Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/A51CA06AAA8211F0B92A0A92DAE4EC9C.roa
File: A51CA06AAA8211F0B92A0A92DAE4EC9C.roa (raw, json)
Hash identifier: 2iOV2k8tp7NRGYa9S82wY7XvaHHtUoK/LYCKAEoS+jc=
Subject key identifier: 7F:EA:F6:38:E2:AE:BA:BD:D6:78:A6:C7:DD:F5:A9:BE:B6:8B:80:54
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0EED
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/A51CA06AAA8211F0B92A0A92DAE4EC9C.roa
Signing time: Thu 16 Oct 2025 11:24:14 +0000
ROA not before: Thu 16 Oct 2025 11:24:10 +0000
ROA not after: Fri 16 Oct 2026 11:24:10 +0000
asID: 208185
IP address blocks: 102.135.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3821 (0xeed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Oct 16 11:24:10 2025 GMT
Not After : Oct 16 11:24:10 2026 GMT
Subject: CN=68f0d5de-bdd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:74:85:d2:9a:15:3c:83:98:98:20:8a:8c:c1:
80:00:85:bb:e7:a1:d7:fa:c9:b5:b6:fb:78:d7:c8:
ac:39:8f:e5:19:72:06:79:c0:b4:8f:45:3d:92:80:
75:44:e8:04:4d:a9:33:60:90:d9:3b:c1:88:6a:64:
67:5c:63:be:b8:45:60:f7:06:ba:6f:19:99:58:e3:
4e:b7:bb:c4:43:60:8a:fc:a3:25:c4:64:4f:aa:9f:
bc:0f:4a:7d:5e:82:83:af:53:f7:de:ec:c9:fc:e0:
59:8c:ba:3c:7a:f4:ca:e6:a3:54:f2:e7:85:6b:ce:
2c:d9:74:c8:71:1e:73:35:f8:b6:64:a2:8e:52:a3:
07:75:fd:b7:ef:f4:af:46:57:0c:67:6f:b1:92:c7:
bc:ff:71:4b:20:07:5d:08:5d:8c:1c:b9:7e:a2:be:
ef:66:c6:9e:5d:f3:ac:f5:58:7a:80:02:01:39:67:
4a:fc:85:8c:e4:9f:74:65:ad:45:60:37:e2:3c:6c:
7c:4e:2f:90:67:d4:fa:f5:d6:86:a8:dd:44:b7:94:
22:65:5a:75:5b:76:5d:c7:c9:b4:6f:fb:39:5a:5f:
9c:2d:09:74:72:77:4b:b4:52:41:21:ef:d9:4f:da:
ce:64:6b:4a:2b:1b:83:a9:0a:3f:e9:e6:eb:26:c7:
0a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:EA:F6:38:E2:AE:BA:BD:D6:78:A6:C7:DD:F5:A9:BE:B6:8B:80:54
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/A51CA06AAA8211F0B92A0A92DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.2.0/24
Signature Algorithm: sha256WithRSAEncryption
62:7a:13:14:c1:19:d8:3e:b5:91:2d:65:0a:68:b5:34:e7:76:
70:e2:e9:dc:b8:70:6f:1e:a0:c7:d2:17:72:f3:12:24:08:a9:
fe:02:76:88:d0:aa:8d:57:b1:56:e3:5e:e3:b8:00:dd:18:fc:
02:a6:69:40:90:64:3c:36:e6:5e:90:bd:8d:ce:52:04:c4:ee:
4a:94:7d:21:e2:36:b0:a0:9a:14:c6:fa:12:d7:b4:44:a5:91:
18:c0:6f:c7:1b:23:63:7f:66:89:7d:f5:13:3b:5f:9e:9c:8c:
12:f5:a3:a0:b7:52:5c:2e:a0:a6:52:13:1c:2c:ff:df:56:44:
ae:55:75:e3:89:84:ff:2b:a7:af:00:df:86:06:83:fd:ad:b7:
e1:95:82:17:e6:3c:5e:cc:a2:62:c5:1f:6d:55:5a:62:f4:28:
f1:4a:f6:27:83:55:7e:9d:2d:d1:e6:a3:c3:97:9b:01:ec:69:
fc:6d:ca:bf:78:a2:89:26:8a:8a:80:8a:a6:ce:68:46:84:2f:
58:c2:2e:de:35:1c:be:fc:31:f2:59:9a:02:07:92:ab:13:b5:
d4:d3:01:e0:63:94:ea:24:a7:91:bb:e1:48:2c:71:53:9b:36:
14:b3:05:64:d2:93:35:49:90:c4:1b:c2:37:f8:6a:d0:95:b2:
6f:2c:4f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:29:57 2025 by rpki-client