Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/B92B83C020E211F0B3C48B7ADAE4EC9C.roa
File: B92B83C020E211F0B3C48B7ADAE4EC9C.roa (raw, json)
Hash identifier: c5xUndfGWuNn/q6IIXb10/oP85iXC95F06PD45jiG4Y=
Subject key identifier: FB:F2:3A:46:6F:B5:15:A2:9B:9B:2E:E1:E6:FA:BC:A2:00:BE:F8:81
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0958
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/B92B83C020E211F0B3C48B7ADAE4EC9C.roa
Signing time: Thu 24 Apr 2025 08:04:19 +0000
ROA not before: Thu 24 Apr 2025 08:04:15 +0000
ROA not after: Tue 10 Feb 2026 08:04:15 +0000
asID: 329007
IP address blocks: 102.135.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 01 May 2025 00:08:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2392 (0x958)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Apr 24 08:04:15 2025 GMT
Not After : Feb 10 08:04:15 2026 GMT
Subject: CN=6809f083-5faa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a7:25:bc:ba:22:d8:2d:91:0d:80:b7:0e:57:
2f:c1:82:5c:dc:8f:9e:79:3f:05:d8:f9:50:16:1b:
83:68:e3:42:13:ed:75:6b:d8:6c:ce:2d:fd:1b:a7:
3b:fb:46:22:16:48:06:9f:45:69:36:2e:23:c0:57:
bb:b4:36:9d:87:f9:38:40:4b:76:77:e8:b9:77:38:
fd:c4:4b:0a:03:a5:23:56:72:e1:f8:8c:13:9c:c9:
76:ad:4d:74:d1:f9:38:80:0c:b4:45:a7:45:39:ea:
b8:49:97:2c:b7:a9:d9:4c:e8:cc:c5:e2:5e:8e:23:
57:83:ca:a4:ae:b4:9f:30:81:c4:3f:82:ce:3f:ac:
fd:45:64:c4:c3:88:c0:8b:6e:95:9f:4a:cb:8f:0e:
94:a7:dd:b9:fa:d8:27:c7:d8:68:a5:42:8f:2a:90:
08:59:6b:2f:c3:5b:fc:b9:78:2b:a9:bb:fd:15:66:
f9:92:c5:e5:45:91:2b:96:f3:3d:54:91:7a:74:dd:
73:0f:8f:8d:cf:b3:a8:64:83:06:1e:27:a2:d4:4b:
99:91:a4:20:2f:f0:fe:54:2a:22:ec:b1:cd:f9:77:
4b:57:ca:3d:47:77:24:98:07:f5:f8:ff:5a:70:9d:
f7:1d:b0:5f:65:11:4d:cc:2f:92:cb:56:53:3c:27:
3d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:F2:3A:46:6F:B5:15:A2:9B:9B:2E:E1:E6:FA:BC:A2:00:BE:F8:81
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/B92B83C020E211F0B3C48B7ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.108.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:a6:77:6c:07:ed:7b:fe:2a:5f:9c:0f:84:10:67:69:27:ce:
10:e0:c6:e9:55:37:df:9c:e5:9f:d6:c0:a0:0f:25:ac:69:01:
aa:f1:ce:aa:ab:3c:cb:1e:3f:9e:c1:3f:ab:da:09:20:74:fb:
da:a8:89:85:40:c9:dd:8e:32:3b:8f:84:65:57:dc:af:3c:18:
a4:fe:88:0f:95:0b:53:87:57:0f:9d:1c:01:65:6a:f3:75:19:
a1:31:79:78:f4:bd:72:50:c4:bb:14:2f:1d:3a:ab:66:8c:a3:
00:bc:5f:c6:66:60:9c:23:09:80:5f:53:ce:e2:81:40:79:d9:
45:a0:4d:be:a6:a3:5c:9c:5d:ec:93:bd:f2:28:f2:f8:b2:12:
d4:6a:02:44:49:1e:39:dc:9b:5f:a1:c9:1c:bc:dd:c3:da:74:
7a:a2:4d:c7:2d:af:49:4a:38:55:dc:7b:91:ba:6e:1f:cc:97:
10:b3:cb:54:75:e2:cb:f6:64:dc:32:7b:32:c8:53:27:a7:e9:
f0:11:54:52:a1:34:d6:65:99:51:df:c4:b1:ed:0b:39:0f:d9:
fc:7e:15:f3:ef:c9:be:e8:12:3e:99:bc:13:f6:2c:7e:cb:cc:
c4:ab:51:cf:5d:2f:bf:a7:b7:9a:ea:f3:99:c2:16:3e:ca:20:
36:e8:75:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 08:19:43 2025 by rpki-client