Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/4038B182688F11F0A33144E8DAE4EC9C.roa
File: 4038B182688F11F0A33144E8DAE4EC9C.roa (raw, json)
Hash identifier: izxwBmkCJyJadaNJjV4P7PbQqhJDul3nhbj5qxDRFGk=
Subject key identifier: 18:6E:BD:AA:D3:22:A2:D7:F3:66:F2:E9:69:8E:97:C7:61:5B:08:16
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0CA0
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/4038B182688F11F0A33144E8DAE4EC9C.roa
Signing time: Thu 24 Jul 2025 13:08:12 +0000
ROA not before: Thu 24 Jul 2025 13:08:07 +0000
ROA not after: Tue 01 Dec 2026 13:08:07 +0000
asID: 9009
IP address blocks: 102.135.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 07 Aug 2025 13:20:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3232 (0xca0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Jul 24 13:08:07 2025 GMT
Not After : Dec 1 13:08:07 2026 GMT
Subject: CN=6882303c-af42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cc:a2:0e:05:6a:82:9f:e2:36:68:f0:f8:5f:
ab:6c:cc:d6:f2:25:e2:2c:22:1d:2b:91:a6:c5:12:
93:50:21:cf:20:76:e4:6f:09:32:8c:c9:a8:d6:3c:
fe:5b:b1:f2:ea:57:87:bb:56:a5:b3:66:6b:98:fd:
03:a6:2b:8a:4b:3f:71:37:88:0c:4c:45:b7:ef:c4:
9a:0d:55:da:90:e5:5a:3a:4d:37:14:f3:d8:a4:b5:
65:36:44:5c:eb:05:ea:b2:43:a9:4e:d4:ae:42:b6:
f0:57:cd:a0:cd:a5:38:5b:db:e9:1f:87:0f:4c:92:
dc:7c:98:d5:43:60:cc:e2:b0:84:eb:1f:54:95:96:
a2:46:04:69:ca:ad:80:06:a6:19:91:3a:56:c6:04:
a3:4e:d4:ab:3c:a2:70:14:aa:87:b4:76:75:e3:da:
eb:ec:f8:60:8b:4e:83:da:b5:1e:b9:ff:3d:23:04:
fb:44:4c:0f:7c:5b:41:be:8e:f8:b3:af:2e:9c:e5:
c5:04:66:6b:12:c7:70:3f:bf:45:df:0e:87:a9:38:
86:e8:b9:9e:c8:a7:eb:f7:be:16:d7:62:86:32:95:
15:6a:b3:78:d6:59:62:dc:4b:01:c2:af:b1:b4:5c:
22:6b:df:73:07:85:9b:fb:0b:6e:b4:e6:6e:a2:cc:
f3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:6E:BD:AA:D3:22:A2:D7:F3:66:F2:E9:69:8E:97:C7:61:5B:08:16
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/4038B182688F11F0A33144E8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.1.0/24
Signature Algorithm: sha256WithRSAEncryption
20:24:ad:5a:14:39:1e:73:6d:b9:74:59:0f:78:dd:82:25:ab:
34:3c:50:7f:a8:64:f7:34:e8:11:1e:89:5d:9d:73:f9:52:f9:
e0:02:e0:2d:98:18:06:ca:d1:09:f5:bd:b2:7e:77:db:7b:68:
05:7a:e5:1a:3c:b5:c1:9c:62:97:cb:0f:65:ad:2b:49:81:4b:
92:50:9e:64:06:fa:48:c0:37:03:8c:90:1c:fb:2d:d2:2a:f1:
98:d0:bc:c1:81:90:d3:03:eb:8b:ca:b2:a3:eb:c6:7e:57:e3:
bf:70:ac:14:54:57:1f:2c:e0:ff:7c:df:9d:3c:71:39:90:45:
22:7e:1a:ff:78:b0:3c:fa:1c:91:16:2b:24:d0:d8:11:79:9a:
3d:2f:03:57:00:0d:3c:ac:59:97:bc:24:c1:01:be:28:8e:a0:
ae:22:15:7b:0f:7d:28:38:49:ef:5e:58:1d:04:46:74:0a:9e:
b5:df:b1:6b:4f:74:d3:73:8a:6b:08:25:3e:be:69:ea:cc:15:
c5:ca:36:5e:7c:d6:2f:5b:1b:5d:10:76:65:94:fe:41:b4:83:
55:3d:b7:94:18:77:e3:1b:73:8e:13:4b:96:4a:bf:82:6c:bc:
4d:09:28:b2:76:e9:b6:ed:03:13:0d:a1:04:6e:40:a3:64:0f:
ac:ae:84:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:10:27 2025 by rpki-client