Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/C45B78CEB0A511F0B38C1CA1DAE4EC9C.roa
File: C45B78CEB0A511F0B38C1CA1DAE4EC9C.roa (raw, json)
Hash identifier: abudy0FZQ1fXll6MKCNrqz84nlbR1jWWc8+tN7kyWKA=
Subject key identifier: A8:7F:23:AD:E5:34:55:21:DB:12:8E:8A:60:45:2A:0B:15:D3:35:48
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0F2D
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/C45B78CEB0A511F0B38C1CA1DAE4EC9C.roa
Signing time: Fri 24 Oct 2025 06:50:46 +0000
ROA not before: Fri 24 Oct 2025 06:50:42 +0000
ROA not after: Sat 24 Oct 2026 06:50:42 +0000
asID: 55154
IP address blocks: 102.135.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3885 (0xf2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Oct 24 06:50:42 2025 GMT
Not After : Oct 24 06:50:42 2026 GMT
Subject: CN=68fb21c6-6b46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:13:f5:04:83:64:b6:2b:5b:c3:96:e0:45:5b:
0d:33:1a:75:ef:14:8b:c6:ac:32:92:03:76:a3:5f:
6a:c6:5c:26:f6:6e:39:c8:b8:05:99:cf:7b:e0:5d:
0c:c5:1d:9d:cf:cf:e3:0b:52:f8:44:be:94:9b:64:
b0:70:96:5c:27:89:9b:9a:ef:10:5e:31:8f:d3:2a:
d0:9e:08:f7:74:fe:a0:d1:3f:ee:ba:eb:2a:7e:4f:
0e:c0:09:98:49:d8:da:54:07:d5:dc:19:0a:06:43:
82:30:95:58:f5:20:73:38:38:e8:96:d9:96:67:c3:
5f:ad:0e:95:d0:59:40:d3:02:19:ae:2b:b1:e8:03:
ab:22:b0:a9:bb:f8:da:48:7c:32:bd:ed:8c:66:e6:
9c:21:74:75:73:bd:e5:26:61:4e:3b:a5:41:8d:33:
9c:e5:9d:8e:e8:a7:1b:a8:49:91:49:63:94:60:6e:
fe:6e:18:03:f3:2d:3e:30:42:ea:0a:99:00:ec:20:
07:df:e4:5d:d5:c5:dc:20:90:97:82:05:0d:7f:c6:
14:2b:7a:bb:31:28:b4:e7:b5:a0:c6:42:90:d5:90:
e4:ac:c6:9e:82:48:90:78:23:12:4b:0c:46:3f:43:
01:e6:98:11:b4:82:48:5c:e0:8c:75:40:f0:54:04:
87:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:7F:23:AD:E5:34:55:21:DB:12:8E:8A:60:45:2A:0B:15:D3:35:48
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/C45B78CEB0A511F0B38C1CA1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.73.0/24
Signature Algorithm: sha256WithRSAEncryption
80:8d:d8:93:49:b1:3b:51:8a:6f:e0:85:65:3a:f9:95:42:fa:
15:f4:d2:d2:45:b2:bd:5c:1a:6e:32:35:99:00:0e:b6:c5:3e:
44:af:5b:b4:38:6e:c0:10:ae:4d:39:9a:99:4a:67:b1:f5:94:
32:54:54:08:b6:60:df:56:05:1d:a6:1f:70:50:31:65:a6:bc:
c0:ac:c7:0e:f9:e8:95:a9:8a:51:ed:02:e6:14:02:13:bc:1e:
82:a5:f6:40:81:a1:ba:17:2a:2b:47:0a:b1:2c:30:b1:2f:68:
5b:cd:c9:bb:91:cd:41:b7:aa:7c:88:7f:e4:4f:30:ad:95:4a:
18:6f:ec:4d:68:6f:1d:6e:07:8e:cc:f2:58:8e:1b:df:da:b0:
c3:49:8e:52:a0:ca:c9:2e:0c:69:0a:e5:45:79:5d:2c:01:77:
5e:90:7e:5b:a4:58:09:7e:0b:b7:5b:e4:b6:ea:40:bb:5f:3d:
dc:08:33:b1:fc:c6:6f:6f:f4:04:b5:9d:91:72:6d:3d:f1:60:
b2:fa:58:7d:91:7d:9e:71:45:5e:40:69:16:bf:fc:0c:7b:de:
92:df:09:f1:e9:2a:0d:e1:f6:d3:c0:6f:c5:be:22:96:7a:28:
53:2e:01:5c:32:95:81:f8:c1:65:d3:bb:8c:00:c9:f5:48:6c:
7c:84:76:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:47:29 2025 by rpki-client