Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/E19078CE296C11F0801076A2DAE4EC9C.roa
File: E19078CE296C11F0801076A2DAE4EC9C.roa (raw, json)
Hash identifier: zRfC8H+UfeuP6ZjahZ0CRCKEh4MGZAQ9ylS/b76k0a0=
Subject key identifier: 40:05:78:F1:20:FA:4C:5A:A7:82:4A:71:8C:78:43:83:30:34:A6:A4
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 09C5
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/E19078CE296C11F0801076A2DAE4EC9C.roa
Signing time: Mon 05 May 2025 04:53:27 +0000
ROA not before: Mon 05 May 2025 04:53:22 +0000
ROA not after: Tue 13 Jan 2026 04:53:22 +0000
asID: 213659
IP address blocks: 102.135.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 07 Jun 2025 00:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2501 (0x9c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: May 5 04:53:22 2025 GMT
Not After : Jan 13 04:53:22 2026 GMT
Subject: CN=68184447-6c77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:cb:3d:19:a0:e1:9b:80:9c:a4:5d:af:4d:f3:
c0:c4:a8:6e:9d:34:6d:91:0e:d4:e7:29:47:8c:4d:
49:55:10:5e:f4:b7:32:c7:d9:82:e9:09:cc:28:ba:
ae:db:54:75:26:47:7d:6f:a7:c7:f1:24:a1:86:c9:
cf:6b:4c:e9:6a:f4:27:69:ac:00:14:95:ef:70:65:
7d:61:1c:94:1b:28:1d:dd:1b:d7:b8:9b:8e:d5:33:
b1:51:fd:0f:ac:3b:5b:d4:43:01:98:28:70:4a:1c:
d7:fc:c5:f8:ab:7e:b7:72:78:3b:f6:69:94:56:37:
d7:64:4d:b8:48:8c:60:f1:59:8c:0e:2e:d5:bd:a9:
42:b5:29:9d:6c:e2:b6:df:93:16:94:2e:3b:3a:85:
5a:e7:5a:ce:32:d3:cf:12:62:cb:f3:7e:05:e6:0f:
84:da:ec:ee:26:90:a4:63:7e:ab:9e:36:80:f8:10:
76:70:1c:93:5c:73:01:ce:8e:e1:cb:87:74:2e:90:
f6:40:3e:73:5c:65:80:95:67:1a:96:7d:d0:91:a4:
ab:b7:95:dc:d5:00:1c:d2:7a:d2:ca:ea:75:de:8e:
8d:c4:d9:fe:de:fa:b2:50:dc:97:4d:90:51:74:f7:
81:1d:1c:76:6d:f4:51:8b:b7:c7:03:95:3e:f7:cf:
d8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:05:78:F1:20:FA:4C:5A:A7:82:4A:71:8C:78:43:83:30:34:A6:A4
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/E19078CE296C11F0801076A2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.25.0/24
Signature Algorithm: sha256WithRSAEncryption
29:10:9b:97:f7:b7:ad:18:e1:a8:1e:b7:2c:57:07:35:5b:8a:
d1:0b:d7:d8:e1:27:0c:e9:ab:8c:9a:89:d3:25:69:34:42:13:
18:bd:16:81:c8:4b:a3:da:02:ae:89:81:fa:80:00:57:c7:6c:
7f:ca:3a:65:c2:79:3c:7b:e7:d5:d6:70:a1:cf:22:1e:d6:66:
63:f5:ae:b4:df:ee:fb:a2:61:e5:44:61:02:b9:5c:ac:c4:0b:
07:af:f5:a0:b3:d9:92:f5:2f:db:08:c6:e3:64:25:7d:5d:4b:
c3:d3:ab:99:7c:7d:58:11:a3:18:d3:80:50:a1:29:2b:f3:0e:
bb:4f:45:a4:72:8b:ad:34:c7:99:2e:03:09:03:91:fa:39:77:
e5:88:67:09:0f:1a:fa:24:b2:ec:50:d6:5a:76:b5:25:bb:00:
5a:96:85:3f:73:9f:ea:e8:ae:a5:c4:a4:30:d5:b7:1c:11:26:
da:81:f4:5d:15:6a:fe:cd:cb:89:a9:66:9e:c2:c6:4d:e0:fd:
c1:b7:7f:6c:8c:0d:a3:3b:a5:02:74:bc:22:5b:c2:87:e2:0c:
6d:f5:0e:1a:c0:96:c7:77:e1:a8:0a:8d:e4:a0:d8:fb:b5:35:
bc:de:03:4c:10:d9:90:e8:a1:c0:d3:f7:93:a1:83:99:78:e8:
d8:e1:66:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:13:20 2025 by rpki-client