Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/6CA49DE4A6AB11F0BFE290EFDAE4EC9C.roa
File: 6CA49DE4A6AB11F0BFE290EFDAE4EC9C.roa (raw, json)
Hash identifier: njEhtPHA46h6ak55K5ryquUA4MBQbvSxlGqmL/qjyOw=
Subject key identifier: 01:4D:CB:D7:C0:AC:15:9C:A9:07:E9:16:C8:42:3C:11:E6:5D:D5:81
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0ED6
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/6CA49DE4A6AB11F0BFE290EFDAE4EC9C.roa
Signing time: Sat 11 Oct 2025 14:06:04 +0000
ROA not before: Sat 11 Oct 2025 14:06:00 +0000
ROA not after: Sun 11 Oct 2026 14:06:00 +0000
asID: 205886
IP address blocks: 102.135.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3798 (0xed6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Oct 11 14:06:00 2025 GMT
Not After : Oct 11 14:06:00 2026 GMT
Subject: CN=68ea644c-2394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a7:f0:98:e9:6e:36:37:14:58:f8:c9:59:d1:
2a:36:96:eb:70:be:81:1d:9c:a1:32:4a:85:93:f5:
5c:34:6b:05:60:fb:89:c6:3d:17:46:3a:3f:93:2b:
1f:12:11:31:23:b9:1e:2e:85:e4:f7:9b:38:18:fa:
48:bf:72:bf:f2:db:a2:7f:67:e5:a0:86:c6:eb:1f:
0d:56:cf:3b:bf:74:5c:d5:d0:08:5b:49:75:dd:9d:
4f:01:e3:e9:f4:e6:b9:79:63:20:ad:4d:72:e7:49:
00:08:60:17:51:4d:3e:b2:18:a2:a5:f9:10:f0:f0:
28:12:19:6b:f6:3e:0e:a5:b8:bd:fc:86:48:23:97:
6b:f7:69:a2:f2:68:9d:e5:8a:24:91:8a:4e:4a:37:
21:a7:ee:01:0d:85:72:38:b3:8f:b7:fc:88:d0:fa:
0f:f4:95:5d:15:5d:bd:88:07:08:42:6d:83:14:f6:
ca:23:28:f3:61:ef:52:12:b3:15:83:15:9c:f1:1b:
e6:dc:2c:0b:d3:bd:7f:60:e9:ad:1e:41:ca:98:78:
17:81:2c:f4:27:c7:60:26:a9:b5:4d:03:53:40:61:
26:c4:e0:11:de:7c:75:48:03:17:b9:20:5e:64:35:
16:56:48:58:7b:f7:b6:ba:09:f7:31:be:e9:83:d5:
ce:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:4D:CB:D7:C0:AC:15:9C:A9:07:E9:16:C8:42:3C:11:E6:5D:D5:81
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/6CA49DE4A6AB11F0BFE290EFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.100.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:9a:0b:30:c0:12:d2:47:c6:84:22:02:fd:28:6e:93:15:4b:
c0:08:2f:fa:d5:a3:52:bc:4e:a3:f5:16:35:0a:2a:22:4e:85:
68:75:98:db:32:9a:ad:4e:83:dc:c2:11:bf:b4:50:0e:fb:d2:
38:f2:11:81:8e:86:e5:0c:d7:7a:e8:09:2a:b7:02:eb:f4:ca:
45:15:da:f9:50:4f:da:6b:99:75:05:dd:dc:25:37:d2:f6:cc:
8f:a2:79:61:5b:1c:30:49:ab:c2:dd:8e:80:e2:4d:9e:76:1c:
aa:b8:dc:fd:77:31:9a:f2:4c:23:31:f7:4a:9f:77:b2:a6:c1:
5c:f1:4f:81:69:a8:38:a5:2c:d3:8d:40:41:4e:ae:de:6b:33:
7e:b5:e6:35:0c:1b:35:27:d5:67:5f:87:a7:26:50:54:01:03:
87:50:c5:7f:a8:4e:0d:b8:2f:08:52:a4:30:78:43:c5:1c:1e:
ad:70:70:da:cf:ea:03:c7:fd:d1:25:30:fb:66:2e:e9:e6:e4:
d9:b6:4f:9b:5d:ac:45:61:b5:47:6f:04:e3:25:f5:fa:6c:92:
68:6a:8c:dd:25:16:e3:cd:b0:bf:61:2c:9c:e8:c9:43:23:43:
ed:85:d7:7a:6b:b5:c8:ec:e2:2b:b1:10:9d:1c:94:bf:51:2d:
e9:df:64:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:30:30 2025 by rpki-client