Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/1A6ED7F67D9311F0B181D3E1DAE4EC9C.roa
File: 1A6ED7F67D9311F0B181D3E1DAE4EC9C.roa (raw, json)
Hash identifier: i5cjSAgR2ZS+6dtFcWX5GqWrX3uXPTPT83/8EnOj6L0=
Subject key identifier: 64:4F:41:16:07:9D:54:87:5E:A2:03:06:A6:86:55:AB:1D:E1:BC:FB
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0CFD
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/1A6ED7F67D9311F0B181D3E1DAE4EC9C.roa
Signing time: Wed 20 Aug 2025 06:58:41 +0000
ROA not before: Wed 20 Aug 2025 06:58:35 +0000
ROA not after: Thu 20 Aug 2026 06:58:35 +0000
asID: 398704
IP address blocks: 102.135.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3325 (0xcfd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Aug 20 06:58:35 2025 GMT
Not After : Aug 20 06:58:35 2026 GMT
Subject: CN=68a57221-786e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a0:0f:d0:08:c4:ed:ef:39:93:bb:23:ae:5d:
af:be:30:0d:d8:56:f9:d5:90:6e:a0:98:a7:5d:ba:
83:cd:89:ae:62:86:36:d9:de:c6:41:06:58:2b:d6:
b1:18:9b:8f:c5:74:a6:bd:c6:e0:7f:d9:15:4e:9b:
ac:42:6d:08:c1:71:d0:ab:cf:9b:32:25:4c:53:36:
b4:7d:a6:c5:2a:d1:e4:cb:ee:3c:94:b4:40:15:2f:
61:6e:99:81:53:e8:cc:cc:93:4d:5a:04:f0:b4:33:
cd:1c:90:ce:6f:3b:b6:cb:cc:07:39:72:8c:d4:42:
5d:a9:1b:e7:51:4d:0d:3f:6f:b6:32:8a:55:f9:4b:
80:6b:38:fd:bd:c5:5f:86:19:c1:3e:de:dc:dc:25:
e8:98:dc:dd:73:33:47:b3:e5:d4:fa:82:76:1f:c9:
47:6c:65:c9:48:70:a9:bb:ed:e4:93:ea:35:fd:b1:
d9:18:e0:a4:50:ed:3a:63:ba:ae:f7:4f:df:80:1e:
36:0d:7b:ed:8b:ca:c5:81:87:6f:aa:d4:08:03:0d:
e0:48:b4:7c:5f:1c:8d:c8:53:ca:9c:c4:e6:ef:af:
a6:1e:7b:3a:48:2c:72:6a:52:b5:a0:19:65:6a:aa:
83:ba:2b:45:18:83:3c:00:e5:23:e7:3e:40:1b:8b:
1a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:4F:41:16:07:9D:54:87:5E:A2:03:06:A6:86:55:AB:1D:E1:BC:FB
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/1A6ED7F67D9311F0B181D3E1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.1.0/24
Signature Algorithm: sha256WithRSAEncryption
dd:2d:19:e5:82:9f:76:91:9c:df:b7:4c:6c:cb:9c:91:33:d4:
62:be:fd:1c:76:22:b9:d1:fc:94:de:2b:3d:d5:af:c5:41:99:
d9:13:62:2d:11:f7:81:85:e7:ff:6f:18:64:2b:1d:15:90:cd:
ae:f4:43:e1:b7:80:e8:58:c5:15:2f:71:07:41:d0:29:7f:ed:
a6:ad:d0:3d:5d:cc:6f:2f:b0:05:19:99:48:09:fc:af:7a:ca:
48:7f:e3:86:46:b4:ca:75:e9:a6:2c:9e:76:4e:03:e6:cd:99:
16:4f:49:6e:50:ad:e7:62:94:3c:ae:a7:e9:74:7a:50:4a:3d:
c1:e0:4d:1a:4f:f1:4f:d0:1e:9a:1b:db:e3:30:a1:83:0c:14:
60:f3:ef:0d:5a:42:dc:b0:f0:1c:97:5c:e3:0b:ce:1a:37:7a:
37:49:db:ed:03:0a:19:07:72:51:2e:69:62:8a:d7:af:df:b8:
ef:da:1f:85:0d:d3:4d:20:e7:db:39:e0:c6:e9:9f:05:d9:99:
04:6a:17:ce:de:76:fb:a1:d0:98:66:d0:93:ae:c1:5d:ab:76:
85:5e:23:a2:9f:76:af:a0:8a:38:2d:79:6c:42:71:38:56:e7:
c1:ce:f2:f5:52:91:fa:c3:a4:ae:38:c8:bd:73:60:77:48:57:
94:be:f5:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:53:18 2025 by rpki-client