Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/F62DB33C888011F08A597FB8DAE4EC9C.roa
File: F62DB33C888011F08A597FB8DAE4EC9C.roa (raw, json)
Hash identifier: AJoCraOF0nY3ZJ5yplj1VDmXykWch7LxwQMY2GnLK+U=
Subject key identifier: DC:1D:E0:C5:1E:57:EB:AB:E2:2E:93:6E:B2:C7:95:A4:96:38:86:92
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0DC4
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/F62DB33C888011F08A597FB8DAE4EC9C.roa
Signing time: Wed 03 Sep 2025 04:46:32 +0000
ROA not before: Wed 03 Sep 2025 04:46:27 +0000
ROA not after: Tue 13 Jan 2026 04:46:27 +0000
asID: 9009
IP address blocks: 102.135.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 07 Sep 2025 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3524 (0xdc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Sep 3 04:46:27 2025 GMT
Not After : Jan 13 04:46:27 2026 GMT
Subject: CN=68b7c828-5d41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7c:35:f5:87:e2:55:95:b3:14:8b:65:30:cd:
1b:7c:a7:f3:5b:96:98:39:05:cd:8e:e2:3c:59:ed:
37:9e:65:d7:77:1f:16:ba:b0:11:34:fe:1c:15:ab:
62:34:6f:3d:fc:6f:63:05:ba:98:5a:15:01:00:12:
62:0c:6b:93:e9:f7:2c:19:88:ac:2a:84:6e:c9:9e:
0a:74:8b:a1:ae:96:ec:58:45:5b:1d:57:af:15:e5:
a7:01:a9:94:b6:a2:e9:82:91:73:58:92:1c:4a:32:
57:cd:55:4a:8e:b0:61:51:c9:c5:47:b7:73:cb:17:
3c:9e:5e:d6:07:69:57:f6:7f:02:d6:c3:67:43:d5:
d5:09:f0:df:51:f2:b9:4c:33:f7:a9:5f:69:03:af:
08:92:f5:5f:dd:c9:b6:5f:60:7a:30:48:7c:34:bc:
c7:4c:93:03:16:ac:51:f7:18:4d:00:f6:d3:89:b5:
08:f9:b9:12:22:58:79:99:b2:7f:55:b6:21:73:bc:
7e:9e:f4:f2:63:51:77:a3:a0:c9:35:ed:56:35:4f:
2d:98:09:44:35:a3:3a:b5:98:de:02:94:0e:1c:29:
b3:c2:fb:99:09:63:c6:89:59:0a:75:3c:dc:5e:d2:
f5:c9:9c:43:d9:19:62:0e:01:3b:39:f3:97:1e:7d:
62:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:1D:E0:C5:1E:57:EB:AB:E2:2E:93:6E:B2:C7:95:A4:96:38:86:92
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/F62DB33C888011F08A597FB8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.43.0/24
Signature Algorithm: sha256WithRSAEncryption
19:3f:43:43:da:84:45:c6:2d:68:e0:e8:dd:aa:9d:30:ed:30:
49:24:ee:a1:93:d5:50:02:4d:6a:a7:81:41:c8:e1:f2:c9:99:
e6:a7:03:bf:fd:ce:15:e1:d5:32:63:21:c6:37:d6:83:c8:af:
c0:76:37:c2:8f:e7:ad:9d:2d:c2:6a:b1:b6:f2:95:df:46:56:
d4:cc:c4:d5:1f:ad:90:7c:33:79:e9:8a:81:f3:fe:d2:0e:02:
91:ea:18:d2:cb:f7:7c:3a:3d:c4:9f:67:a0:48:08:51:17:e0:
67:26:06:78:11:15:7d:8e:0b:1c:0a:1e:60:cb:7a:12:3c:46:
3f:ca:94:fa:9d:1b:c8:98:48:b8:d7:c2:12:84:05:dd:88:50:
a7:b6:b5:c0:6a:94:33:32:04:26:29:b1:79:5c:6a:55:93:a7:
b5:27:21:fc:46:1a:18:18:e1:70:21:5d:00:12:6b:f6:ff:6a:
31:80:89:06:3d:7c:59:fd:ab:75:fa:d5:d1:9b:51:8c:8a:45:
8b:22:90:4a:b8:c0:4e:ea:11:e3:48:c1:38:62:08:e9:f8:47:
9f:aa:7a:fe:23:dd:3c:0c:1d:37:3a:5b:b5:2d:47:a1:8d:ad:
31:e2:ab:e4:b0:53:9a:91:54:e5:d0:9e:03:01:be:9b:11:45:
97:68:6a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 05:55:34 2025 by rpki-client