Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/C0932BC0488511F093B599ECDAE4EC9C.roa
File: C0932BC0488511F093B599ECDAE4EC9C.roa (raw, json)
Hash identifier: VRsi3OsnJQ41Bj0r9muiAmWfxD+j3P2K7EA01DhGj8U=
Subject key identifier: 49:05:A2:51:A3:5C:E6:A2:55:CE:AB:FA:12:7A:1D:6F:8C:1F:C3:A6
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0B60
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/C0932BC0488511F093B599ECDAE4EC9C.roa
Signing time: Fri 13 Jun 2025 18:39:35 +0000
ROA not before: Fri 13 Jun 2025 18:39:30 +0000
ROA not after: Sat 13 Jun 2026 18:39:30 +0000
asID: 29802
IP address blocks: 102.135.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 30 Jun 2025 00:06:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2912 (0xb60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Jun 13 18:39:30 2025 GMT
Not After : Jun 13 18:39:30 2026 GMT
Subject: CN=684c7067-5ad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d7:eb:79:9e:d4:5d:79:a9:f2:56:0e:57:8d:
91:4d:01:fc:6d:c9:b2:d4:c3:01:b9:ae:ff:b1:06:
12:47:3a:c6:3a:c8:b1:2e:44:07:4d:d0:d2:60:14:
2d:33:33:60:93:0f:49:d2:31:02:da:2a:e7:27:eb:
56:b5:ca:c4:af:e0:48:a3:9c:80:48:5c:83:62:2e:
e8:e4:5b:b4:7e:00:29:f4:6a:a6:39:ef:1a:f5:5a:
ab:3e:56:d1:54:17:df:b5:60:49:c0:ef:73:b0:2c:
8c:c2:fe:95:14:43:8a:e2:59:e6:85:ec:1b:5c:21:
c6:88:b2:98:3e:3e:0a:b4:db:a1:c6:2c:d5:8f:ed:
78:e3:04:fc:f9:93:1c:ea:ae:4d:b8:25:4e:c5:bb:
ff:b1:55:20:77:4c:48:94:c1:ef:a4:1a:0c:0c:b1:
72:f3:f9:fa:28:99:a2:28:c5:cd:71:d9:be:89:52:
81:a0:c1:d2:a4:fc:e2:f3:88:2d:65:80:7d:af:a9:
fd:47:76:e1:68:2e:9d:0e:4b:26:39:ab:9e:9a:b4:
ce:5e:ae:2a:ac:34:c3:db:94:40:22:17:75:84:41:
3d:7b:8d:d5:14:b1:5b:70:fb:27:a1:94:25:47:d4:
82:a3:90:f7:91:9c:e9:63:ac:76:3b:80:0c:f1:6c:
e7:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:05:A2:51:A3:5C:E6:A2:55:CE:AB:FA:12:7A:1D:6F:8C:1F:C3:A6
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/C0932BC0488511F093B599ECDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.28.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:a0:85:97:94:9a:54:4d:ac:94:aa:13:8e:38:73:40:52:3c:
ae:64:2d:6b:4b:8c:73:47:b7:90:e1:92:12:59:19:3f:63:de:
61:be:e9:b2:02:7d:bd:e9:17:6a:3b:24:8a:fc:91:62:e8:00:
d9:03:7b:1e:82:2b:d6:42:2f:0e:e6:d4:ca:86:ff:c7:f1:0d:
29:0d:ac:ff:8c:14:72:28:56:13:26:9d:e3:30:f7:1b:34:84:
c5:66:5a:28:30:fe:7a:f7:1d:23:5c:82:72:08:b4:f8:e0:d1:
de:03:36:61:39:8d:2c:bf:3c:e7:73:6a:89:6f:47:92:00:7b:
36:d7:63:66:f8:30:cb:30:e8:10:bc:9c:66:2e:3b:05:9c:56:
12:18:f4:78:f5:cb:81:a5:fa:f7:e5:94:e2:c5:aa:23:3d:27:
46:2c:63:db:c2:64:91:16:a4:80:27:dc:d1:32:d5:f9:ad:d7:
24:06:f0:ba:7d:5c:7c:76:db:49:57:36:5a:58:0a:da:34:64:
a3:8c:67:9c:2b:67:62:a4:95:69:e8:5f:8c:c0:99:74:13:87:
58:05:a2:ce:fe:ef:5b:96:3e:a3:0d:0f:03:7f:c8:91:7e:ab:
06:f8:33:ff:a4:42:41:a2:9e:87:3d:19:f2:45:27:7d:5f:d4:
29:76:fe:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:41:39 2025 by rpki-client