Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/3AB0FD287D9311F087F0BBE3DAE4EC9C.roa
File: 3AB0FD287D9311F087F0BBE3DAE4EC9C.roa (raw, json)
Hash identifier: oVqxg5sJlj6wmlv70TBz8wdp5n5bqvwu0oPz0dpa+Qc=
Subject key identifier: 38:AD:81:89:FB:0D:4A:FB:28:D8:FB:47:24:A0:2E:9A:6B:2A:48:40
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0D01
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/3AB0FD287D9311F087F0BBE3DAE4EC9C.roa
Signing time: Wed 20 Aug 2025 06:59:35 +0000
ROA not before: Wed 20 Aug 2025 06:59:30 +0000
ROA not after: Thu 20 Aug 2026 06:59:30 +0000
asID: 398704
IP address blocks: 102.135.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3329 (0xd01)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Aug 20 06:59:30 2025 GMT
Not After : Aug 20 06:59:30 2026 GMT
Subject: CN=68a57257-05f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d6:a6:05:bf:c8:07:db:72:11:7f:ca:f9:d2:
35:a0:2c:8e:96:09:13:a5:b0:4e:16:8d:55:db:01:
d1:eb:c7:ed:c7:57:70:fc:fb:4f:93:6f:20:af:a8:
c4:e7:aa:d0:ea:6a:02:9b:fb:b4:fa:23:48:a8:40:
cb:d4:c1:1b:05:cb:2d:59:1a:43:9a:30:12:86:81:
4d:5c:90:3b:41:f6:c8:78:b2:8c:29:11:8c:5d:f8:
67:42:29:c7:d7:3d:d4:29:3d:3b:43:71:c4:de:ed:
b4:b0:6d:89:75:d0:ed:bc:c5:e1:91:4c:2a:52:8b:
63:30:98:74:f9:11:e1:33:9e:9e:f5:e8:85:a7:3e:
2f:fe:26:5f:20:ad:58:58:d6:c7:51:47:0c:d5:ed:
f3:53:5f:d4:8c:5a:a1:33:36:1b:8e:a3:67:a4:e2:
48:31:0d:19:c0:59:69:0c:59:4b:4c:69:92:07:e4:
a7:27:ef:ce:83:a4:ae:df:c6:fe:92:d7:c9:9b:04:
87:4a:3c:46:ad:28:3c:7e:fa:2b:8c:17:1e:e3:e2:
5e:f1:15:4d:a5:f6:f8:50:72:ae:b0:e3:18:c6:c0:
71:14:94:f2:4c:f5:e9:a5:d9:73:61:11:e5:e6:6d:
b4:8c:04:ba:b1:83:21:cf:25:81:ee:b0:ef:4f:91:
e5:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:AD:81:89:FB:0D:4A:FB:28:D8:FB:47:24:A0:2E:9A:6B:2A:48:40
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/3AB0FD287D9311F087F0BBE3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.114.0/24
Signature Algorithm: sha256WithRSAEncryption
61:25:27:ae:e1:6a:15:11:e9:95:65:d7:d1:a5:18:02:6b:00:
11:8a:de:79:82:1b:6f:de:10:3a:6d:fa:ee:97:39:ce:d1:d1:
6f:ae:a7:8f:fd:0b:35:31:6a:73:9a:c6:2e:ff:f4:b4:e6:ce:
62:89:77:55:49:ab:cb:79:a7:86:54:cb:b3:dd:dd:14:a9:78:
a3:65:0b:d3:d3:eb:d0:4b:68:cf:18:23:f2:96:66:f0:c9:d7:
6a:02:bd:ab:e4:e2:ae:be:3d:ef:6c:85:7b:21:7a:a8:eb:72:
18:61:ab:b5:5a:e8:d4:78:99:5c:2c:96:8a:a1:e1:6a:e0:d3:
8d:0b:fb:d4:db:15:26:8c:37:d6:c2:39:23:07:52:00:73:8a:
4c:86:6e:dc:52:e8:d9:0d:27:24:9a:e3:f8:1a:c9:c5:4f:a6:
70:27:6f:13:8c:5b:59:7f:e6:01:aa:4a:d2:6f:a0:73:33:0c:
bb:12:ed:ef:2e:d6:f4:78:ee:cb:8d:ee:99:1b:32:4b:72:d6:
9e:a3:62:05:3d:6c:0d:00:ad:2c:e3:f2:53:a1:50:ce:1f:ed:
96:94:e1:67:f4:44:18:6f:c3:50:12:b3:59:17:28:26:e5:d3:
b1:1c:66:aa:c4:85:f2:07:fd:f3:15:4c:d5:37:b6:e4:28:6e:
31:83:7a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:54:12 2025 by rpki-client