Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/5C839578127611F1818B7982DAE4EC9C.roa
File: 5C839578127611F1818B7982DAE4EC9C.roa (raw, json)
Hash identifier: Wcym0mVDPzzDM4CVnJX8jnLkZwkhR4kmBxVpTcPdC3U=
Subject key identifier: D7:DA:EF:23:5B:20:18:CF:9B:45:73:B4:FB:F5:75:CF:4D:80:9E:F7
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 107E
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/5C839578127611F1818B7982DAE4EC9C.roa
Signing time: Wed 25 Feb 2026 18:18:19 +0000
ROA not before: Wed 25 Feb 2026 18:18:15 +0000
ROA not after: Thu 25 Feb 2027 18:18:15 +0000
asID: 401838
IP address blocks: 102.135.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 01:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4222 (0x107e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Feb 25 18:18:15 2026 GMT
Not After : Feb 25 18:18:15 2027 GMT
Subject: CN=699f3ceb-8a2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:04:a7:d9:01:ae:05:c6:11:55:d3:63:f3:38:
17:15:88:7b:b6:3b:8f:6e:2d:c1:74:dd:aa:16:40:
9d:84:ec:c8:3e:bc:d5:50:7f:a8:a9:b9:c0:e5:2d:
81:a9:50:4a:e9:01:44:e5:83:65:f7:cf:be:90:c3:
2d:ac:63:c8:b1:14:d9:7d:ee:23:c2:c0:c5:9b:05:
e9:fe:19:1c:5e:09:d8:b7:f1:f7:00:55:fa:36:f9:
e6:31:96:d1:41:8c:68:44:25:33:d1:ec:dd:c9:b3:
96:6a:10:6c:00:e2:a2:b8:f3:d6:c6:bf:cf:b0:0c:
c3:40:0a:eb:79:0c:75:6f:9d:e2:7b:62:f5:99:3d:
04:49:f4:3c:9f:93:73:e6:bf:79:e0:e9:13:5e:1a:
11:1f:fe:ff:6b:c5:29:eb:d2:84:af:12:e1:64:b4:
88:07:c9:bb:21:ac:60:59:84:92:e7:e1:0d:66:d8:
fa:ad:32:6a:c1:f6:64:15:cf:06:fc:66:c7:87:2d:
26:9e:9b:a1:d1:59:d2:e8:8f:dd:ec:28:a0:43:f3:
e9:03:98:00:f9:8f:c3:34:ab:68:24:22:7e:73:e3:
19:98:90:ea:6f:6b:8c:c1:fe:c2:42:6f:ca:9c:ec:
7b:17:90:4b:cb:3a:94:40:bb:ee:7e:c3:bf:ad:d5:
2e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:DA:EF:23:5B:20:18:CF:9B:45:73:B4:FB:F5:75:CF:4D:80:9E:F7
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/5C839578127611F1818B7982DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.23.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:35:82:41:ab:16:f5:5a:eb:87:36:b1:9a:e4:79:82:17:18:
0f:5f:57:03:42:fa:73:e2:5e:85:5a:9d:48:7b:08:b9:64:59:
55:20:ac:48:b6:4b:57:ed:0e:0c:98:c9:e8:d0:e5:ab:1b:46:
39:79:10:d6:2d:fc:20:ae:35:17:da:98:60:47:d9:74:9a:14:
1d:f6:92:78:fc:16:ab:73:52:ef:68:7f:0d:30:9f:43:df:6f:
85:55:6b:44:58:2f:2d:03:de:f4:f6:cc:ad:25:20:f2:27:36:
bb:4c:30:47:fc:7c:75:43:1d:bd:72:17:fc:2d:a2:33:70:9c:
d2:b0:a9:b1:1a:39:f2:87:4b:72:46:7a:36:2d:f4:38:f8:9e:
7d:b8:b8:59:d6:9d:bf:92:a1:c2:a3:ec:3c:23:95:0d:f0:dc:
f4:52:b5:6b:97:af:6f:5b:79:f0:3a:71:c9:9c:6b:0e:1d:c2:
f9:04:fb:a3:56:46:92:5f:15:11:87:cc:a3:79:93:7a:3f:3b:
40:99:df:e8:fd:d6:4f:b0:d1:5a:5e:5b:e9:0c:f6:7f:1d:93:
8e:60:cd:3b:d2:a3:c3:a9:79:47:41:b2:bc:e9:ec:8b:5b:39:
05:a0:ad:74:0f:5f:f2:cf:68:61:63:fb:41:9e:6e:e3:76:d8:
c7:6e:d5:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:55:01 2026 by rpki-client