Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/86BF0BB44B4911F082CDFBF2DAE4EC9C.roa
File: 86BF0BB44B4911F082CDFBF2DAE4EC9C.roa (raw, json)
Hash identifier: Mplxkm66voPl3Ai9ym0tJkMzYxw4O5NwFApUnbeTomg=
Subject key identifier: 09:11:05:39:7F:5C:58:90:15:46:49:1C:24:2A:47:C6:67:3E:0B:3E
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0B72
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/86BF0BB44B4911F082CDFBF2DAE4EC9C.roa
Signing time: Tue 17 Jun 2025 07:06:02 +0000
ROA not before: Tue 17 Jun 2025 07:05:56 +0000
ROA not after: Tue 16 Jun 2026 07:05:56 +0000
asID: 29802
IP address blocks: 102.135.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 01 Jul 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2930 (0xb72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Jun 17 07:05:56 2025 GMT
Not After : Jun 16 07:05:56 2026 GMT
Subject: CN=685113da-dfdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ab:fa:c4:9b:89:fd:80:8f:fe:34:19:31:8d:
be:98:2e:ac:07:c4:82:9d:7e:65:a0:dc:b4:62:93:
ea:63:0e:4a:63:a2:9c:cb:e6:43:8f:c3:1c:38:c3:
aa:60:9a:6f:17:7e:a5:3f:9f:3b:5d:4c:48:fb:e6:
5c:18:fb:cf:bf:fe:cf:4d:8f:17:e8:43:5c:72:f5:
44:7e:35:f0:31:2d:3e:1d:95:58:d7:50:fc:cb:6d:
89:fe:b6:e3:83:fd:a3:e3:fe:0a:01:85:49:29:6d:
55:ed:f5:e9:79:0c:d3:3b:b8:a7:8d:81:4c:73:7f:
c3:49:78:79:b0:9a:cb:c5:20:bd:90:87:df:d4:55:
8b:ab:13:9e:35:ce:0b:62:74:eb:6a:04:0a:66:b9:
f2:9e:cb:54:9f:6a:13:4d:6d:18:55:cf:73:ca:ff:
40:00:bb:97:b9:3a:52:89:9b:c0:d8:ce:df:e5:0c:
a5:75:37:aa:ec:65:cf:a5:30:7b:0f:63:8a:cf:ad:
8d:75:a3:2e:60:2e:b6:47:b8:63:c8:15:54:45:8c:
d7:d1:3f:20:b0:70:60:d2:74:dc:3d:08:61:d0:cc:
41:e8:7c:d4:98:02:30:f6:d6:70:29:a7:18:7c:2d:
40:be:03:27:86:ce:76:ea:74:0a:68:6d:28:c6:23:
b1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:11:05:39:7F:5C:58:90:15:46:49:1C:24:2A:47:C6:67:3E:0B:3E
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/86BF0BB44B4911F082CDFBF2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.75.0/24
Signature Algorithm: sha256WithRSAEncryption
79:07:ff:7b:11:38:83:3c:4f:58:cd:ac:e8:24:d9:45:28:41:
19:8d:9e:c2:f8:ca:73:68:e7:9d:7b:f7:c7:fa:c9:d5:7b:43:
d3:9c:0f:c4:ed:d2:01:54:58:10:62:69:78:7a:34:cb:e9:92:
96:28:63:c9:6b:a4:c5:08:1f:b5:7d:99:53:f7:87:de:b7:68:
2c:85:10:96:e4:b5:57:30:cf:8a:96:84:88:95:2d:54:6f:19:
20:74:81:48:ae:4f:84:41:f3:54:ff:f9:15:80:df:34:9b:4d:
17:37:8d:44:5a:8d:bf:3b:2e:25:6b:c7:c8:5d:83:80:6b:fe:
65:2f:fd:41:06:77:ac:6e:4c:ec:71:7f:e9:0d:8e:10:4c:ed:
8f:40:15:f4:1a:99:ce:2b:7c:98:70:21:dd:5f:ac:f0:bc:e0:
9d:42:33:3c:8b:5e:fb:5a:dd:8d:6a:bf:d5:29:c4:9b:9a:21:
0b:7c:04:fd:a9:09:ae:6e:b0:46:63:02:94:ea:21:16:50:94:
53:04:d6:e4:9b:ca:6b:b8:94:07:64:1e:a0:dc:9c:4c:30:08:
ee:2d:37:78:a1:6a:9a:75:c9:a5:69:4f:c4:ab:29:67:1d:0a:
aa:2b:9b:4d:eb:68:ca:e0:06:fb:f1:b8:ad:2d:5f:1f:3a:bd:
59:0b:02:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:45:44 2025 by rpki-client