Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/3143253CAF3811F0994C1D88DAE4EC9C.roa
File: 3143253CAF3811F0994C1D88DAE4EC9C.roa (raw, json)
Hash identifier: aFOWx9kDvHq2S6cOuaAkFgl7TgafTJNoQ3QRsrIJnxM=
Subject key identifier: BD:86:03:3C:61:1C:63:D8:72:06:7B:55:4D:CD:E6:56:98:31:E2:BA
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0F0D
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/3143253CAF3811F0994C1D88DAE4EC9C.roa
Signing time: Wed 22 Oct 2025 11:13:53 +0000
ROA not before: Wed 22 Oct 2025 11:13:46 +0000
ROA not after: Thu 22 Oct 2026 11:13:46 +0000
asID: 55154
IP address blocks: 102.135.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3853 (0xf0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Oct 22 11:13:46 2025 GMT
Not After : Oct 22 11:13:46 2026 GMT
Subject: CN=68f8bc71-fc6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:28:10:d1:b2:88:ae:6c:b6:60:22:a0:18:3b:
f4:3a:45:5c:3f:d4:cc:1f:20:92:8f:cf:82:b8:e1:
49:90:f7:0b:ee:81:29:e7:0a:f2:21:7c:be:4e:9f:
e4:9b:97:fe:8d:7e:12:c8:5f:e0:96:fd:03:b9:26:
6f:07:11:a6:8c:77:08:7a:ef:3f:06:34:3c:f0:96:
43:52:1f:86:8b:43:80:6f:fa:cb:5d:4b:0c:c5:5c:
12:45:90:b5:9a:d7:f4:db:88:88:73:65:a2:9e:67:
8c:0a:34:0c:83:10:47:6b:08:ec:00:ab:73:87:3e:
5e:bb:85:78:ce:db:e8:d3:66:3d:9d:4a:a2:90:b2:
b7:ef:26:31:38:98:a5:2d:ac:dd:d3:ff:43:25:8b:
40:87:78:d7:8e:99:44:6e:a0:45:70:9d:5a:05:43:
36:c2:e6:9c:ad:30:24:df:68:82:8b:5d:0c:c8:53:
ef:26:42:f4:7b:ff:9b:d6:d1:4b:33:dd:e1:79:e7:
a2:e2:13:9d:b8:40:ac:99:2c:16:30:b0:3e:ea:82:
0e:fb:00:30:09:34:79:56:62:41:a0:06:38:a1:a0:
24:ff:67:1a:4d:54:83:1b:78:bc:22:a9:35:6f:20:
f2:5d:73:43:9f:1e:aa:2a:4d:09:45:aa:e1:7d:25:
2a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:86:03:3C:61:1C:63:D8:72:06:7B:55:4D:CD:E6:56:98:31:E2:BA
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/3143253CAF3811F0994C1D88DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.12.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:49:82:ed:14:ee:dd:5f:d3:fe:bb:9f:f0:69:53:8f:17:bf:
1c:93:de:da:f9:e3:a8:e1:71:ce:6e:9a:1a:83:df:9a:10:42:
1a:0c:29:0c:eb:13:cc:4c:6c:bd:e1:22:65:28:7f:74:c5:3d:
3c:a9:2f:58:5c:f7:ce:d2:23:2e:3d:70:16:c0:c8:da:53:8f:
dc:fc:77:eb:17:b6:11:d6:99:bb:19:e6:b8:8e:d7:14:0d:5d:
17:33:e6:55:d2:13:b7:e5:95:ab:79:5c:87:f6:c1:ef:ab:37:
ef:2d:a2:53:c6:c9:11:93:f2:c1:c1:16:8e:97:ad:f4:5d:f9:
9f:ad:11:5f:1a:7d:86:14:f7:a4:6c:d3:7d:75:d0:a0:b7:37:
b9:2d:62:88:84:a9:2c:fb:36:99:6b:f8:38:3f:6d:73:3c:d6:
9b:12:26:a3:9f:8f:a2:13:2a:d8:36:f6:78:f2:72:1d:be:69:
bc:22:f6:b2:ea:f3:3b:87:1e:81:32:7f:35:15:1b:d9:18:07:
fd:05:04:43:30:0d:ad:94:a8:ba:88:b5:85:fb:68:c4:56:3f:
1d:fc:b3:91:97:2f:7b:ca:cb:f4:ad:bc:b3:63:5c:c1:dc:9a:
26:d1:6e:4b:da:36:ae:8f:5f:51:6b:ef:7c:c7:36:f7:26:c8:
37:e8:d1:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:47:07 2025 by rpki-client