Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/304967C6A6AB11F0A9238EEBDAE4EC9C.roa
File: 304967C6A6AB11F0A9238EEBDAE4EC9C.roa (raw, json)
Hash identifier: FnKVLaH0MAqJrvh6+subp0fls9G6vR2zlt6FRC5XAms=
Subject key identifier: B3:8A:44:02:FC:7B:8F:C1:B5:E0:80:34:EA:86:2D:DC:91:D8:ED:B0
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0ED2
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/304967C6A6AB11F0A9238EEBDAE4EC9C.roa
Signing time: Sat 11 Oct 2025 14:04:23 +0000
ROA not before: Sat 11 Oct 2025 14:04:18 +0000
ROA not after: Sun 11 Oct 2026 14:04:18 +0000
asID: 205886
IP address blocks: 102.135.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3794 (0xed2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Oct 11 14:04:18 2025 GMT
Not After : Oct 11 14:04:18 2026 GMT
Subject: CN=68ea63e7-d09e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f6:52:ca:55:a0:5c:bd:3a:ca:c2:fa:49:11:
da:63:1f:9e:36:6d:4b:fa:97:20:71:97:80:55:9b:
26:b3:4d:8b:9d:aa:13:80:e3:d0:6e:e3:c9:2c:04:
49:44:4b:04:b2:f0:a4:5c:df:24:2f:c5:b8:15:a4:
63:36:97:ed:ee:4b:58:ec:a1:31:18:db:53:5a:5e:
58:37:27:4c:9c:62:c3:26:50:fa:14:e8:93:b5:f2:
e9:54:54:59:f7:fb:c5:76:0e:dd:60:a0:27:3e:97:
90:db:99:3f:30:14:fe:0f:6d:76:bc:66:d6:f6:5e:
91:eb:b7:a4:ee:45:6f:36:c3:a2:ef:4b:73:98:b1:
e1:f2:9d:5b:4d:bb:94:a3:fe:82:48:06:74:ba:c9:
ad:07:39:20:25:35:2c:7c:ea:0c:26:fd:10:c6:c9:
af:c3:40:66:95:16:a0:f7:44:12:a0:8b:de:2a:3e:
21:4a:b8:a4:ed:ef:29:03:ec:3d:34:73:f1:9f:0a:
4a:66:0b:58:72:ef:61:af:b5:be:82:7b:3f:56:e3:
5e:0e:81:1e:4a:b4:05:9c:a6:25:c3:3e:c2:ab:83:
d9:9c:27:e5:7d:81:a5:1e:11:1b:83:75:64:33:44:
b7:54:30:d2:3e:6e:f2:ce:8d:11:49:80:82:8d:a1:
0d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:8A:44:02:FC:7B:8F:C1:B5:E0:80:34:EA:86:2D:DC:91:D8:ED:B0
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/304967C6A6AB11F0A9238EEBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.24.0/24
Signature Algorithm: sha256WithRSAEncryption
99:51:36:d0:06:b3:fc:b1:a7:46:7d:40:fa:4a:66:d5:cd:4f:
a2:1a:cf:55:4f:87:1f:15:a8:91:fb:b5:e7:e3:48:fa:32:84:
66:54:38:5a:a7:df:c1:8c:41:f3:0a:bf:dc:b8:9b:7d:0b:1a:
b5:31:55:34:d7:3e:8d:04:e1:4f:80:81:13:a7:a2:bb:c1:cb:
c2:85:9b:f0:17:28:34:9e:39:a2:26:22:ef:8e:d3:42:fe:97:
43:81:70:46:98:d1:60:3f:21:57:ee:c0:98:a7:9c:ff:98:7c:
04:5b:52:bd:a7:87:21:3a:91:7d:46:35:cf:31:f9:ad:3a:97:
c8:ad:fa:2f:33:d0:0a:70:85:1d:37:9d:49:e0:f9:7b:d8:bd:
0a:fa:51:9d:44:27:a2:ec:79:ab:9d:cb:1d:7b:2a:54:b0:8e:
8d:73:b7:c1:c2:12:a6:5c:99:c8:e1:32:64:e2:75:d2:41:db:
77:b5:7c:cc:e3:e5:ed:62:2d:e9:fb:90:a6:df:cb:67:53:cc:
8d:13:c3:cc:d9:db:d9:ef:fa:97:45:9e:5c:45:47:c0:c8:de:
8b:83:00:91:ac:75:65:c4:5d:e9:81:a3:40:d1:6c:23:8e:69:
b7:8d:93:a9:b2:7c:80:f9:85:d8:b4:bd:03:a4:17:7c:b4:43:
15:7e:a1:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:30:16 2025 by rpki-client