Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/AD2E00AC952711F086C72BF2DAE4EC9C.roa
File: AD2E00AC952711F086C72BF2DAE4EC9C.roa (raw, json)
Hash identifier: lBbkcwUhw9I1mF2oPv3sLxEKLeuKYPHKasz9/G/xbT0=
Subject key identifier: 23:F5:A0:16:60:77:10:6F:93:96:5F:64:CF:F7:AF:6B:BB:BD:56:07
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0E6A
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/AD2E00AC952711F086C72BF2DAE4EC9C.roa
Signing time: Fri 19 Sep 2025 07:10:09 +0000
ROA not before: Fri 19 Sep 2025 07:10:04 +0000
ROA not after: Tue 15 Sep 2026 07:10:04 +0000
asID: 55154
IP address blocks: 102.135.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 02:40:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3690 (0xe6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Sep 19 07:10:04 2025 GMT
Not After : Sep 15 07:10:04 2026 GMT
Subject: CN=68cd01d1-cb5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:b5:42:bf:ce:74:3e:21:34:dc:85:eb:2b:f0:
e5:0a:26:f1:a0:b2:11:96:c8:13:6a:ee:5e:6d:da:
77:fd:48:18:82:f9:50:fe:9f:17:29:48:5d:5a:0a:
61:55:cc:fd:5d:b8:f0:f5:b5:ed:1c:8b:e5:78:06:
82:0d:66:c4:f9:c9:43:bd:22:b9:0e:2b:11:a4:80:
c2:cb:ce:db:47:82:28:06:a2:a4:38:3d:0f:92:0a:
c1:ac:67:a4:10:02:8b:2a:2c:03:a8:e9:fa:cd:a7:
b6:a5:11:4c:b2:f9:8d:eb:c4:2a:fe:81:1d:47:fe:
13:33:e7:ff:0d:46:1d:a5:cd:9f:97:dc:cc:e2:4e:
bb:68:dc:96:38:3a:4b:f9:97:9f:67:b7:06:6a:f7:
66:a3:f3:84:d1:e5:ec:19:75:fc:48:33:11:0e:a6:
27:bb:e8:ed:bc:41:d2:e4:6b:7e:81:30:b0:ad:01:
96:ea:34:a2:ed:d0:76:5a:2e:0c:17:3b:de:59:15:
37:25:6f:bc:49:4a:d5:c5:65:7b:d4:e6:a8:a3:31:
92:1b:9b:e9:9d:23:e9:c9:83:20:21:49:7d:d9:9f:
a5:8f:5b:a5:8a:11:15:6b:5b:6b:51:17:14:f7:85:
a7:e6:a4:cf:36:45:db:f9:f3:e0:32:2a:7e:d4:5c:
0c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:F5:A0:16:60:77:10:6F:93:96:5F:64:CF:F7:AF:6B:BB:BD:56:07
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/AD2E00AC952711F086C72BF2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.73.0/24
Signature Algorithm: sha256WithRSAEncryption
97:dc:b3:2d:5d:8b:45:06:ac:21:4f:cd:d7:f4:ef:39:cd:37:
a9:99:46:2d:c4:57:4b:ec:7b:18:b9:3d:84:6f:cd:f7:af:99:
96:3f:3e:f7:69:55:0d:06:62:23:a9:a6:ac:d1:a7:12:37:3f:
34:94:52:ea:1c:de:27:d7:36:df:28:82:e8:7d:6c:d3:19:56:
07:cd:f9:75:06:11:71:a0:9b:d8:ec:ba:99:d4:b5:f3:7c:cb:
df:05:d5:d6:42:a1:76:43:6a:f1:b4:06:61:8c:5e:1e:2a:8a:
bc:b3:cc:ad:a7:74:a2:c6:f3:10:d2:61:0f:bc:51:db:6f:45:
3c:54:ab:36:5f:2f:e5:d0:50:97:f6:09:25:60:2e:54:f5:6d:
85:ce:98:33:44:43:f3:02:00:a1:dd:a2:66:8e:14:1b:28:f0:
ae:77:12:0f:a9:66:97:14:c3:08:26:1b:02:40:8f:23:6e:a1:
4b:90:c7:c8:d7:1f:9c:e7:c5:f3:10:98:f2:f0:60:13:1e:eb:
c4:56:07:6a:22:1f:3e:75:fd:b2:0a:02:2a:e4:e8:1c:f7:bd:
76:ae:8c:46:88:01:b7:aa:d8:ad:85:48:46:18:46:53:00:51:
74:0f:d8:71:83:fd:98:61:4b:c3:f8:f6:04:79:97:93:b5:25:
8f:02:b1:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:42:20 2025 by rpki-client