Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/023ED83E47A011F1AC7A89E8CE1D38B0.roa
File: 023ED83E47A011F1AC7A89E8CE1D38B0.roa (raw, json)
Hash identifier: gSqJC2nVE7zsSBvxcJdsx1xgPf8HYPxPSPf3H4d2j9A=
Subject key identifier: 1F:13:55:12:1D:E3:D1:B8:FC:D2:E6:64:5E:D2:1D:5C:35:70:BB:45
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 112E
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/023ED83E47A011F1AC7A89E8CE1D38B0.roa
Signing time: Mon 04 May 2026 09:59:59 +0000
ROA not before: Mon 04 May 2026 09:59:54 +0000
ROA not after: Wed 05 May 2027 09:59:54 +0000
asID: 55154
IP address blocks: 196.251.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 14 May 2026 10:40:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4398 (0x112e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: May 4 09:59:54 2026 GMT
Not After : May 5 09:59:54 2027 GMT
Subject: CN=69f86e1e-89d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:50:3d:c3:9a:4e:e4:4c:5c:d5:67:da:ce:c0:
a8:44:1b:67:51:af:4a:d4:93:96:e6:47:68:2a:d1:
d6:38:28:7c:22:0e:37:77:51:cd:8e:e9:ed:07:43:
70:06:66:c3:cf:ba:8b:59:7f:59:36:aa:08:5a:24:
b3:58:f7:4b:84:00:f9:f7:5a:df:58:da:2d:2e:10:
69:d2:b7:9f:d6:d5:92:57:f6:d7:fb:28:e4:b4:b1:
42:3b:3c:dd:f0:82:85:bd:1a:22:41:85:6d:fe:30:
d3:9d:a8:ca:b5:c4:b6:e9:06:1e:30:30:81:44:ce:
fa:cd:bc:71:09:08:3e:0b:7b:93:5a:ed:68:6c:d0:
f7:9a:f2:8e:1d:80:bd:b7:17:c8:db:9d:ef:4e:80:
cd:27:89:ed:e1:3c:c8:6f:85:c6:27:03:2a:3a:29:
43:5a:7e:a5:81:53:e0:4b:1d:a5:70:bb:b0:cb:c2:
08:c2:ed:b7:3f:c6:df:4a:e9:c3:f8:fb:88:0b:43:
38:08:c2:0a:b5:48:90:45:70:08:54:d8:a1:b2:5a:
a1:49:bf:d7:ca:85:50:bd:9b:49:08:73:e1:83:4a:
69:bd:3e:f1:89:39:b0:a4:bf:70:15:fc:c1:93:1d:
12:fc:7b:c9:40:c1:56:c1:13:46:27:5d:10:3f:fe:
d7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:13:55:12:1D:E3:D1:B8:FC:D2:E6:64:5E:D2:1D:5C:35:70:BB:45
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/023ED83E47A011F1AC7A89E8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.67.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:1c:0c:a6:26:4d:d0:7f:94:84:03:10:69:b2:0d:26:f4:41:
6d:1c:fe:03:bd:5b:7d:77:c6:8d:2a:ad:12:15:f3:9e:25:52:
cf:07:1b:d8:86:07:2e:4f:92:49:23:e3:04:06:dd:2b:0f:c4:
2c:55:54:73:8e:ac:cc:f0:89:79:eb:7e:37:54:91:ad:af:6a:
9d:53:77:9e:ef:07:fa:2e:06:91:36:f8:cf:a6:76:69:3a:a6:
51:83:fa:98:b7:c0:3d:3b:cc:1b:1a:64:7d:7c:cb:a1:4a:e3:
40:05:2f:77:d1:8e:59:7e:e1:2a:3c:24:17:03:3d:c6:79:3a:
a7:48:1b:52:36:d5:e2:9e:08:c2:aa:fa:72:a6:be:2c:ca:4b:
af:38:75:c7:5e:7f:cd:aa:6c:f3:9f:33:04:e8:ce:f6:8f:91:
15:3f:de:8f:05:46:27:60:76:97:a4:20:3f:22:bf:2f:b3:4f:
49:b4:a7:70:9f:06:a3:9a:79:61:e7:9c:8b:dd:7d:f5:54:a1:
7b:70:29:cf:fb:62:e7:d4:c4:d2:24:e1:ea:f1:60:98:86:65:
6c:b6:15:8e:f6:e5:e8:dc:b1:b5:31:71:0c:f7:4a:77:43:26:
a6:6d:77:88:ef:c5:a6:a0:f1:83:fb:f7:a7:ef:d2:ac:b7:4d:
9c:89:52:d7
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICES4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNjA1MDQwOTU5NTRaFw0yNzA1MDUwOTU5NTRaMBgxFjAU
BgNVBAMTDTY5Zjg2ZTFlLTg5ZDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC1UD3Dmk7kTFzVZ9rOwKhEG2dRr0rUk5bmR2gq0dY4KHwiDjd3Uc2O6e0H
Q3AGZsPPuotZf1k2qghaJLNY90uEAPn3Wt9Y2i0uEGnSt5/W1ZJX9tf7KOS0sUI7
PN3wgoW9GiJBhW3+MNOdqMq1xLbpBh4wMIFEzvrNvHEJCD4Le5Na7Whs0Pea8o4d
gL23F8jbne9OgM0nie3hPMhvhcYnAyo6KUNafqWBU+BLHaVwu7DLwgjC7bc/xt9K
6cP4+4gLQzgIwgq1SJBFcAhU2KGyWqFJv9fKhVC9m0kIc+GDSmm9PvGJObCkv3AV
/MGTHRL8e8lAwVbBE0YnXRA//tc3AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUHxNV
Eh3j0bj80uZkXtIdXDVwu0UwHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3LzAyM0VEODNFNDdBMDExRjFBQzdBODlFOENFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADE+0MwDQYJKoZIhvcNAQEL
BQADggEBAB4cDKYmTdB/lIQDEGmyDSb0QW0c/gO9W313xo0qrRIV854lUs8HG9iG
By5Pkkkj4wQG3SsPxCxVVHOOrMzwiXnrfjdUka2vap1Td57vB/ouBpE2+M+mdmk6
plGD+pi3wD07zBsaZH18y6FK40AFL3fRjll+4So8JBcDPcZ5OqdIG1I21eKeCMKq
+nKmvizKS684dcdef82qbPOfMwTozvaPkRU/3o8FRidgdpekID8ivy+zT0m0p3Cf
BqOaeWHnnIvdffVUoXtwKc/7YufUxNIk4erxYJiGZWy2FY725ejcsbUxcQz3SndD
JqZtd4jvxaag8YP796fv0qy3TZyJUtc=
-----END CERTIFICATE-----
Generated at Wed May 13 05:15:08 2026 by rpki-client