Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/974031B04B4A11F0AE671E7BDAE4EC9C.roa
File: 974031B04B4A11F0AE671E7BDAE4EC9C.roa (raw, json)
Hash identifier: 7By/ZfMuKgVjJ0rqMsVuecSGmrhofyDg/FOEP3m3rdA=
Subject key identifier: E8:B4:C3:0F:82:CA:CA:B1:F7:09:BC:83:BC:C3:3B:AF:15:CC:54:E3
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0B84
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/974031B04B4A11F0AE671E7BDAE4EC9C.roa
Signing time: Tue 17 Jun 2025 07:13:40 +0000
ROA not before: Tue 17 Jun 2025 07:13:33 +0000
ROA not after: Tue 16 Jun 2026 07:13:33 +0000
asID: 29802
IP address blocks: 102.135.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 01 Jul 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2948 (0xb84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Jun 17 07:13:33 2025 GMT
Not After : Jun 16 07:13:33 2026 GMT
Subject: CN=685115a4-b03b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3e:6a:5e:bb:f3:b6:aa:d4:33:fd:67:42:98:
75:d0:f5:96:1e:c0:be:0c:bb:72:6d:59:cd:6e:24:
97:5a:ff:f1:b2:8e:52:a6:ba:17:93:82:14:d1:24:
7d:8b:a3:76:81:4e:25:79:33:62:a6:d7:ee:88:a9:
71:f9:5c:18:bb:f1:bc:aa:65:9a:bd:10:48:17:2e:
53:3a:9a:60:cb:2b:c0:3d:3f:e1:f7:36:bd:55:7d:
05:c9:2b:31:85:1e:13:01:79:43:b0:8a:43:2c:7d:
71:81:0e:d1:08:79:f1:48:23:a1:49:61:55:15:01:
43:17:7f:5a:ec:6b:04:33:73:df:d0:0d:9e:dc:52:
fd:af:87:34:e4:f4:ec:22:17:f1:d5:4f:98:72:2c:
5d:51:e1:7e:0e:30:8f:43:48:ea:9b:b6:d4:e0:ce:
e3:5d:61:28:87:fa:c5:d8:8a:22:f0:3d:07:51:5c:
cd:97:df:3d:dd:4e:08:73:46:ca:33:57:a0:92:2d:
1c:5f:ff:d6:97:bd:1f:41:65:63:13:b4:11:a4:cb:
fa:9b:3d:79:d3:79:b3:2d:d0:96:f9:34:b7:7d:e0:
d5:74:b0:22:04:84:04:5d:84:f1:da:6f:b0:91:6e:
2d:4b:b2:49:37:b7:19:06:ce:56:88:fb:66:d7:3a:
e7:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:B4:C3:0F:82:CA:CA:B1:F7:09:BC:83:BC:C3:3B:AF:15:CC:54:E3
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/974031B04B4A11F0AE671E7BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.95.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:cb:47:f4:74:26:35:5f:cc:ae:d9:5c:ab:fb:aa:2f:43:e1:
a5:60:0f:c4:59:b5:9a:70:7e:92:3d:43:7e:8a:ef:49:8a:89:
49:9e:ff:71:09:9f:65:0b:c9:50:8e:1a:ea:9f:47:16:44:67:
84:56:08:64:ab:60:3e:01:54:0a:20:d7:ef:bb:c2:65:03:b9:
21:f5:af:bd:34:0e:0b:a7:30:20:46:06:70:ac:0d:ba:a2:4c:
f9:09:75:96:06:58:48:82:79:bf:b9:87:fb:c5:28:b1:8c:77:
67:a4:4e:4b:71:91:45:55:46:99:c3:4b:b1:fe:ed:7f:be:f0:
28:d6:e8:62:01:32:9b:b8:eb:43:50:07:ed:2d:b6:e2:86:9f:
9b:40:47:c9:9d:26:ae:35:a1:0e:cf:91:6b:b5:b4:d7:5b:6b:
ca:55:24:73:8f:a4:33:35:17:73:25:54:06:56:55:0f:8e:c7:
9a:ba:0f:56:88:e3:87:53:bd:f3:99:82:f7:40:04:b6:75:1f:
f9:30:04:b5:e3:19:ec:ad:2b:df:d2:b6:9c:15:46:ac:41:f3:
3a:53:22:26:3c:eb:a7:e8:52:35:31:72:99:39:2d:32:8e:0d:
24:dd:26:68:6a:e1:b9:42:6e:de:a7:50:be:61:ca:a4:99:f6:
a6:38:52:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:28:38 2025 by rpki-client