Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/0471FE3421CA11F193F17AD4DAE4EC9C.roa
File: 0471FE3421CA11F193F17AD4DAE4EC9C.roa (raw, json)
Hash identifier: zV7oHZlMa8hdLks6AVZZ4826DXI74ytZqFzO0qZv+b4=
Subject key identifier: 5A:01:7F:C6:A9:A6:8F:2C:38:D9:E0:3C:87:4F:57:B7:B8:AB:FD:C8
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 10A0
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/0471FE3421CA11F193F17AD4DAE4EC9C.roa
Signing time: Tue 17 Mar 2026 06:24:57 +0000
ROA not before: Tue 17 Mar 2026 06:24:52 +0000
ROA not after: Wed 31 Mar 2027 06:24:52 +0000
asID: 200130
IP address blocks: 196.251.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4256 (0x10a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Mar 17 06:24:52 2026 GMT
Not After : Mar 31 06:24:52 2027 GMT
Subject: CN=69b8f3b9-57cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:69:22:7f:73:b9:6b:04:22:d6:b1:89:a1:df:
1f:37:78:9a:a4:0f:b5:eb:bc:60:9f:8f:c1:89:08:
db:69:4a:b3:a6:57:74:69:94:68:98:39:1a:08:99:
95:30:45:ba:ed:3f:5f:f5:e3:1b:a7:2a:23:16:f8:
19:c4:45:ec:f1:a1:b5:6c:57:e7:8e:43:94:a0:36:
49:24:0e:c7:37:50:ed:cd:64:5e:a6:43:1b:6d:2a:
f4:5d:03:51:d8:af:a1:b9:db:bd:1c:ab:0d:cf:d2:
57:68:4c:89:3a:58:b6:2c:59:86:cb:44:05:b9:54:
8e:30:46:29:39:58:4d:24:52:b5:42:00:81:e1:6f:
a3:6a:63:90:41:1b:79:46:a3:34:41:33:5d:23:64:
9a:28:5b:65:e0:f7:eb:46:a6:65:6b:f4:79:57:93:
26:b1:b0:a0:df:ee:f3:b4:e2:cb:bb:1e:3f:11:d8:
f1:c3:4b:a2:a4:e2:48:77:d2:2a:50:da:38:86:2f:
6f:83:4b:22:5b:46:82:b5:91:84:32:6f:27:8e:92:
cd:2a:fa:48:38:eb:63:9e:9c:0e:d9:73:24:f0:d7:
5c:6c:38:b3:ca:16:9a:49:d4:c5:02:ad:c2:33:1f:
dc:44:61:a0:e2:97:51:14:92:00:76:0c:9c:f0:33:
ee:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:01:7F:C6:A9:A6:8F:2C:38:D9:E0:3C:87:4F:57:B7:B8:AB:FD:C8
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/0471FE3421CA11F193F17AD4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.100.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:62:61:5d:13:70:eb:ca:67:02:63:9b:2f:51:17:58:97:c4:
a8:01:59:90:a6:ce:26:ae:3c:93:05:08:a4:4d:75:5a:64:b7:
a6:99:61:93:08:de:5d:a5:6a:d3:0b:5a:94:3d:a9:1d:1f:10:
c8:52:49:43:3b:2b:43:10:7d:6e:0c:0c:9e:21:ac:89:f9:42:
0d:9e:6f:be:81:c1:e2:e6:cd:a6:ff:f9:e0:7c:9a:47:2c:b3:
9b:9c:b5:bd:ed:99:d5:41:8c:9a:1d:80:4a:d3:38:dd:d9:3b:
d4:e7:55:f9:ed:d7:9e:b7:1f:96:f2:11:34:67:92:a0:6c:30:
3e:80:7b:0b:0f:e5:06:05:6f:4f:92:85:88:73:10:aa:37:28:
3c:86:96:9a:39:16:85:9e:5d:fd:ff:ca:6c:24:31:e8:63:43:
d0:96:82:f1:c0:5d:aa:e6:fe:7a:86:30:6d:b2:50:0d:d7:2c:
78:9a:16:e0:27:24:92:42:d3:13:d5:6b:58:2a:d8:5c:f9:62:
72:8b:48:75:44:b0:fc:8e:5c:35:6d:38:2f:5d:38:2d:86:73:
f4:b4:d6:81:2c:40:99:60:be:20:a9:4d:ec:3c:0c:6b:bb:a7:
28:ee:c8:bf:e0:6f:a3:1e:6d:db:e7:82:d1:b7:96:be:ff:3f:
a2:e2:4d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:35:44 2026 by rpki-client