Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/CFE34EDC8D4211F098ABFBA6DAE4EC9C.roa
File: CFE34EDC8D4211F098ABFBA6DAE4EC9C.roa (raw, json)
Hash identifier: Mb2Pcbz57qOp5X3Rk6XtGXrteshHVfTbIja4wA+ppLs=
Subject key identifier: BE:5C:7B:C0:FF:AC:43:14:DE:74:4B:9B:6E:51:C9:40:4B:D2:DA:96
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0E0B
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/CFE34EDC8D4211F098ABFBA6DAE4EC9C.roa
Signing time: Tue 09 Sep 2025 06:04:15 +0000
ROA not before: Tue 09 Sep 2025 06:04:10 +0000
ROA not after: Sat 05 Sep 2026 06:04:10 +0000
asID: 9009
IP address blocks: 102.135.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3595 (0xe0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Sep 9 06:04:10 2025 GMT
Not After : Sep 5 06:04:10 2026 GMT
Subject: CN=68bfc35f-0f5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7e:6a:14:9e:6d:f3:91:eb:f4:96:12:a5:e7:
b0:d1:cc:a1:d8:ad:0d:48:58:cd:d7:a5:fc:4b:87:
28:f8:3e:59:92:9e:0d:cb:da:7f:a1:77:d4:8f:9f:
b5:67:8c:48:1f:e1:be:dc:80:2c:74:fa:9f:77:8e:
7c:74:12:6f:7e:c0:2f:0a:ed:59:fd:99:4d:5a:90:
3b:8e:af:bb:26:e9:16:70:fa:20:84:57:82:ee:3a:
5a:d3:6b:f1:bb:ec:4e:98:d8:de:d3:63:17:e7:10:
ed:79:1e:6c:a8:75:22:62:b6:19:85:ad:cc:c9:08:
57:c6:bf:cc:b5:e4:f0:87:99:95:03:88:0f:33:62:
96:85:ca:d1:bb:e5:27:d4:9a:5c:31:30:ca:2a:f1:
4b:bd:4a:e6:72:78:09:fe:fa:cc:ec:4d:83:88:e9:
1f:de:3a:80:a1:4d:b4:64:4e:b2:94:5a:94:ec:4f:
18:31:91:e1:2b:36:b3:fa:da:9b:97:85:1e:9d:8c:
df:ed:d9:ac:6a:64:f2:c2:63:72:3b:6b:72:ba:eb:
6d:0b:e6:1a:e6:8e:a9:6b:2d:7b:eb:c6:c3:b0:11:
64:ef:7f:b7:93:13:b8:58:2a:f3:31:48:a3:42:c9:
f8:f1:79:ca:26:62:7b:9f:eb:c1:fe:56:34:e7:94:
7b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:5C:7B:C0:FF:AC:43:14:DE:74:4B:9B:6E:51:C9:40:4B:D2:DA:96
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/CFE34EDC8D4211F098ABFBA6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.88.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:68:f7:ef:5a:9f:5e:3b:e2:a6:cb:a8:d5:b9:54:fd:95:93:
42:90:9d:62:bd:de:f2:8c:f0:16:e8:33:f3:7d:22:83:26:b6:
3d:f8:c4:30:95:e0:57:b9:ae:77:95:93:e6:80:a9:38:84:b2:
91:f6:58:e2:3e:f2:d0:26:c2:fe:db:10:ce:10:90:9c:ae:59:
d9:0e:33:d8:9f:81:c3:e9:5f:fc:0a:2f:dc:66:20:25:60:d7:
54:6d:28:38:20:10:44:da:25:84:a1:ef:b9:28:fc:a8:66:c0:
66:9a:c5:de:90:0f:5a:bd:b7:0c:a2:7a:d4:d0:f5:72:f5:76:
10:a9:c3:c4:c7:aa:86:47:03:9d:15:cd:c5:38:42:cb:f6:d1:
58:db:c7:2d:b0:e0:b4:df:c0:54:b5:6b:37:e6:34:15:b3:81:
6c:d0:3b:17:44:47:d8:97:64:9c:c5:03:0d:ab:2f:48:aa:4b:
79:90:9e:fa:ee:44:b0:45:2f:d0:ea:9d:74:40:13:cc:0e:6b:
6d:4e:52:85:e4:9f:74:b3:0f:27:5a:03:54:fc:b7:a2:11:ec:
07:c4:40:1c:b8:87:60:4c:03:e1:55:04:e9:86:4f:fd:e4:fa:
0e:2b:6a:34:c9:be:d0:1b:0c:b9:0c:9d:b6:60:ea:89:9a:6e:
cb:6e:45:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 07:13:41 2025 by rpki-client