Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/D607BBBC4B4911F0A2BD05F5DAE4EC9C.roa
File: D607BBBC4B4911F0A2BD05F5DAE4EC9C.roa (raw, json)
Hash identifier: g5L9GNh+za5JdEf6KUSArgiTNSx/ZS8tQWUv8fVQfKI=
Subject key identifier: 85:8C:3E:86:B2:D6:86:ED:DA:36:DC:6C:80:17:1D:CC:07:D4:F6:95
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0B78
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/D607BBBC4B4911F0A2BD05F5DAE4EC9C.roa
Signing time: Tue 17 Jun 2025 07:08:15 +0000
ROA not before: Tue 17 Jun 2025 07:08:10 +0000
ROA not after: Tue 16 Jun 2026 07:08:10 +0000
asID: 29802
IP address blocks: 102.135.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 01 Jul 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2936 (0xb78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Jun 17 07:08:10 2025 GMT
Not After : Jun 16 07:08:10 2026 GMT
Subject: CN=6851145f-f184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ae:d4:f5:93:ab:47:a4:2a:51:0a:9c:df:48:
39:75:2b:b8:29:b4:b3:d9:16:4d:28:70:ff:64:a4:
ca:0b:0e:84:ab:a0:58:01:2f:80:a9:f6:97:65:ef:
73:ca:5c:2d:91:21:42:55:5c:b9:cc:f3:48:2e:c3:
dd:9f:a6:e3:11:13:20:f3:65:ac:1e:e9:cf:af:a7:
fc:90:f7:e0:80:49:44:98:cc:06:72:51:e3:7a:8e:
1a:52:e9:49:e4:44:48:e8:35:65:07:33:e3:cc:21:
98:e0:f8:3b:83:0c:54:e5:80:19:a0:50:7e:33:b7:
71:2e:4e:df:b1:8e:a3:7b:2e:48:5e:8a:cf:1d:51:
85:02:03:73:58:4e:ad:3b:7e:59:df:34:01:db:5d:
52:0e:24:62:78:9f:a0:cc:2d:b3:96:d1:e1:84:52:
18:15:32:0d:d9:b4:86:14:b5:17:7f:3d:95:b5:e2:
9b:a3:f5:2a:3f:3f:b5:9a:03:b7:a6:89:fc:ec:cd:
7a:57:66:25:45:63:65:03:3a:71:7c:ba:e6:09:8e:
b9:c9:06:69:6a:4d:5b:ee:2d:f3:fb:aa:83:06:44:
24:fd:8f:0d:03:31:7a:da:26:b6:00:67:1c:aa:c8:
55:04:a0:35:9e:25:04:28:b6:13:18:04:08:2e:99:
dc:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:8C:3E:86:B2:D6:86:ED:DA:36:DC:6C:80:17:1D:CC:07:D4:F6:95
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/D607BBBC4B4911F0A2BD05F5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.81.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:95:b7:2e:5a:eb:74:43:c6:c4:b5:ea:3e:41:d1:81:17:0b:
f9:99:22:9a:db:66:4a:5d:b4:82:55:5c:96:6a:83:01:84:d7:
04:35:78:2f:80:c6:14:f9:da:53:31:d0:63:15:ab:b6:d7:57:
f7:0b:52:4b:d0:b3:7d:d4:b9:d9:91:ea:c8:b1:3d:d9:cb:63:
ba:fd:d1:bd:aa:90:85:ab:1d:88:c8:cb:51:d3:00:e8:90:31:
d2:ae:5d:e8:44:c4:f9:04:6a:59:d8:52:08:27:c6:0b:93:37:
f2:60:bb:01:7e:34:a2:6d:2f:ad:eb:e8:02:4f:ba:63:d8:8c:
16:70:20:e9:97:09:50:27:15:f1:75:cf:e7:31:ce:ff:e2:c1:
46:c6:ab:c6:ec:55:a9:c0:c6:24:cb:4b:b8:ca:52:5e:07:f0:
a8:26:1b:e9:f9:a2:1a:35:cb:2b:7a:1a:fb:c5:0c:a3:30:4a:
e5:1b:3f:b3:c1:37:04:3e:b0:a8:3e:87:9b:06:f6:10:2d:b6:
1e:4a:8c:1a:b6:63:3a:cf:e0:77:d5:9f:ce:8e:58:ac:b3:48:
3a:7c:c6:7f:5c:16:3d:2e:5b:21:cc:e9:e7:a3:0d:3d:4d:66:
ad:70:20:50:2c:15:a2:e1:d8:4c:e5:7c:f7:fd:09:e8:9a:3f:
95:88:4d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:05:19 2025 by rpki-client