Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/191C48FC275811F08AADF7B0DAE4EC9C.roa
File: 191C48FC275811F08AADF7B0DAE4EC9C.roa (raw, json)
Hash identifier: XJFfUqNjr+kFqVGceAYiukSVY412djiyF4RsdON5LM8=
Subject key identifier: 57:7C:D9:3A:3D:F6:E8:71:FC:AA:F5:C1:F4:36:05:5B:14:69:52:FE
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 09B8
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/191C48FC275811F08AADF7B0DAE4EC9C.roa
Signing time: Fri 02 May 2025 13:19:38 +0000
ROA not before: Fri 02 May 2025 13:19:34 +0000
ROA not after: Tue 10 Feb 2026 13:19:34 +0000
asID: 329007
IP address blocks: 102.135.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 08 May 2025 00:06:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2488 (0x9b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: May 2 13:19:34 2025 GMT
Not After : Feb 10 13:19:34 2026 GMT
Subject: CN=6814c66a-6fb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5e:46:73:5e:f1:36:ec:32:7b:02:55:a4:fc:
fe:2f:28:57:06:dc:d6:62:6e:88:68:46:f4:a8:0d:
14:41:a2:01:7b:a7:ae:63:27:6e:95:eb:c9:70:b5:
af:b7:b9:77:e5:65:33:f9:f7:a3:2f:74:ad:29:43:
95:10:cf:ed:7e:ed:03:a6:3c:6c:82:b9:f0:cf:58:
f7:91:f7:61:c8:74:10:70:36:30:0d:a2:84:40:68:
ff:3f:77:11:c6:84:31:6f:7f:37:85:02:f7:fc:30:
73:58:5c:ed:23:08:9e:fd:f5:46:e5:ae:2f:c6:ee:
f1:a3:bf:d8:5f:5f:f6:07:a4:ef:a4:6b:86:18:1b:
d1:43:d6:dc:5b:a4:8b:d2:b4:12:cb:fa:72:e7:a7:
45:55:56:8f:e5:2c:73:a0:05:6e:27:af:4c:6e:40:
c6:1d:eb:30:b8:ce:ff:32:71:6c:1b:1e:ab:79:2e:
62:12:a5:48:65:ee:e9:c8:04:a8:d7:c9:ba:d7:4a:
5d:e3:6a:8f:72:f4:aa:24:84:89:dc:94:8a:7d:b2:
5e:9b:6f:f9:87:d0:ba:88:02:99:4d:a5:eb:6a:37:
d2:09:f5:25:17:9f:58:5f:1c:6c:54:a6:e1:05:9b:
e3:3b:a3:ca:5c:3e:eb:bd:39:85:ca:ed:1e:d4:1c:
27:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:7C:D9:3A:3D:F6:E8:71:FC:AA:F5:C1:F4:36:05:5B:14:69:52:FE
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/191C48FC275811F08AADF7B0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.21.0/24
Signature Algorithm: sha256WithRSAEncryption
08:18:48:a2:e0:ff:5f:61:5c:ea:63:b7:c9:63:90:cc:c0:4e:
1a:53:90:9e:11:10:19:f0:0e:05:7a:a9:1f:7f:22:b4:f3:30:
ec:c6:c3:47:8f:67:66:db:1e:35:a5:5b:63:ca:de:45:68:5c:
6e:fa:a8:3e:2e:29:df:35:fc:0b:9a:b1:72:bc:81:ab:f2:4a:
c5:1d:20:f7:56:44:03:01:7f:f5:77:24:f1:c7:68:00:68:07:
33:59:70:11:29:9f:80:77:7f:9e:ec:99:eb:22:84:09:08:83:
b4:65:da:06:af:4c:92:a7:da:b1:75:76:3e:2b:f7:7d:4d:3f:
a6:fa:46:04:8b:56:af:d2:f5:75:ec:23:db:77:5a:cf:2f:2a:
af:16:bc:d3:26:07:cc:90:35:66:b8:9b:ad:c0:55:2f:0a:3d:
91:ec:4c:ff:95:2f:9d:d1:5c:cc:08:3f:0a:b7:b7:0d:e5:1a:
7a:38:9a:fc:dc:44:23:a0:97:80:eb:12:b5:84:23:76:c7:54:
15:f4:ef:9d:55:8c:0f:de:52:fb:91:c2:ad:dd:14:eb:53:25:
43:65:fd:dc:81:34:67:18:30:c6:5f:47:25:57:45:b0:b3:58:
4a:a3:da:75:fd:19:5e:08:83:2c:2a:7e:cd:d9:64:0e:49:a1:
84:dd:57:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 18:36:10 2025 by rpki-client