Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/203523D021CA11F186F2E4D4DAE4EC9C.roa
File: 203523D021CA11F186F2E4D4DAE4EC9C.roa (raw, json)
Hash identifier: E7oHJj+YaP36gTnDDGjswns+wWgen8/G8b89ucgmMX4=
Subject key identifier: C2:3E:FD:90:29:E9:00:6C:64:DF:2D:10:AD:00:CC:5D:F3:D1:46:D1
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 10A4
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/203523D021CA11F186F2E4D4DAE4EC9C.roa
Signing time: Tue 17 Mar 2026 06:25:44 +0000
ROA not before: Tue 17 Mar 2026 06:25:39 +0000
ROA not after: Wed 31 Mar 2027 06:25:39 +0000
asID: 200130
IP address blocks: 102.135.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4260 (0x10a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Mar 17 06:25:39 2026 GMT
Not After : Mar 31 06:25:39 2027 GMT
Subject: CN=69b8f3e8-f615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:59:df:9b:e8:d1:06:bf:27:cc:6b:b5:32:6e:
06:51:34:55:6a:9d:8a:8f:f3:e5:c5:ee:7f:94:fe:
ce:a9:e5:7b:9e:e3:d9:0e:88:75:2e:7a:2d:d9:6c:
8d:78:17:a0:e2:8c:7c:44:d5:4c:56:d0:46:9e:a3:
61:7a:c5:8d:da:e7:03:da:88:bc:f7:4d:64:0b:be:
c9:31:12:05:c6:6b:f3:a1:6e:9d:0c:ac:ee:b6:66:
ad:7e:50:4b:6d:7c:02:4f:f3:da:aa:36:94:17:2a:
93:99:52:de:d6:c4:ac:f9:46:e6:8e:70:b8:75:6d:
e3:1e:e0:16:e9:b5:73:ae:bc:b2:b0:18:76:ba:c0:
d3:00:6e:d4:91:db:19:f0:1f:db:7c:31:4e:ae:fa:
b0:4d:1f:67:17:24:8d:56:b6:c6:a0:31:8d:28:2d:
5f:e7:81:75:b2:33:d7:7e:00:df:19:09:1d:05:f5:
a0:a6:f7:1b:c4:3d:0f:fc:98:51:45:25:e0:22:d6:
8f:ec:30:ba:44:d9:7e:a1:c3:a1:cc:20:b5:1e:bc:
b6:3c:92:4b:d3:56:eb:2c:da:25:c6:1e:8e:27:89:
ff:d8:10:b2:13:55:c9:fc:c7:15:c9:2d:21:3b:6c:
33:f0:30:3e:65:af:0a:8b:fc:18:04:5d:96:55:94:
8a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:3E:FD:90:29:E9:00:6C:64:DF:2D:10:AD:00:CC:5D:F3:D1:46:D1
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/203523D021CA11F186F2E4D4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.0.0/24
Signature Algorithm: sha256WithRSAEncryption
66:7e:93:a9:80:cf:3d:2e:76:81:e6:e2:c1:f9:00:95:e9:2f:
af:04:b5:3b:30:86:94:59:69:5a:ee:f7:b7:68:7f:68:b7:f2:
c6:99:94:bd:62:8a:c8:ca:c7:57:a8:29:70:2c:ab:cd:fa:db:
cb:91:51:4d:64:51:07:d2:f8:92:ae:4e:c0:23:52:f0:fc:96:
a1:79:2b:a1:62:b6:a7:4a:ca:6e:12:f9:6d:84:5d:14:8d:0f:
0d:68:9e:ad:be:d6:fc:5c:11:b7:31:23:82:57:f8:b9:78:67:
e1:85:28:fb:25:81:bb:27:55:b0:66:a7:fb:25:1c:33:4e:31:
86:64:0d:9b:72:3f:80:37:58:4a:1d:2b:a2:f6:71:20:91:d8:
03:0f:50:3c:25:5a:6c:06:17:ea:98:c0:e0:20:de:a9:bb:f1:
a2:92:9e:81:13:67:a5:21:cf:b6:59:33:70:56:92:28:3c:e9:
e1:35:20:a8:d5:e4:9b:4c:6a:cd:eb:8a:6b:12:8b:cc:42:87:
34:dd:15:13:c9:04:6d:95:e8:73:f2:63:f8:55:ab:af:e7:0b:
bf:5d:41:da:f1:39:ca:44:eb:98:28:28:81:c2:90:7b:14:bf:
38:11:2c:53:0b:a2:dc:ba:0d:19:33:9e:60:f9:a7:98:24:e6:
63:1e:5a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:35:45 2026 by rpki-client