Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/6E44414E689011F089A8BEF0DAE4EC9C.roa
File: 6E44414E689011F089A8BEF0DAE4EC9C.roa (raw, json)
Hash identifier: OYq2EaZqdvwz8HjnTxmWkjD0LyYXjVrtbeXaxa45xAw=
Subject key identifier: 24:6B:0F:68:CB:BA:35:A4:42:80:60:57:A4:4A:CF:D0:42:47:79:E1
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0CB2
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/6E44414E689011F089A8BEF0DAE4EC9C.roa
Signing time: Thu 24 Jul 2025 13:16:39 +0000
ROA not before: Thu 24 Jul 2025 13:16:34 +0000
ROA not after: Thu 01 Jan 2026 13:16:34 +0000
asID: 9009
IP address blocks: 102.135.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:07:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3250 (0xcb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Jul 24 13:16:34 2025 GMT
Not After : Jan 1 13:16:34 2026 GMT
Subject: CN=68823237-57bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:20:79:3a:df:d5:aa:c2:b6:24:65:f4:dd:27:
31:f5:b3:5b:6e:20:b1:af:b2:69:72:a1:f6:f3:c1:
0a:2b:66:68:26:4b:63:af:7b:04:98:6e:a1:fe:08:
56:46:da:2b:8f:4f:bd:e6:99:64:10:f6:34:c4:76:
4a:27:2f:a4:d7:ab:fc:dd:e2:c8:e3:f5:81:59:fb:
16:88:25:fe:62:b8:aa:21:a8:fc:e4:17:55:56:a2:
70:d7:96:5f:27:e1:bf:21:b8:3d:24:93:3d:f2:f3:
41:7b:60:31:4f:0f:90:6d:81:89:69:de:53:c3:32:
01:17:59:5a:ea:dd:a4:a1:cb:b2:24:10:d7:84:ec:
fa:09:08:9e:45:3f:e5:19:0a:32:f8:99:5e:13:25:
a5:c4:78:4a:87:04:85:6a:a1:b5:77:7d:39:e7:a2:
55:81:38:9b:40:d1:6b:4a:fb:a8:1b:e5:e5:4f:d1:
c4:00:dd:e6:02:60:56:ea:aa:24:1e:f1:ed:6c:31:
9f:d4:83:47:cb:3c:be:58:bc:64:d9:ba:f6:3f:90:
3e:39:8c:82:e5:bf:80:99:ee:fa:72:e7:e7:9d:8f:
6d:b5:f3:bd:c5:a7:c9:96:ee:6d:81:9e:ab:02:2a:
0d:dc:b4:d7:9d:14:e5:e6:14:15:ae:a9:90:9c:7a:
b8:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:6B:0F:68:CB:BA:35:A4:42:80:60:57:A4:4A:CF:D0:42:47:79:E1
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/6E44414E689011F089A8BEF0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.96.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:17:be:93:a3:33:f3:6b:c6:8a:c7:ac:08:55:30:c4:5e:b1:
32:82:54:fc:5c:b3:56:4f:39:a8:8b:7e:ad:e9:c9:54:0f:4a:
a9:1b:4c:44:da:09:a5:45:24:60:9a:3d:40:7e:1c:97:cb:87:
d2:b6:57:9e:2c:43:fa:da:b9:ad:3f:6f:0e:a6:86:49:4c:c1:
6e:3b:ec:4d:d5:8f:41:21:6c:7c:fd:93:88:df:fd:33:17:e8:
02:ac:a3:f1:6e:ba:cf:52:e6:7e:4e:e9:34:2d:2d:35:79:4a:
f6:a4:57:1b:af:20:d4:9a:55:a9:78:1d:72:c0:c0:3c:a8:13:
ae:b0:b2:91:d1:0e:24:6e:19:52:4b:8d:ec:8f:63:6e:f2:cf:
c1:8d:f2:4f:05:b2:1a:13:18:90:d3:2a:94:cf:26:b6:54:07:
74:b7:b9:fb:29:29:82:a4:6e:ab:ea:6a:2b:2e:1b:65:8b:e0:
44:fa:e4:ae:5e:87:70:51:7d:a2:5a:6e:88:72:46:41:c8:09:
4c:7c:f9:76:7a:79:a2:24:32:ab:65:70:47:12:00:ac:ac:c2:
a9:f2:da:65:06:01:1e:44:02:d8:25:91:85:96:41:65:9f:78:
b4:2b:fc:b2:d0:61:f4:14:05:f7:c5:ff:04:33:55:7d:e4:5b:
a7:b9:4f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:07:23 2025 by rpki-client