Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/4264CDFEB0A811F097E566AFDAE4EC9C.roa
File: 4264CDFEB0A811F097E566AFDAE4EC9C.roa (raw, json)
Hash identifier: S0gc87V0gagzJxnQjs8u0PEeCiSFr8PvECnwpbmNcpk=
Subject key identifier: 15:E7:9A:44:82:B4:AA:19:41:0B:0D:19:4A:CD:4E:65:9C:A7:44:CA
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0F31
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/4264CDFEB0A811F097E566AFDAE4EC9C.roa
Signing time: Fri 24 Oct 2025 07:08:37 +0000
ROA not before: Fri 24 Oct 2025 07:08:32 +0000
ROA not after: Sat 24 Oct 2026 07:08:32 +0000
asID: 25198
IP address blocks: 102.135.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3889 (0xf31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Oct 24 07:08:32 2025 GMT
Not After : Oct 24 07:08:32 2026 GMT
Subject: CN=68fb25f5-a0da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1e:a2:8f:f1:97:3b:bc:0d:5e:3f:3c:44:bf:
ed:21:ad:3c:6c:8c:6f:70:b1:2b:84:2a:92:53:3b:
f4:8d:9c:41:3c:1d:09:b0:22:af:04:4a:64:64:28:
11:61:96:07:24:17:70:34:2a:72:30:91:09:6f:41:
43:94:0e:e4:27:0e:97:68:aa:8f:e5:90:fe:b2:f1:
3e:20:d3:59:e4:44:33:1d:ee:81:b8:1a:58:03:af:
b9:ef:9d:ff:ee:42:07:5d:80:89:21:83:bd:f5:34:
1a:57:c2:b6:31:23:31:06:94:bb:76:e7:35:a2:c2:
d3:85:af:af:cc:33:e4:c1:9e:e1:39:da:d3:2c:5b:
4d:c5:da:12:dc:7d:48:72:79:ad:94:1e:db:39:9c:
61:b7:bb:71:6a:14:72:ca:81:93:5a:e4:52:8f:3f:
15:5f:60:cd:3a:8b:ed:af:8d:8f:b6:fc:66:76:98:
16:d9:49:e9:4d:da:c7:7d:eb:7a:90:86:af:53:77:
27:53:6f:e6:5b:1a:c4:eb:6c:77:d1:50:86:d8:ea:
fa:82:90:d3:0e:35:48:98:3e:32:45:31:46:39:ce:
c2:25:65:9b:64:32:17:96:fe:0f:26:44:0d:10:dd:
30:e8:00:8d:19:75:bb:89:bc:6b:e1:b6:db:c0:c7:
da:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:E7:9A:44:82:B4:AA:19:41:0B:0D:19:4A:CD:4E:65:9C:A7:44:CA
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/4264CDFEB0A811F097E566AFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.11.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:7c:5b:b0:bf:b1:ac:b0:15:a7:39:a1:22:3b:43:9e:36:90:
77:76:f4:80:60:b2:69:87:3d:3e:21:26:95:e5:53:23:38:c9:
4a:59:e8:48:51:a6:f6:1f:82:d3:15:49:24:e3:0c:b8:2e:30:
c1:44:c8:09:09:00:ef:3a:90:4e:b9:22:55:a7:b5:6c:b3:b4:
fd:89:3a:87:b1:86:a8:dd:52:04:e9:b5:80:cb:1d:6f:6a:fb:
ee:39:c9:65:5e:bb:c6:c9:73:9b:fd:c1:59:03:70:ee:dc:4f:
60:f4:ad:85:0d:ed:33:3d:36:85:ab:bb:ff:29:94:b1:d8:9a:
98:33:b2:cb:37:7c:15:b8:2b:f9:90:41:13:ed:79:43:d0:4c:
6a:c3:b4:a7:c4:9e:69:05:ca:36:f5:cf:2b:6a:eb:35:92:b7:
1f:f4:bc:ff:66:49:21:58:2a:9b:29:27:e1:1b:f0:0c:76:79:
93:ef:7d:fb:7c:2a:d4:9a:84:c9:e9:d3:a0:21:1d:58:08:29:
23:81:08:e3:7d:09:68:85:b1:ec:76:19:bd:29:c8:06:f1:db:
1f:af:00:e8:ae:fb:67:c6:bc:60:a3:bc:5a:da:bc:22:d4:26:
55:98:3f:aa:23:63:6a:98:ae:ba:e6:95:f1:62:d4:80:e9:25:
21:69:12:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:29:57 2025 by rpki-client