Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/96F6868E8F9F11F08116AAAADAE4EC9C.roa
File: 96F6868E8F9F11F08116AAAADAE4EC9C.roa (raw, json)
Hash identifier: tbYB3IH39E5B2/YiMznGQZQcswz9yimlWgSezq+9W1w=
Subject key identifier: 13:27:50:AC:14:4A:58:4B:20:74:15:0F:3B:99:AC:8D:14:58:59:26
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0E47
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/96F6868E8F9F11F08116AAAADAE4EC9C.roa
Signing time: Fri 12 Sep 2025 06:13:25 +0000
ROA not before: Fri 12 Sep 2025 06:13:20 +0000
ROA not after: Fri 11 Sep 2026 06:13:20 +0000
asID: 208185
IP address blocks: 196.251.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 02:40:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3655 (0xe47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Sep 12 06:13:20 2025 GMT
Not After : Sep 11 06:13:20 2026 GMT
Subject: CN=68c3ba05-af0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:73:ae:0e:c4:c6:fc:9e:38:26:49:4c:b9:6c:
b3:68:4e:e4:67:a8:96:8c:34:e0:f2:50:06:b0:2d:
58:9b:ba:94:bb:5f:86:d2:d8:6c:b9:da:53:5a:f8:
36:4a:0c:53:a4:0d:3f:0d:e5:34:f7:b5:d4:98:7b:
55:91:a8:c9:ec:4a:dc:39:b2:57:bb:01:30:f7:33:
5d:c5:c4:b5:21:bb:f1:ac:20:10:26:99:eb:a0:6c:
eb:a2:4e:f3:c6:9c:1b:52:ab:c3:71:9d:39:9f:20:
f2:30:42:3b:ce:be:8f:aa:aa:fb:d5:df:d8:a2:29:
e4:c4:14:04:77:c8:c7:3f:05:67:d3:40:22:36:fb:
a4:63:65:ea:38:ed:9b:3a:2e:a6:39:be:64:ff:b8:
23:8b:5f:7a:bc:50:f4:3b:d3:6e:f4:2b:47:41:fb:
8d:0b:a9:4d:ba:93:1d:df:75:8c:9e:38:d3:72:27:
b6:14:78:c1:16:65:0a:8c:fe:f1:27:78:22:5c:16:
9f:6e:42:59:13:41:e0:9d:ce:02:df:ed:49:73:45:
80:2d:e8:40:4d:ac:75:a6:5a:b3:fa:6a:63:3b:a2:
a9:48:db:32:79:02:da:a6:3d:8b:12:f6:6b:56:3e:
85:4d:89:d9:a0:5d:34:58:c1:23:06:d9:9b:40:ef:
21:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:27:50:AC:14:4A:58:4B:20:74:15:0F:3B:99:AC:8D:14:58:59:26
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/96F6868E8F9F11F08116AAAADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.123.0/24
Signature Algorithm: sha256WithRSAEncryption
25:10:8a:09:72:1b:d2:f2:cf:52:5e:17:2c:5c:01:32:99:eb:
20:e0:05:65:e5:c8:d0:68:eb:11:66:65:dc:0d:a0:4c:40:d6:
d4:89:2d:e7:e7:cd:ae:9c:cf:34:72:f0:b7:9c:d9:f8:6c:0c:
56:5b:25:11:d8:82:da:50:de:64:98:16:99:78:d6:4a:01:43:
05:05:99:07:26:f2:ec:d5:ef:67:dc:0b:e9:c6:27:75:8b:dc:
37:54:de:0e:fe:0f:0f:c5:11:11:da:35:9d:ce:bd:65:55:bf:
cb:9f:05:a4:ae:d6:a9:b9:86:cf:07:60:b0:34:a9:50:3b:7e:
ee:e4:cc:bd:15:54:4e:f0:ca:01:be:79:f6:c5:fb:6d:be:74:
ca:8d:5e:ab:61:d9:46:72:d4:87:ba:73:46:4e:53:0f:0d:50:
55:53:38:69:65:cf:49:74:59:4f:ff:c4:2f:33:a2:46:eb:66:
01:cc:2e:fc:29:ad:03:04:0d:2b:50:9f:55:ef:bd:44:b9:22:
d8:2a:6a:68:87:32:4b:55:5f:5b:f0:93:7d:50:cb:ab:23:b5:
05:d9:45:71:ba:e4:04:e0:11:fd:d1:7f:f9:37:aa:b6:fd:6b:
38:e1:87:5c:6b:38:48:8c:4c:fe:b2:28:f4:2f:f7:b9:4e:89:
3b:22:76:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:42:51 2025 by rpki-client