Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/8D6A166EAA8211F0972DE791DAE4EC9C.roa
File: 8D6A166EAA8211F0972DE791DAE4EC9C.roa (raw, json)
Hash identifier: rfryIXjQ7IIheG/Mb2Zq1Tz+AVpO90z8dxPjMMXl/Z4=
Subject key identifier: 21:C0:8D:46:8F:30:F3:34:68:A5:9B:5C:EC:AA:E4:3E:A2:42:BC:C6
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0EEB
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/8D6A166EAA8211F0972DE791DAE4EC9C.roa
Signing time: Thu 16 Oct 2025 11:23:35 +0000
ROA not before: Thu 16 Oct 2025 11:23:30 +0000
ROA not after: Fri 16 Oct 2026 11:23:30 +0000
asID: 208185
IP address blocks: 102.135.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3819 (0xeeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Oct 16 11:23:30 2025 GMT
Not After : Oct 16 11:23:30 2026 GMT
Subject: CN=68f0d5b7-d599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6a:7e:54:cc:4f:7d:c5:b2:65:d4:1e:b8:fd:
22:09:77:f2:7b:44:e0:91:9f:a2:91:9c:5c:db:3b:
b7:75:a8:1a:7c:a6:27:4c:e1:af:03:3b:1f:e2:df:
86:66:c0:b9:d8:3e:95:8c:fc:d2:5e:05:fc:64:c2:
0a:56:66:df:06:47:7f:71:92:b3:ca:7f:1c:92:64:
ed:87:b6:3c:6b:f2:04:ac:29:09:7e:15:be:67:73:
72:ce:cd:61:df:f5:f3:4f:29:1d:2f:95:92:c5:66:
a4:77:36:ac:24:db:e4:f8:4e:1e:a4:a5:c0:97:00:
ed:59:3d:ce:5c:74:68:d4:0b:23:20:8e:77:1e:32:
5f:24:a2:69:23:fa:4e:b3:db:24:41:c5:4d:49:ef:
4d:2a:a6:a6:99:f3:17:c9:7c:1a:d6:ac:5f:0a:33:
60:4d:92:c1:df:7d:29:06:00:35:e0:8a:62:97:ec:
b7:d0:fe:57:1c:d5:01:7d:22:50:df:d8:a9:55:a7:
0d:c5:04:e4:af:03:68:ed:c8:b4:f7:f0:08:18:75:
b4:c2:13:66:93:4a:4d:27:22:fd:8d:31:a0:68:85:
a0:07:35:16:30:63:07:9e:55:3d:b1:26:55:ff:0e:
30:24:cd:7a:14:de:ad:b9:1b:99:2d:4e:7d:18:0e:
83:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:C0:8D:46:8F:30:F3:34:68:A5:9B:5C:EC:AA:E4:3E:A2:42:BC:C6
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/8D6A166EAA8211F0972DE791DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.113.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:01:27:ea:3a:f2:d7:33:9c:96:0c:3e:c6:f5:1d:3f:5e:43:
35:55:95:23:84:4e:fc:76:c3:12:4e:19:ce:07:1d:4e:ce:68:
83:5f:6b:b1:ba:ba:b5:53:01:3c:72:01:9c:19:f9:4c:36:3a:
b1:96:3f:02:49:57:9c:27:7a:f9:84:98:c1:47:f0:b9:52:4d:
c7:23:90:8b:36:96:54:5b:45:36:8b:e4:13:58:76:8e:a5:15:
86:cc:d5:81:bb:2a:1a:31:2b:48:ce:13:95:ac:e3:8c:55:95:
3d:b5:d7:5e:b4:b5:d2:d1:55:dd:3b:79:b6:5c:8c:77:ba:ae:
56:cd:5b:cc:4e:d6:bc:f7:01:f8:1a:3c:45:9b:58:d2:63:94:
82:79:2e:06:43:c9:64:2b:ff:9f:87:b0:11:9a:aa:bf:61:9f:
2a:48:97:a8:82:30:12:a7:8b:0a:52:ba:3f:1a:0a:6b:10:71:
0a:33:1e:67:40:10:c6:7b:24:16:89:74:d1:ca:08:32:a1:2b:
2a:11:f9:ec:6b:aa:61:5e:2d:a0:da:70:1e:fe:16:72:9d:e9:
f8:ca:3b:ab:c1:25:41:c8:2b:c3:5a:4b:0b:1a:26:29:58:4c:
0b:7b:1a:c4:db:78:77:0a:e9:24:d1:38:f4:76:92:63:6b:58:
b2:99:60:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:30:05 2025 by rpki-client