ca-1356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9f:42:29:02:e3:bf:1b:74:66:61:87:6d:9f:
e6:96:8d:e1:05:ec:c3:c0:28:4b:93:0d:70:4c:4f:
02:a1:ed:c0:19:21:ce:a2:be:1e:1a:79:1d:4f:a1:
fc:52:06:7d:ec:d6:2b:a0:8f:a8:78:01:f6:f7:dc:
5c:be:44:30:08:66:f8:6b:57:cb:b5:68:5c:fd:37:
ae:59:ad:27:20:84:aa:53:98:a6:a2:d6:b9:fd:64:
79:9f:f0:6d:92:21:75:2b:ec:d7:39:ae:dd:71:47:
d8:59:72:2c:94:85:4e:c0:1d:4f:e3:ce:44:6d:8d:
b5:b4:14:db:eb:a2:83:74:f4:37:a9:d1:88:f9:7a:
0e:30:91:e5:ba:e4:6c:3d:6a:d2:f1:11:90:58:3a:
c8:21:3c:da:78:ff:47:2d:7e:a1:47:67:d8:0c:e2:
0c:6d:6c:bb:db:eb:60:24:89:33:09:a6:d3:34:c1:
a2:ec:36:8f:e9:f1:63:b7:78:e4:56:aa:fb:28:3f:
45:91:37:fb:4f:74:77:95:94:ed:84:18:18:fd:98:
ad:3d:b6:ba:bd:81:c6:0b:d0:be:ed:e1:1d:59:13:
65:c2:d8:bd:56:50:d7:49:84:e3:83:ad:6d:ce:dd:
2c:8a:5f:fa:0e:0b:e9:c8:92:5b:ab:17:24:31:0d:
6c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:C4:C2:67:E4:83:A1:63:5F:78:D0:D8:D6:D9:B6:95:37:2A:C7:2B
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/BE13DD5A888011F0A5FF94B4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.39.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:9d:40:7a:ea:86:7c:73:1f:33:ad:63:58:1c:3e:25:91:4c:
17:fe:71:66:bd:a8:69:31:b7:11:95:19:55:f8:5f:e3:56:ac:
8e:7a:78:b1:21:2e:8e:13:42:e2:76:e0:3f:75:24:dd:c2:8b:
e9:fc:fa:57:99:83:e6:8c:ef:40:fa:02:84:c6:a9:e6:f0:c8:
a9:90:fc:0a:ec:be:1d:93:fe:4a:ce:7a:02:45:20:77:1d:f4:
54:05:c6:dc:27:97:0f:d6:5c:a1:7d:ca:9b:79:46:73:3d:da:
f9:50:60:53:08:c1:4b:2a:42:57:da:25:f0:91:ef:8a:9e:77:
a9:58:e2:a8:99:b7:11:2f:0f:81:3d:de:cf:8e:d0:db:dd:81:
6d:50:b4:19:35:c3:84:f1:4a:6d:b8:5f:31:34:c1:c7:db:68:
30:d7:ea:ff:8c:e1:84:df:1e:1e:96:14:6b:29:47:34:0f:e3:
3d:52:2a:a6:18:bb:49:cd:a7:e1:ab:43:e1:a8:44:d9:eb:53:
52:f1:1f:80:ff:3c:5f:2a:86:8f:e2:61:c4:34:83:44:dc:a9:
e5:36:dd:7b:a5:6c:9d:91:a4:30:d4:cc:34:ed:b6:da:81:12:
1d:0b:3d:b3:37:e3:97:16:81:90:25:41:29:af:2e:95:a5:2d:
03:a0:e6:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:39:20 2025 by rpki-client