Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/4E36D360AA8211F0B3BABE91DAE4EC9C.roa
File: 4E36D360AA8211F0B3BABE91DAE4EC9C.roa (raw, json)
Hash identifier: htqITGISJ6KoUjjyXyaP7jMhf5RSxfAorsfIWm/gNt8=
Subject key identifier: 21:4A:82:04:7D:E6:52:66:2A:CB:CD:4B:4B:49:E9:FB:D6:36:4D:53
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0EE3
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/4E36D360AA8211F0B3BABE91DAE4EC9C.roa
Signing time: Thu 16 Oct 2025 11:21:49 +0000
ROA not before: Thu 16 Oct 2025 11:21:44 +0000
ROA not after: Fri 16 Oct 2026 11:21:44 +0000
asID: 208185
IP address blocks: 102.135.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3811 (0xee3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Oct 16 11:21:44 2025 GMT
Not After : Oct 16 11:21:44 2026 GMT
Subject: CN=68f0d54c-9610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:33:75:d3:35:eb:71:13:9c:66:41:11:01:56:
fe:50:15:39:e4:48:35:6e:f4:5c:27:b5:97:8c:07:
66:aa:26:8b:fa:9f:40:6e:b2:82:ef:c9:bd:82:0f:
85:4c:ca:42:6e:8b:f8:46:c6:11:21:c7:cb:12:a5:
b5:22:01:d6:05:68:e1:ad:0f:4f:6b:b9:32:7f:87:
c1:7b:33:74:2e:4f:a1:11:1c:33:e5:49:d7:99:bc:
99:33:fc:25:39:59:7b:1e:c2:2f:1a:91:5a:84:78:
38:c7:4c:41:7a:7a:86:0e:7d:dc:4f:bb:35:00:ed:
51:e9:68:d7:e5:5c:1d:46:cd:ec:12:43:ba:e6:6c:
f8:c6:44:cc:76:95:ef:c2:de:ce:06:c4:91:cc:45:
71:ff:a5:bc:c1:78:b3:3a:a6:05:be:75:79:2f:ef:
22:35:4e:33:94:7f:aa:f8:24:a4:c2:e3:2e:95:6e:
78:fc:16:4c:55:3b:11:53:da:78:04:84:a4:6c:a9:
dd:d5:8e:0c:6b:73:26:68:ef:0a:dd:31:8d:6b:5d:
e3:26:32:7e:15:4e:42:f4:1a:03:fb:f6:41:13:7f:
0c:e9:89:e6:6a:a7:fc:2e:66:c3:85:60:90:71:11:
70:31:f0:f4:a0:59:04:ff:21:59:3f:e4:d3:66:b0:
b5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:4A:82:04:7D:E6:52:66:2A:CB:CD:4B:4B:49:E9:FB:D6:36:4D:53
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/4E36D360AA8211F0B3BABE91DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.49.0/24
Signature Algorithm: sha256WithRSAEncryption
67:66:df:e9:8c:ec:33:2c:7a:33:30:57:c6:66:dc:a6:e0:e6:
c6:ea:09:8e:69:70:11:0c:ae:d8:14:92:55:f2:3a:c2:70:a6:
8a:9f:23:ef:30:b5:11:07:26:80:70:38:42:50:1e:02:d1:9e:
1a:95:17:4f:ac:09:92:62:0d:8d:56:54:81:c2:f6:c6:66:dd:
3c:70:5e:26:d1:e3:00:5d:1b:c1:7b:74:c1:32:2f:c2:87:85:
4d:12:6d:4f:47:9b:9c:dd:e1:87:15:fd:66:db:7a:f5:d6:2f:
87:02:16:0d:fc:39:f1:5c:2d:cd:db:ac:84:4a:bf:a9:88:ae:
a1:a4:60:2c:59:93:ae:13:be:f5:dd:4d:57:89:51:6b:f2:b9:
46:37:82:91:f3:df:93:5d:1a:05:95:c6:da:d8:f7:bf:98:ba:
91:3b:32:4e:2a:fe:22:60:02:83:b4:fc:fc:1f:c7:c2:27:a7:
f8:06:11:71:3a:1f:2a:d6:1a:52:0a:02:ab:3b:79:e3:37:38:
1d:0d:47:89:c5:d2:ff:4f:04:04:d0:a2:1f:d2:1e:5a:8b:09:
7c:50:2d:1a:fa:4a:22:57:b4:7a:7b:a5:d0:cf:e0:e2:08:10:
c9:3d:26:d4:07:d1:6e:92:fc:88:82:cc:ad:b0:e3:91:bd:84:
9c:56:3c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:30:04 2025 by rpki-client