Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/D36EF05CB0A511F0BFCFE9A2DAE4EC9C.roa
File: D36EF05CB0A511F0BFCFE9A2DAE4EC9C.roa (raw, json)
Hash identifier: YhTipUylgcZqd+Xby+Wj1VEvGexeb7elDlG6g2qPH7o=
Subject key identifier: 10:6C:D7:ED:D8:1B:98:DD:E5:2C:E7:C5:62:ED:54:EA:8E:5A:71:0A
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0F2F
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/D36EF05CB0A511F0BFCFE9A2DAE4EC9C.roa
Signing time: Fri 24 Oct 2025 06:51:11 +0000
ROA not before: Fri 24 Oct 2025 06:51:07 +0000
ROA not after: Sat 24 Oct 2026 06:51:07 +0000
asID: 55154
IP address blocks: 102.135.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3887 (0xf2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Oct 24 06:51:07 2025 GMT
Not After : Oct 24 06:51:07 2026 GMT
Subject: CN=68fb21df-3b76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1c:d0:37:1a:a6:d8:87:53:5f:3a:42:dc:56:
0a:fe:97:24:8f:97:7d:1d:5e:19:ab:4d:e3:da:8c:
1f:1f:55:40:1a:f5:30:94:4c:10:f0:1e:35:12:b2:
4e:2d:db:a9:07:43:bc:04:30:2c:2d:da:14:d9:6a:
8b:62:82:43:12:5e:d9:14:7a:58:1a:65:3e:8d:c5:
63:bb:ae:1f:77:a2:e7:6f:5c:f2:05:cd:e8:fa:3e:
42:01:e8:b6:64:16:db:3c:35:73:6d:b2:b6:8c:0d:
55:74:56:d4:d1:ad:f2:a1:03:28:5c:c2:0e:92:fb:
03:38:58:60:81:87:23:89:ef:19:50:69:db:2b:a6:
5f:2c:46:c1:3d:76:3b:e0:0e:a4:e3:06:9a:9a:f1:
5f:49:92:b4:97:21:88:68:d3:76:e1:a6:c1:22:12:
af:a8:c6:ce:a3:1b:e0:60:4e:33:40:70:28:b0:fe:
92:06:0a:41:ea:3d:40:fb:f6:0a:2e:a7:1d:04:70:
ec:9a:49:c0:86:21:ff:5a:58:d9:42:ae:fb:23:3e:
8b:a1:e9:72:45:e4:35:44:31:86:d2:5f:99:a8:f3:
2c:7a:7b:9e:76:46:5e:85:43:89:a3:6e:3f:a0:e4:
a9:7c:5d:8f:64:d1:66:ae:7c:35:0b:96:e4:ba:94:
99:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:6C:D7:ED:D8:1B:98:DD:E5:2C:E7:C5:62:ED:54:EA:8E:5A:71:0A
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/D36EF05CB0A511F0BFCFE9A2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.44.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:2c:be:2c:10:a8:1c:55:a4:79:96:ae:45:9f:00:90:e1:d9:
3d:ca:ac:6f:f9:ab:f8:08:65:ec:e8:90:e7:b3:f5:65:69:ce:
84:43:bb:3d:a1:5d:36:e6:99:c8:c9:9b:53:ad:b2:55:22:4b:
4d:dc:ba:0f:5e:23:9a:40:79:1e:a9:74:67:90:31:c5:74:da:
30:41:23:53:6e:4c:8a:36:57:5e:cc:06:3f:5d:33:e7:cc:a3:
67:c8:fc:7f:04:5a:be:40:11:56:22:57:57:41:39:32:b3:93:
be:25:f2:78:e8:fc:01:8e:48:f5:d5:89:3c:fd:0f:6b:64:ab:
7f:58:85:57:b7:4a:70:4b:3c:b1:4e:58:c9:fc:83:0a:77:bc:
48:ab:fd:a7:26:ba:8f:77:59:98:67:8b:23:6a:08:fc:73:b5:
2b:f0:be:16:81:4f:28:8f:7e:c6:d8:cb:f2:77:a8:4d:15:23:
0d:50:af:ac:5f:09:8b:1c:c3:2b:fe:07:86:91:29:e8:55:8e:
ec:c3:fb:c4:8c:fc:ae:10:18:f4:94:85:91:81:c5:7e:27:fc:
d3:ac:d8:f0:e7:2c:b0:3c:73:4d:dc:75:c1:e2:23:fb:0f:e0:
10:04:ae:3e:71:0f:f6:3f:17:f5:28:b8:da:2f:52:19:37:38:
77:52:28:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:22:49 2025 by rpki-client