Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/604CE8B07D9511F084FDEBF0DAE4EC9C.roa
File: 604CE8B07D9511F084FDEBF0DAE4EC9C.roa (raw, json)
Hash identifier: m8qFwjzO5c3/rO9haR5VS+rMcrW6LoOlCtjuHYhQPfQ=
Subject key identifier: 21:61:50:7F:33:E4:AE:A8:99:83:BE:24:F9:41:6B:0D:7F:A1:5C:26
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0D0D
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/604CE8B07D9511F084FDEBF0DAE4EC9C.roa
Signing time: Wed 20 Aug 2025 07:14:57 +0000
ROA not before: Wed 20 Aug 2025 07:14:52 +0000
ROA not after: Thu 20 Aug 2026 07:14:52 +0000
asID: 398704
IP address blocks: 196.251.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3341 (0xd0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Aug 20 07:14:52 2025 GMT
Not After : Aug 20 07:14:52 2026 GMT
Subject: CN=68a575f1-17a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:9b:ff:e0:6d:44:a6:60:61:6f:3e:85:f4:f2:
09:51:af:a8:fb:e7:34:60:42:49:d2:a2:f1:7f:75:
b9:a2:e8:4a:b3:26:c9:ba:15:a3:84:a0:b6:c8:d3:
b9:9e:d3:1e:2b:e3:92:1a:02:22:71:27:35:59:17:
a6:29:b3:07:74:31:a1:c3:72:48:74:34:b6:e0:4a:
67:74:70:d8:05:62:78:1c:d6:17:be:a4:30:9e:86:
3d:5c:c9:b2:97:8c:08:1e:da:ef:83:a7:37:00:17:
d1:ff:31:9e:c4:a8:e4:be:07:5d:14:ee:d7:67:14:
cb:0a:04:4a:99:ba:55:f1:ab:5b:01:21:42:6c:ef:
31:34:ae:27:11:ed:9b:96:5e:e8:e6:54:38:48:50:
2e:79:98:30:5c:64:55:76:0d:eb:01:f5:c6:16:6c:
ba:77:0c:d6:ef:0d:dd:95:f3:ee:e8:f6:96:84:5a:
2c:f7:88:fd:1b:ea:8d:c8:64:52:1a:ec:7d:a4:45:
82:2d:d7:13:11:66:0e:91:9f:92:f6:da:75:89:7d:
a2:b3:d5:3e:67:6e:f7:c1:1c:58:80:65:94:df:b7:
4c:e8:ed:91:06:75:5b:04:df:87:58:46:e2:35:83:
08:9b:93:57:1c:f5:01:52:a5:0e:59:10:49:de:54:
c8:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:61:50:7F:33:E4:AE:A8:99:83:BE:24:F9:41:6B:0D:7F:A1:5C:26
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/604CE8B07D9511F084FDEBF0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.120.0/24
Signature Algorithm: sha256WithRSAEncryption
94:b0:74:08:2e:d4:b1:c8:84:ee:ce:a0:50:c9:20:e9:5d:3d:
d9:68:b3:2c:69:0f:ad:61:9c:0a:15:fe:1b:1e:46:36:c1:c8:
07:5a:d0:30:53:47:3f:d8:74:6f:38:a2:be:11:6a:62:13:5c:
04:38:67:05:1d:19:72:d6:47:cb:98:cd:88:d0:50:b5:36:db:
e5:57:78:9d:64:65:61:6c:55:2f:c9:2c:95:dc:33:01:13:3e:
40:06:0b:93:14:01:5f:66:4b:43:8a:14:12:2c:33:7d:23:36:
d8:12:4a:35:29:8b:5e:bf:91:87:d6:76:02:18:d8:31:e4:6e:
ad:c1:18:e0:b7:d7:db:f7:cf:9f:5f:0b:2f:c8:0f:f3:30:e0:
97:ce:7b:ae:48:93:13:b3:e1:38:6a:5f:84:7a:13:57:43:ff:
13:25:8c:b8:fe:da:09:28:27:64:de:31:bd:bb:13:d2:43:89:
6f:2c:80:6a:65:ef:1f:20:b5:82:9b:08:77:9e:dc:b2:76:b1:
36:54:f7:16:d5:85:59:9b:ff:9b:41:5f:0f:a6:d4:db:58:6d:
cd:de:e1:78:8e:82:1c:7e:38:da:cd:77:5a:3b:35:0a:e2:b3:
ea:d9:b3:02:32:b7:8b:56:82:2d:80:54:de:ed:80:bc:f1:87:
69:90:e5:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:11:10 2025 by rpki-client