Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/430445B6A6AB11F09930B2EBDAE4EC9C.roa
File: 430445B6A6AB11F09930B2EBDAE4EC9C.roa (raw, json)
Hash identifier: lFuxeWchfr9spm28tseH4udg+vbUg+od/70L1bNJZAQ=
Subject key identifier: 97:96:EE:8F:A8:AE:D6:B2:34:A4:AE:AC:3E:94:74:4A:CE:D3:45:79
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0ED4
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/430445B6A6AB11F09930B2EBDAE4EC9C.roa
Signing time: Sat 11 Oct 2025 14:04:54 +0000
ROA not before: Sat 11 Oct 2025 14:04:49 +0000
ROA not after: Sun 11 Oct 2026 14:04:49 +0000
asID: 205886
IP address blocks: 102.135.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 02:40:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3796 (0xed4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Oct 11 14:04:49 2025 GMT
Not After : Oct 11 14:04:49 2026 GMT
Subject: CN=68ea6406-488b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:70:b7:bb:36:9c:8e:89:d1:82:fb:3b:45:6e:
ea:e7:20:e1:1f:31:fe:75:0c:8e:d4:67:f4:15:34:
60:7e:43:1c:7d:71:5d:1f:7b:4b:e7:8a:19:0f:1e:
61:a2:34:b3:44:b6:32:8f:07:8c:d1:5f:4e:3e:c8:
28:7d:be:12:ff:7c:c0:38:6e:d2:59:bc:5f:e3:18:
16:04:89:82:94:43:3e:c9:10:11:0a:55:7f:2f:1e:
74:61:a7:f6:89:c9:d6:26:73:55:82:15:e3:f7:b3:
1e:45:d4:22:ba:79:21:d9:58:51:7a:e3:ec:2f:b8:
8e:56:21:38:92:8b:34:7a:58:2c:a7:67:84:0f:0b:
22:5d:81:7d:27:79:8d:d7:5f:42:bd:e6:29:ca:81:
10:9c:4b:31:ae:94:43:6a:9b:ca:c0:20:b2:ed:0b:
d5:b6:55:70:11:18:23:af:16:22:8a:e9:3a:67:ad:
fb:09:e2:b1:c3:07:7d:54:1c:17:0a:3f:10:69:a8:
6c:60:b6:71:d7:b7:71:11:20:3c:c8:dc:24:de:55:
99:29:40:23:d8:05:a7:3c:4a:02:3d:5d:5e:97:41:
8a:27:43:7a:7a:50:5b:f5:2d:ed:47:8a:7f:48:59:
99:32:59:1c:8b:d4:3e:2d:c5:a5:d2:7b:da:89:76:
d4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:96:EE:8F:A8:AE:D6:B2:34:A4:AE:AC:3E:94:74:4A:CE:D3:45:79
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/430445B6A6AB11F09930B2EBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.5.0/24
Signature Algorithm: sha256WithRSAEncryption
df:98:a8:2d:f9:c5:3d:e5:86:ef:8e:05:e7:db:a3:5a:b1:33:
9a:75:18:e1:fe:26:94:51:52:8f:c8:df:c9:42:e4:d3:ec:44:
7e:a9:80:9e:93:e6:f0:d8:d6:32:82:c7:e0:cd:3e:a0:0a:5f:
02:23:81:9f:48:cf:7a:21:d8:87:f4:17:3b:66:2c:cc:d8:cb:
8d:8e:09:ad:dd:b1:ba:64:4a:76:18:48:9f:55:ca:bd:97:77:
f3:86:f5:09:c3:36:c5:6e:34:15:35:25:4c:7b:c8:15:21:dc:
3e:4f:6c:31:1e:52:73:fc:4a:36:e3:e8:30:fc:da:bf:95:7f:
3f:ef:c6:0b:fa:96:2b:1a:1f:8e:5d:69:ec:c7:66:f1:61:0e:
0a:58:48:66:d2:e1:43:8d:07:6a:eb:90:bb:3d:74:c2:f5:bd:
23:ab:1e:47:ab:82:53:5b:f9:6c:48:a1:bb:18:e9:62:f9:21:
3e:0a:75:d4:ef:f2:ea:4a:0b:62:62:39:82:09:1d:e5:f5:3a:
ae:a8:53:3c:13:5d:06:99:6b:1a:ad:73:e4:f4:8a:46:13:28:
f9:9d:0d:4d:75:fb:5a:41:f9:20:a5:2b:58:0d:30:35:d2:a0:
e3:b3:7f:8d:1a:ab:d4:1a:9d:88:70:d8:2c:88:49:cf:4d:84:
19:d3:e3:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:42:18 2025 by rpki-client