Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/71EF8A6CB0A511F0A182B79EDAE4EC9C.roa
File: 71EF8A6CB0A511F0A182B79EDAE4EC9C.roa (raw, json)
Hash identifier: xy+wGkJ1mkOIxPwqj/4d0nx27Ist4DxkRnvy3UHVWsY=
Subject key identifier: D5:FF:B1:DC:1F:FE:98:17:2B:53:3F:DC:08:F9:26:9D:DD:A4:EE:56
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0F29
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/71EF8A6CB0A511F0A182B79EDAE4EC9C.roa
Signing time: Fri 24 Oct 2025 06:48:28 +0000
ROA not before: Fri 24 Oct 2025 06:48:23 +0000
ROA not after: Sat 24 Oct 2026 06:48:23 +0000
asID: 55154
IP address blocks: 102.135.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3881 (0xf29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Oct 24 06:48:23 2025 GMT
Not After : Oct 24 06:48:23 2026 GMT
Subject: CN=68fb213c-67a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:50:4d:ac:e8:6b:ba:97:34:f1:58:2e:f5:19:
7a:98:50:bd:7b:a0:dd:0e:c5:b6:fc:1c:ed:2a:c7:
de:5b:38:89:09:a8:9d:1c:a4:dc:cc:24:4b:6f:19:
3f:3a:a5:f3:7a:a0:77:bc:0f:f2:38:51:17:87:d4:
55:6d:bc:99:10:e0:00:5d:28:f4:d9:7f:57:24:e6:
68:67:a1:1c:91:bd:21:27:84:46:d4:6a:3e:86:d3:
37:80:62:d2:43:3e:3c:09:6f:17:3a:c5:93:28:72:
68:a3:2e:46:d9:a3:c5:d7:2f:5a:75:97:f0:06:14:
91:0b:a8:6e:15:a4:88:b2:25:17:4c:e4:19:be:1d:
fd:3c:61:93:b2:25:e3:cc:29:07:b1:21:60:94:e1:
77:b3:97:e9:c0:fb:08:c0:2e:fb:d1:b6:8f:be:ba:
86:1b:86:88:f7:dc:32:f4:59:ce:c4:9b:7c:52:64:
c2:96:e7:71:f7:3d:a4:6e:28:b5:2c:a5:da:d3:2c:
f6:76:e3:d8:25:bc:1e:90:69:63:02:cd:41:17:95:
b2:94:e4:8e:5d:93:15:73:8e:0a:c9:12:34:2d:35:
0c:0e:42:73:59:24:9d:a3:42:a9:1f:0f:04:ce:d1:
9f:70:fe:30:27:58:7f:bb:75:dc:7e:d1:55:f1:23:
0a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:FF:B1:DC:1F:FE:98:17:2B:53:3F:DC:08:F9:26:9D:DD:A4:EE:56
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/71EF8A6CB0A511F0A182B79EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.57.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:6f:0e:a7:9b:fb:66:fc:db:4a:41:d9:f8:aa:f6:51:1d:f7:
28:9b:f6:c5:64:84:44:cb:a7:d0:d3:1b:13:14:f9:43:73:8e:
10:7d:3d:75:01:9f:78:b3:0a:29:f9:7c:b7:3d:b9:55:01:a8:
71:99:f1:93:96:8f:76:99:9e:ae:6c:5f:cd:d4:b9:b5:f1:72:
52:74:4e:ec:c9:6b:13:78:16:6e:19:f4:02:ed:4f:76:a2:83:
00:e6:ec:6e:4e:ee:0a:8e:6f:7b:21:bf:f1:19:76:05:cd:2d:
77:39:86:cb:80:06:ff:4d:06:69:3f:88:90:8d:9e:38:59:78:
52:15:7f:84:6c:7c:d1:a5:ef:e0:44:0a:9a:c8:b6:59:e9:37:
b0:d1:a4:92:54:ee:c1:bf:9c:59:c9:1d:1f:c1:af:1b:06:48:
7b:e3:42:5a:17:27:e2:39:82:3d:c2:b1:96:99:46:5d:05:50:
aa:00:70:9f:07:d0:83:95:37:90:1c:bb:29:5f:62:25:16:af:
5d:ff:e1:f1:2f:6d:dd:48:a8:5f:76:32:77:67:12:34:e7:5c:
51:e5:40:10:d4:7d:e6:e8:c8:04:c6:6a:b8:d8:ee:a0:57:c3:
d6:69:5d:43:7b:1b:0a:78:25:66:68:2f:91:78:a2:3b:78:48:
10:15:2e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:47:16 2025 by rpki-client