Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/F968B4284DEE11F1863BD9C4CE1D38B0.roa
File: F968B4284DEE11F1863BD9C4CE1D38B0.roa (raw, json)
Hash identifier: B9rOUo13mvbxkS2Cif8LuyOE9WgdnQ7pEiGlsRoE+Ww=
Subject key identifier: 36:E4:60:80:7C:4F:86:A8:B9:F9:24:0D:20:27:7D:91:97:9B:EE:E1
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 114D
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/F968B4284DEE11F1863BD9C4CE1D38B0.roa
Signing time: Tue 12 May 2026 10:40:21 +0000
ROA not before: Tue 12 May 2026 10:40:16 +0000
ROA not after: Wed 12 May 2027 10:40:16 +0000
asID: 213388
IP address blocks: 102.135.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:07:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4429 (0x114d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: May 12 10:40:16 2026 GMT
Not After : May 12 10:40:16 2027 GMT
Subject: CN=6a030395-30d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0e:f8:4a:26:ec:e4:33:a4:66:4b:7b:2c:5b:
35:b7:b5:6d:db:d9:6c:90:e4:6e:a7:e1:c1:a0:f4:
85:d8:8b:fe:2a:20:4f:fc:d7:27:8f:08:d3:f5:f2:
bf:47:1d:a2:94:30:fb:c4:ec:a0:70:b6:eb:8e:68:
92:de:d3:e4:e2:c3:4f:ce:76:c4:5c:22:8b:84:82:
2d:a6:fc:df:e2:da:5e:02:30:78:e3:f0:2b:23:37:
43:6a:16:fa:a9:c7:87:f4:cf:13:8f:e8:54:39:5e:
4a:1f:2e:5d:d3:f2:60:7e:5f:d2:9a:1d:a4:3d:42:
7b:4f:94:24:71:49:20:f2:5c:ca:85:a3:25:00:40:
9e:ea:1e:44:66:e2:62:a8:f2:6b:47:21:59:3d:ff:
d5:a2:11:ac:bc:e9:e8:f1:7b:3d:93:74:68:30:d0:
ba:26:ac:fb:23:d9:53:a3:1d:f7:1a:b9:1a:2f:ca:
d2:c5:40:86:3c:97:c3:96:fb:4e:94:ad:a5:71:89:
eb:64:76:da:b9:71:a7:3e:17:58:ea:59:19:e6:d2:
f5:d6:3c:0c:a2:d8:e1:f8:d5:45:45:22:44:28:e9:
a0:05:a8:c0:99:8e:ba:37:d9:9c:ff:3b:e0:1c:68:
23:e8:d1:b4:b7:dd:b0:e4:1f:d7:62:61:e1:ce:41:
91:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E4:60:80:7C:4F:86:A8:B9:F9:24:0D:20:27:7D:91:97:9B:EE:E1
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/F968B4284DEE11F1863BD9C4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.45.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:ec:03:24:60:d1:24:a9:c9:28:b1:86:5c:f1:8b:ac:b6:8f:
65:79:bc:8c:a9:b0:cf:8b:94:cb:03:96:89:5c:b7:8d:bf:de:
cf:12:01:04:c8:0f:d6:34:50:41:3a:38:11:5b:d6:c9:ca:5f:
71:53:49:c9:95:45:a7:b0:82:c5:61:f9:66:56:28:de:57:f4:
4d:65:c8:d9:25:c5:09:78:01:42:f0:02:ba:b6:6c:ec:e6:3a:
60:e0:a8:1a:e8:7c:4b:c3:65:b0:56:f1:49:a3:4a:1f:49:22:
e3:06:fa:7b:fa:f4:b9:72:e6:40:e0:ee:b5:83:3e:c7:98:d7:
4d:1d:ff:f1:ba:fa:e7:1d:5d:9c:8d:ab:ad:ba:8a:d8:15:2c:
51:29:06:dc:7f:a2:90:76:bd:55:d4:e7:d6:f1:bd:b8:44:5b:
92:3a:ed:69:54:d2:5e:8f:d4:29:73:d3:38:4b:72:eb:28:ea:
da:05:c7:c3:af:11:f6:41:9f:dd:0e:76:9b:e3:1e:60:ac:b2:
d0:13:d8:8a:16:50:29:47:8c:9e:4a:f3:ee:29:4d:87:6e:e5:
84:a1:a5:1d:17:e0:57:1c:31:fa:10:64:61:d2:61:ae:55:75:
1c:c6:19:45:7c:4b:ad:62:d9:c4:ce:64:5d:6d:24:24:96:9b:
09:79:22:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:55:49 2026 by rpki-client