Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/CD5ED2F8688F11F089858EECDAE4EC9C.roa
File: CD5ED2F8688F11F089858EECDAE4EC9C.roa (raw, json)
Hash identifier: fYxkSvCI20qFLMPJC+yvh+ciJ5CR/HddkjwWMWFuwrk=
Subject key identifier: 57:B5:0D:E8:4A:DC:EF:74:1D:A9:40:D5:22:97:F7:B8:60:49:CD:D4
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0CA8
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/CD5ED2F8688F11F089858EECDAE4EC9C.roa
Signing time: Thu 24 Jul 2025 13:12:09 +0000
ROA not before: Thu 24 Jul 2025 13:12:04 +0000
ROA not after: Tue 01 Dec 2026 13:12:04 +0000
asID: 9009
IP address blocks: 102.135.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:07:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3240 (0xca8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Jul 24 13:12:04 2025 GMT
Not After : Dec 1 13:12:04 2026 GMT
Subject: CN=68823129-5ada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6c:93:1c:7f:33:1f:70:7e:7b:06:af:1b:08:
12:79:6c:9a:f0:ee:aa:88:70:a4:82:9c:8e:d2:df:
22:54:e5:1b:1f:42:de:66:24:ea:8f:90:ba:48:fd:
df:3e:26:26:5c:2c:2f:a1:c8:64:fa:8b:3a:30:d4:
6a:8b:51:a2:1f:68:63:af:83:b4:e5:45:f6:13:62:
e3:e7:43:d0:59:74:07:f0:5f:3b:ec:70:d6:81:25:
65:50:52:96:0a:08:2a:a7:fd:ba:c5:fb:dd:2d:60:
96:9a:15:fd:ee:f4:e3:9b:76:6f:e8:d4:4e:0a:a6:
3f:2e:f7:ba:99:58:e3:ad:55:f8:d1:76:98:34:1d:
71:c4:9d:38:e9:a1:12:00:8c:68:64:83:b2:f0:49:
0f:9c:24:95:d0:38:bd:97:d3:89:7c:47:97:d4:30:
26:06:18:ad:fc:c0:b6:05:c2:64:eb:7b:25:69:4d:
fc:fc:c2:c2:51:b6:d1:d3:87:96:89:fd:6c:4f:0f:
f8:8a:d0:51:b2:51:4c:49:40:11:8d:e5:d7:2e:2d:
fd:d9:86:00:d1:87:08:4a:ff:bc:7a:7a:43:19:0a:
b6:29:da:4f:4f:d0:6f:8e:f0:f9:68:72:d8:97:07:
d4:f6:f7:29:8c:dc:88:53:ed:90:05:2a:22:d1:5a:
8f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:B5:0D:E8:4A:DC:EF:74:1D:A9:40:D5:22:97:F7:B8:60:49:CD:D4
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/CD5ED2F8688F11F089858EECDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.26.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:31:57:8e:b4:50:1b:72:24:39:9a:6e:55:1f:fc:36:17:87:
fa:93:9c:4b:fb:99:e2:b2:2b:00:72:77:8a:40:78:12:5a:47:
d1:2f:cc:93:0b:43:d9:93:e4:65:2e:9d:a1:5c:fb:44:5a:96:
5b:a7:c0:44:1f:bb:1c:47:29:25:22:d5:b8:b0:c6:fc:f5:6c:
2e:bd:b0:ec:e8:7d:11:4f:9b:34:44:e8:24:ec:38:c1:1f:cf:
8a:42:64:98:95:26:3e:a8:c6:c7:95:55:53:fc:16:fd:db:a9:
13:34:a3:e0:1e:3b:7c:b0:07:f5:fb:04:3b:7e:d0:71:80:b2:
83:50:aa:1f:82:08:a8:06:82:2a:29:13:ab:e6:00:82:ce:3f:
c1:e2:0b:44:79:fc:d0:ed:c6:ec:05:ff:e7:7e:4a:97:a0:3c:
e2:30:83:05:47:b3:d2:2e:37:0f:70:9e:dd:c1:12:b1:ab:2b:
aa:48:13:91:7f:e0:ce:70:02:17:ac:8c:35:36:41:91:87:ea:
0d:4a:21:3f:9d:cc:1a:d6:ee:92:62:d1:ea:b3:e8:53:62:8e:
43:37:5d:8b:c4:8b:b8:40:ab:12:80:50:d8:45:e3:70:b7:cb:
65:bb:08:1c:c6:15:60:b1:f0:71:d9:9a:ec:7e:63:38:62:7d:
cb:fe:7a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:56:08 2025 by rpki-client