Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/6BC575504B4911F0B3D6CBF2DAE4EC9C.roa
File: 6BC575504B4911F0B3D6CBF2DAE4EC9C.roa (raw, json)
Hash identifier: w/9e7WGc3AzJlUcKGqiM8Fn3tIoPKPdtTF6CoF0qd90=
Subject key identifier: 3C:4B:DF:A1:96:22:F3:C7:02:7B:4E:A0:33:69:12:39:7E:3D:0F:A0
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0B70
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/6BC575504B4911F0B3D6CBF2DAE4EC9C.roa
Signing time: Tue 17 Jun 2025 07:05:16 +0000
ROA not before: Tue 17 Jun 2025 07:05:11 +0000
ROA not after: Tue 16 Jun 2026 07:05:11 +0000
asID: 29802
IP address blocks: 102.135.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 01 Jul 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2928 (0xb70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Jun 17 07:05:11 2025 GMT
Not After : Jun 16 07:05:11 2026 GMT
Subject: CN=685113ac-8d65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d0:4d:fd:34:51:99:be:9e:ee:61:4a:cd:2d:
c4:80:af:d5:d1:c2:65:a4:fa:35:07:09:40:06:5f:
22:29:2f:42:b1:42:4e:57:f1:37:9f:cd:eb:95:72:
45:00:3e:e0:77:45:a9:6f:cd:a3:ab:ff:03:45:44:
d3:5e:89:b0:ff:f5:6f:1c:cb:6e:9b:a5:e0:d3:e7:
9e:f5:01:8f:be:0b:1f:c7:7a:56:22:90:a1:9b:ee:
fc:bb:f9:5e:d4:57:08:fb:cf:b9:74:3a:1c:17:47:
fe:a4:61:27:59:3b:96:bc:5d:e5:6b:c1:02:70:7d:
85:80:7a:7d:25:d4:79:f8:8f:39:cf:d8:96:4c:a1:
83:e7:79:90:be:77:90:af:74:88:66:f7:b3:84:45:
c1:97:c8:6a:f1:e8:fa:eb:77:43:0b:8c:10:90:d3:
f7:a0:73:0b:55:22:da:8d:95:4a:69:db:cb:f6:1d:
33:44:89:4b:e8:44:d1:b2:7a:cf:29:8a:d9:bb:a4:
2e:47:48:41:b3:96:f3:b4:aa:3d:20:64:73:1c:02:
45:84:66:22:8e:a1:69:d6:ea:ac:d5:4a:0f:13:d5:
7c:2d:10:ec:9e:0b:77:6f:c6:d9:1f:82:1a:d0:ea:
93:07:07:d7:26:80:ad:b1:c3:66:ea:3c:a0:aa:f9:
ad:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:4B:DF:A1:96:22:F3:C7:02:7B:4E:A0:33:69:12:39:7E:3D:0F:A0
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/6BC575504B4911F0B3D6CBF2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.73.0/24
Signature Algorithm: sha256WithRSAEncryption
67:b0:6d:3d:ab:99:1b:93:a6:af:3b:4f:b2:42:fe:3c:38:43:
68:4e:f8:ef:7c:db:8f:19:d7:00:22:07:3d:33:27:2c:e3:e6:
3d:d3:36:73:89:1e:69:94:32:8c:25:11:50:7a:72:cd:37:10:
26:6e:31:27:ee:be:c8:0a:6b:01:6d:7b:6d:5c:0a:29:b0:4c:
be:e8:56:0d:b9:60:c5:44:14:d3:36:ee:c1:15:a7:ea:8c:4b:
58:3b:b2:1b:21:b0:92:8b:e5:dd:2e:b4:9d:40:94:fd:ac:d9:
99:a0:d6:65:1e:af:7d:68:9c:23:de:5d:25:76:a9:ee:93:a6:
f6:63:30:cf:44:40:73:21:51:98:42:91:c4:67:cc:05:9d:92:
02:26:10:44:2c:86:a1:98:b1:f0:85:33:59:0b:20:80:ca:8e:
43:96:27:0b:bc:86:c1:08:44:a4:df:66:d1:bf:c5:93:a9:b0:
4b:7d:b6:f6:ae:06:10:d4:aa:5a:bc:a4:47:eb:2b:1f:1a:0c:
98:f1:c5:12:0a:89:5a:22:5f:00:2d:5e:f9:fe:66:db:7b:9d:
f2:3c:f0:9a:b2:02:9e:90:c3:4b:c4:77:7a:06:28:b6:c4:91:
c8:89:2b:18:1a:27:35:51:e7:91:86:a9:a1:cc:49:fc:29:e5:
4a:34:e0:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:22:35 2025 by rpki-client