Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/DAFCB90083E411F0A936AEB0DAE4EC9C.roa
File: DAFCB90083E411F0A936AEB0DAE4EC9C.roa (raw, json)
Hash identifier: jcAPOBdxyP9YXXq+/PQLa0YI8EZlrK0Rwj+gtEBB74Y=
Subject key identifier: DF:82:12:80:B5:08:F0:A1:A4:33:5A:88:D1:87:2F:13:3A:0E:18:12
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0D40
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/DAFCB90083E411F0A936AEB0DAE4EC9C.roa
Signing time: Thu 28 Aug 2025 07:59:00 +0000
ROA not before: Thu 28 Aug 2025 07:58:55 +0000
ROA not after: Wed 24 Dec 2025 07:58:55 +0000
asID: 401838
IP address blocks: 102.135.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 09 Sep 2025 00:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3392 (0xd40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Aug 28 07:58:55 2025 GMT
Not After : Dec 24 07:58:55 2025 GMT
Subject: CN=68b00c44-2b3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e7:05:35:1b:3c:00:d9:bd:87:1d:a2:95:84:
61:bc:5c:f5:9e:ae:81:d6:69:c0:9d:01:50:b6:0b:
03:4b:0b:bc:8f:f3:4a:88:7d:b1:67:5e:51:f4:6c:
cc:32:41:a5:73:30:2e:98:a0:9e:3b:bd:45:10:52:
be:e4:8f:04:45:5a:7f:9e:a4:ed:ea:9f:92:af:db:
05:b0:b2:d5:1b:17:25:71:c8:9a:32:cb:a8:0e:6e:
7f:1f:23:46:2b:9d:a4:cf:e4:f7:36:4e:d3:dd:fd:
d8:31:da:7f:58:b2:dc:29:09:49:76:05:8f:5e:f6:
c8:b5:2b:7e:b5:c7:95:6c:be:7d:26:10:eb:2a:bd:
e0:67:f7:38:e4:89:9a:91:b2:84:04:39:e9:1b:c8:
5e:74:c1:1e:24:fb:cc:96:e2:a5:d1:6e:b3:4e:f8:
77:01:5b:66:1f:99:05:d1:21:92:d6:be:08:af:a1:
39:f1:72:c7:e4:28:c2:62:3b:79:a0:4c:c9:c7:b6:
aa:fd:4e:ce:8d:09:31:6b:db:fa:c5:16:b5:54:09:
a6:89:5c:e3:d9:82:a4:3b:13:91:cc:f4:b6:f8:0f:
74:a1:b3:bf:04:38:02:b1:70:fa:18:2b:68:a2:f4:
1f:93:e3:94:ef:61:02:ba:ff:ab:59:7f:28:06:d2:
36:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:82:12:80:B5:08:F0:A1:A4:33:5A:88:D1:87:2F:13:3A:0E:18:12
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/DAFCB90083E411F0A936AEB0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.6.0/24
Signature Algorithm: sha256WithRSAEncryption
69:37:df:66:36:c8:ee:6d:82:06:80:2d:38:8d:12:e5:b9:69:
83:6b:35:f9:3b:21:54:78:98:3d:34:85:a0:65:b5:67:0f:58:
2a:23:89:90:47:d0:96:9d:a1:41:04:fd:db:7f:22:0e:89:63:
08:5b:a5:36:b7:5a:8f:98:c4:fd:f7:73:35:cd:be:5d:8c:0a:
a5:be:78:15:ab:8e:5e:48:8e:60:1e:0d:67:a6:2d:91:64:58:
17:84:41:a5:16:74:3f:16:aa:c8:41:09:f2:cf:61:15:2b:f4:
5c:67:63:b3:a8:fa:ad:05:86:98:38:e3:e2:4c:9e:0f:42:01:
1a:b7:27:4a:e3:3c:13:7e:ee:77:6e:c9:cc:90:5d:66:cd:ac:
7d:35:a7:d2:14:14:2e:cc:fa:92:a2:8a:51:36:bd:b2:de:f9:
c5:9d:5d:85:b0:10:be:38:98:41:2a:ec:9b:8f:c4:3c:b3:7f:
0c:62:7a:cc:6f:05:1a:21:3c:93:6a:cc:2a:0f:43:1d:b7:02:
74:98:b5:b8:de:33:4e:54:a9:bb:ce:0e:53:53:8a:3e:b5:cc:
ed:ff:6a:5e:84:5f:f8:30:91:15:6d:8c:eb:5c:d7:4a:e2:21:
66:f7:ee:69:01:42:17:87:52:4d:ac:f5:3d:06:a9:33:5b:f6:
2a:83:0c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:45 2025 by rpki-client