Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/386FA114AB1E11F0A14ECF89DAE4EC9C.roa
File: 386FA114AB1E11F0A14ECF89DAE4EC9C.roa (raw, json)
Hash identifier: 0QkEOw6SrSHVOsuEscg6DFfM46nBUEFrT/9yJ9nlpD4=
Subject key identifier: E6:41:BF:08:28:6F:39:07:3A:D6:33:E1:9E:5B:25:A2:7A:B1:AB:42
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0EF3
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/386FA114AB1E11F0A14ECF89DAE4EC9C.roa
Signing time: Fri 17 Oct 2025 05:57:54 +0000
ROA not before: Fri 17 Oct 2025 05:57:47 +0000
ROA not after: Fri 16 Oct 2026 05:57:47 +0000
asID: 208185
IP address blocks: 102.135.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3827 (0xef3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Oct 17 05:57:47 2025 GMT
Not After : Oct 16 05:57:47 2026 GMT
Subject: CN=68f1dae1-b6b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:15:be:b8:7b:22:6c:dd:69:c1:02:28:7e:cf:
a4:04:0f:c2:07:6e:cb:52:c6:42:e6:08:56:2b:c8:
de:ec:9d:37:ff:eb:1a:1e:cc:63:28:1e:c1:66:6f:
21:4f:03:7d:81:43:cb:bb:49:8a:7e:20:51:77:ff:
f5:31:bc:45:b4:d0:aa:03:b7:5c:47:3c:5a:74:14:
fd:29:6f:e5:3e:aa:77:22:c0:95:39:cc:db:d8:fb:
03:71:a1:3c:35:ec:16:42:cd:9b:bf:f8:ea:c4:f9:
56:c2:43:bf:d1:5a:32:28:cd:c9:85:e3:ef:14:15:
ea:9e:7b:0b:0a:d8:72:8a:f1:88:6e:b7:75:b5:42:
5e:08:2e:98:3c:6a:f5:65:42:4d:8a:a1:05:53:d6:
b5:a5:dd:17:2a:23:cb:82:e4:e6:67:4b:16:97:8c:
b9:49:fe:46:30:6c:b8:00:5d:ff:22:0d:d1:a9:41:
27:c1:46:aa:7d:aa:fa:4d:41:aa:a3:ef:78:ad:65:
7e:22:d2:ee:4e:f2:d6:b5:76:42:69:53:dd:06:8b:
8d:73:68:f4:e7:a1:44:3a:e9:49:08:14:6e:25:17:
ad:4b:2e:6d:5d:a4:23:00:48:fd:ea:6a:d3:ca:a0:
18:80:e9:81:1a:c6:aa:57:ab:74:18:2d:8d:71:3c:
4f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:41:BF:08:28:6F:39:07:3A:D6:33:E1:9E:5B:25:A2:7A:B1:AB:42
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/386FA114AB1E11F0A14ECF89DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.1.0/24
Signature Algorithm: sha256WithRSAEncryption
42:e9:ef:d5:4a:1b:43:81:8d:b0:3e:8b:b6:bb:10:b9:25:03:
d1:48:2d:9e:67:0e:4b:49:86:7f:e7:07:04:d9:7d:72:76:81:
22:dd:a6:3b:c1:0a:11:14:24:b8:24:c2:42:76:79:a3:c2:d4:
5a:4e:0b:30:7d:69:bf:46:49:02:8b:36:3f:31:8b:40:65:9d:
64:78:b8:b7:17:b2:c4:cf:13:12:5a:68:52:f2:67:ad:6b:71:
ef:2d:9d:17:7f:1d:07:7b:18:98:db:b5:8e:33:be:e1:96:cc:
b4:bd:b8:bd:41:ba:c4:96:1c:2f:04:bb:a8:64:07:6e:f2:2d:
b7:83:d0:e9:89:3b:a6:a6:60:b8:4d:76:b3:34:89:3c:35:88:
3d:5a:e1:d6:b1:d8:77:f6:f7:19:8e:b6:4c:31:09:c4:45:c0:
c6:da:c2:a6:81:c2:ca:4e:45:9d:d3:9d:03:af:3d:88:fe:6a:
f1:1b:61:0c:63:f2:7a:ea:b8:d3:ee:12:f7:94:13:ee:85:d1:
ca:9a:50:12:58:fe:93:98:76:00:12:58:6b:60:24:1c:79:33:
b1:97:1f:0d:c5:da:cb:4b:0e:f7:44:85:d0:1b:04:7b:b4:ef:
f0:7c:e3:e3:10:eb:dd:6e:f6:c8:4b:63:7d:46:8a:f3:89:96:
f0:f3:7f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:30:26 2025 by rpki-client