Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/805BF2388F9F11F080E984AADAE4EC9C.roa
File: 805BF2388F9F11F080E984AADAE4EC9C.roa (raw, json)
Hash identifier: rr/0S1ITkBV4NorMwdAYC9Z6blEBivE7TV932lhDrVI=
Subject key identifier: A3:2D:51:AA:0E:1A:56:8B:E2:6F:65:A2:16:72:B6:09:99:E5:4D:86
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0E45
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/805BF2388F9F11F080E984AADAE4EC9C.roa
Signing time: Fri 12 Sep 2025 06:12:47 +0000
ROA not before: Fri 12 Sep 2025 06:12:42 +0000
ROA not after: Fri 11 Sep 2026 06:12:42 +0000
asID: 208185
IP address blocks: 196.251.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3653 (0xe45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Sep 12 06:12:42 2025 GMT
Not After : Sep 11 06:12:42 2026 GMT
Subject: CN=68c3b9df-9fe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f5:29:36:c5:fd:d8:d1:58:30:c7:bf:48:18:
90:1d:37:96:df:8a:a7:bc:18:8c:ed:84:f5:5b:2e:
1b:01:f9:94:ee:34:72:07:54:2d:30:40:de:89:14:
30:0b:69:77:a7:5c:a3:1f:17:e5:c8:a6:29:cc:75:
de:52:c2:2d:a5:7a:12:a2:a2:3f:bf:b7:29:05:7d:
11:de:2b:de:ca:91:79:0b:2e:a1:3c:05:cf:34:64:
78:d1:95:3c:67:8d:07:b3:07:e3:9d:d2:44:13:47:
c8:fb:04:96:1e:78:ae:81:81:8f:0e:4a:7a:02:5f:
86:b2:3f:a4:fa:6e:09:ff:36:67:4b:98:52:f3:19:
5c:8b:7c:1f:ec:4c:21:4b:33:34:cb:68:30:b8:cd:
1b:51:e2:82:9b:bf:95:74:96:f4:d8:01:85:b8:69:
fa:c7:b9:2e:ec:48:37:7c:f4:3f:72:cb:7f:dc:9f:
62:17:f0:30:0a:4b:45:9a:d7:8a:62:4f:45:28:f6:
2e:c6:b3:ac:01:60:2b:fe:e4:a4:8b:62:fc:ed:a0:
61:cc:32:04:32:87:73:7f:0a:fe:d4:13:e8:d4:0a:
2e:be:ae:49:ae:34:df:7d:1b:23:92:92:d4:80:3c:
7d:ab:b5:5a:f2:80:26:f9:31:83:53:ef:c8:50:4e:
f4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:2D:51:AA:0E:1A:56:8B:E2:6F:65:A2:16:72:B6:09:99:E5:4D:86
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/805BF2388F9F11F080E984AADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.122.0/24
Signature Algorithm: sha256WithRSAEncryption
14:dc:22:d0:e2:7b:26:89:e9:44:be:de:79:1d:cc:b4:27:2e:
54:9e:cd:4d:2d:bc:6f:12:ba:5e:3e:d8:79:2b:98:73:50:fa:
fb:fe:1b:bd:16:da:89:b9:48:70:db:79:f1:ff:f4:83:19:b9:
9f:74:5e:61:a8:da:b1:28:e7:b1:00:07:59:13:d5:5e:b4:05:
30:b7:d9:cd:b5:28:c3:34:91:1b:3e:ad:c1:ee:c9:2e:cf:26:
5f:d9:11:23:1e:4d:db:11:80:38:cf:25:e9:00:fe:b8:79:2e:
f5:54:7a:a6:45:d3:14:05:01:d4:3b:fc:99:ce:65:46:62:5d:
6c:8a:a0:69:bb:eb:b2:ff:ee:04:39:34:e4:2c:ed:12:8d:bc:
19:35:b1:06:52:59:05:a0:9a:18:86:56:f7:9a:32:b0:97:28:
2e:ea:c1:83:84:da:3c:8a:76:b1:c8:cc:56:54:54:e9:b5:63:
3c:14:0b:3b:b9:69:14:6a:8e:e9:d8:bd:a2:d4:e6:61:24:2f:
07:55:29:1e:de:e2:12:fd:3e:25:a6:87:53:cc:bb:af:76:b1:
95:82:8a:d0:a8:b7:04:02:39:f9:55:1e:a5:97:aa:53:73:22:
d7:6a:4a:aa:5b:4d:1f:a8:d4:79:a0:d3:88:6f:cf:1c:5f:3c:
43:0c:07:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:25:19 2025 by rpki-client