Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/44B745708D4211F0A748AEA4DAE4EC9C.roa
File: 44B745708D4211F0A748AEA4DAE4EC9C.roa (raw, json)
Hash identifier: 7kJfd+WSmW+pZPkzZsKuvncmIhJRXBUeNSLzCYuJxUk=
Subject key identifier: 17:41:A2:0E:9D:6E:84:C6:0C:0B:2D:33:5C:02:1E:76:87:46:97:3E
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0E01
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/44B745708D4211F0A748AEA4DAE4EC9C.roa
Signing time: Tue 09 Sep 2025 06:00:21 +0000
ROA not before: Tue 09 Sep 2025 06:00:16 +0000
ROA not after: Sat 05 Sep 2026 06:00:16 +0000
asID: 9009
IP address blocks: 102.135.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3585 (0xe01)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Sep 9 06:00:16 2025 GMT
Not After : Sep 5 06:00:16 2026 GMT
Subject: CN=68bfc275-4049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d8:d0:7b:e8:af:5c:0b:82:d6:5b:98:bb:cd:
2e:9b:24:5e:ba:c2:9b:4d:59:71:09:11:41:f7:5b:
92:f3:52:e5:fa:44:2c:eb:72:5f:bb:86:76:f1:84:
55:12:b9:b6:b2:14:3d:4d:f9:dd:1c:77:cf:60:04:
d1:f4:10:e3:d7:9b:04:6d:24:7e:62:31:7f:77:66:
9a:57:47:21:c4:fd:48:e5:ab:3e:a5:f5:12:fe:9c:
c6:6d:cd:0c:a7:25:bc:5b:8b:d9:da:93:15:5f:64:
cf:2c:12:41:93:63:10:0a:bc:df:9a:44:22:8f:45:
c2:86:67:f8:1f:de:75:36:12:8c:8a:85:6c:07:cc:
11:77:5b:f3:23:96:8e:4f:e9:6c:99:e4:ce:24:f9:
64:46:ee:60:73:a9:46:ce:a0:49:31:2f:d0:84:fc:
1b:da:fc:30:f6:10:1d:c7:b4:a3:ff:1c:4f:c7:24:
e3:b7:bc:ef:a7:4c:94:10:7e:b9:f4:40:54:85:0b:
8c:60:1a:8e:9c:a8:21:2b:03:3b:7e:61:08:a6:da:
92:7b:2b:b5:41:41:1b:82:8d:e6:64:d6:54:d2:1f:
9e:21:31:60:11:de:9d:ad:c5:26:06:6b:a5:b7:05:
e5:a4:6c:e0:a8:03:7e:c8:32:75:7c:a9:bf:17:46:
36:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:41:A2:0E:9D:6E:84:C6:0C:0B:2D:33:5C:02:1E:76:87:46:97:3E
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/44B745708D4211F0A748AEA4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.83.0/24
Signature Algorithm: sha256WithRSAEncryption
86:96:7a:1b:27:4a:a0:1b:56:31:f4:43:98:16:8f:a0:ce:94:
75:13:61:6a:ab:2c:0e:60:8d:4b:96:96:0a:2c:1c:7b:f3:c5:
22:e3:d6:44:2e:7e:ae:d6:e6:d3:94:65:72:a6:d2:f9:14:6d:
3c:57:1c:91:83:87:9c:8f:ff:2b:98:e2:6d:e1:c2:2c:1e:41:
35:c8:f6:60:72:71:66:23:9f:45:88:3b:e8:c8:1c:f6:ff:ff:
24:28:37:61:15:22:43:3b:5a:da:5a:6c:42:58:47:c0:3a:ad:
9a:ad:10:d0:ec:cd:84:1a:55:44:1a:99:29:0b:3b:d9:44:93:
89:ab:be:dc:56:ac:59:ac:6d:8c:ab:2a:30:cf:f6:8c:24:8c:
a7:24:86:b1:55:c4:07:11:f5:f1:2d:87:56:03:09:34:dd:96:
6c:44:63:41:cd:fe:3a:20:22:ab:ba:0b:32:57:60:0b:1d:76:
0f:e3:78:bd:d0:6a:fd:21:26:b2:31:f9:97:00:1e:0d:84:29:
68:43:44:b9:4c:f7:ba:99:ea:9a:87:7e:b4:9d:4a:73:77:db:
4b:5b:77:c9:53:3f:3b:ce:ef:15:30:19:07:45:e6:86:50:79:
83:eb:71:1c:90:58:ab:d3:a8:48:ac:00:4c:48:fe:a2:e6:05:
ed:f2:f1:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:46:46 2025 by rpki-client