Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/8C42A7AE6C6811F09C0F987DDAE4EC9C.roa
File: 8C42A7AE6C6811F09C0F987DDAE4EC9C.roa (raw, json)
Hash identifier: pJNfoJBSEPA1Q7gsb2J9EOM7mrinWsBX1utUs1sLNOU=
Subject key identifier: 12:48:B5:10:BC:6C:86:D4:B5:07:0A:F5:AF:D8:B3:24:04:46:F3:40
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0CBD
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/8C42A7AE6C6811F09C0F987DDAE4EC9C.roa
Signing time: Tue 29 Jul 2025 10:41:14 +0000
ROA not before: Tue 29 Jul 2025 10:41:09 +0000
ROA not after: Tue 13 Jan 2026 10:41:09 +0000
asID: 212666
IP address blocks: 196.251.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 08 Aug 2025 04:53:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3261 (0xcbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Jul 29 10:41:09 2025 GMT
Not After : Jan 13 10:41:09 2026 GMT
Subject: CN=6888a54a-0c34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fd:ad:72:07:c4:b4:ee:04:17:9d:1b:3b:2b:
da:73:68:f3:97:e2:86:ad:fa:92:56:a4:30:e6:6a:
3a:2c:83:87:6f:1e:06:cf:a3:4c:8a:02:99:49:56:
91:d4:4a:cc:ba:57:42:45:93:f2:3e:ba:20:4d:24:
63:9e:df:3e:b6:2a:f5:7b:8c:66:d7:d5:a0:5d:b7:
4b:e5:fd:98:b9:da:96:f0:7b:91:34:88:e6:d5:47:
c0:f8:db:0a:25:2e:01:96:0d:9b:a8:55:9f:28:bc:
a2:fd:b2:d0:30:3b:95:e0:4b:33:36:1d:2f:a9:16:
ef:65:bd:e9:ce:2d:d0:b2:ec:0e:7d:9e:c4:74:22:
02:a1:40:df:d6:69:21:2a:dc:6b:67:fe:9a:ac:35:
b6:8b:ad:af:07:c2:7f:a7:44:9c:e5:46:25:e7:55:
14:56:56:c5:ec:e4:85:c7:95:66:88:37:4b:39:f5:
cc:22:0d:08:0d:6d:01:eb:90:6d:0b:fa:fb:2b:7a:
f1:27:8d:e3:85:06:72:6f:28:75:f7:1e:24:96:05:
7c:3f:7d:e1:72:6d:7c:ea:df:b5:58:93:fb:92:0c:
c5:33:7b:21:62:b9:fa:bc:ef:20:ac:19:2a:df:a7:
20:4b:96:f7:b5:3b:db:ce:bc:06:a0:d0:9f:69:3e:
04:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:48:B5:10:BC:6C:86:D4:B5:07:0A:F5:AF:D8:B3:24:04:46:F3:40
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/8C42A7AE6C6811F09C0F987DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.102.0/24
Signature Algorithm: sha256WithRSAEncryption
68:a8:d2:e1:7a:54:ad:e3:23:3d:a9:5c:ff:7c:38:06:aa:3f:
e9:10:16:10:86:43:af:2e:08:15:69:e7:01:47:c7:2a:1e:de:
b1:77:8c:04:0d:ef:ea:0f:2b:ec:ce:df:ba:a2:df:62:a7:6f:
8d:5f:85:ee:eb:89:0a:a5:cb:e7:13:4e:93:76:02:b8:92:a1:
94:65:de:fe:60:d6:ab:fe:92:63:ba:74:0f:05:9a:a5:25:79:
11:67:f0:c1:1f:23:fc:7d:11:60:12:a7:f6:15:cb:aa:58:db:
9c:cc:5a:3c:93:ad:44:59:ac:bc:74:9b:b8:2e:1c:46:b1:a3:
c8:3c:92:c9:45:3a:f2:eb:fb:b3:de:9a:d1:68:72:ad:d4:6c:
39:70:62:89:79:76:61:d1:66:4a:a3:92:87:e1:22:43:fa:3b:
80:13:a8:67:3d:40:cc:f6:70:2e:d1:da:28:dc:27:af:83:d8:
b8:bf:b8:9a:a5:71:19:21:c5:b5:f4:54:a6:c1:5e:c0:9f:e6:
75:13:a8:09:07:03:c5:6c:37:9f:72:d2:e3:95:38:ba:6e:7d:
7c:67:91:1a:8e:4e:14:67:50:0b:d7:e1:9f:d4:37:43:83:75:
89:8b:95:6e:29:c6:60:de:0f:0c:6a:9f:32:17:d9:34:46:4d:
4a:a2:24:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:03:42 2025 by rpki-client