Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/814D95E2123611F1A9F29C84DAE4EC9C.roa
File: 814D95E2123611F1A9F29C84DAE4EC9C.roa (raw, json)
Hash identifier: MFnMMrCh2IoAojJ4bOEFEoR+XEiKIesy1T9O/oi5HAo=
Subject key identifier: D2:CD:D3:42:89:FA:06:1D:57:DC:31:2D:51:C7:79:52:3E:AA:1A:06
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 1071
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/814D95E2123611F1A9F29C84DAE4EC9C.roa
Signing time: Wed 25 Feb 2026 10:41:13 +0000
ROA not before: Wed 25 Feb 2026 10:41:09 +0000
ROA not after: Thu 25 Feb 2027 10:41:09 +0000
asID: 154488
IP address blocks: 102.135.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4209 (0x1071)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Feb 25 10:41:09 2026 GMT
Not After : Feb 25 10:41:09 2027 GMT
Subject: CN=699ed1c9-79b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ad:dc:83:cb:1f:87:cb:c8:6d:d2:0a:01:8c:
94:33:9e:88:ad:b4:82:37:23:48:c6:17:aa:7f:f9:
29:5a:8c:2a:cd:48:66:d6:ce:0a:d6:e8:f7:e6:38:
9a:a2:85:2c:3c:75:b5:52:d6:d0:4a:08:20:cf:3c:
3c:e8:11:c8:ce:e5:fe:36:0b:c6:3e:6d:23:b0:71:
20:4e:fe:c0:42:16:9d:4e:69:18:6d:57:42:78:ec:
cd:9b:75:cd:0f:0c:89:a9:be:bd:98:db:e2:5f:31:
b0:e8:a2:4a:f2:a9:3e:7a:6e:b3:9d:3c:b8:98:ae:
c7:24:a2:0c:97:cd:e0:2c:10:d2:f2:36:3d:dd:e5:
7d:6b:8f:4b:5d:f0:1f:4c:57:d6:65:08:c5:25:5a:
42:53:38:36:83:20:64:a8:c5:7c:29:35:cc:95:ed:
47:dd:df:1b:44:c6:6e:bf:dd:b0:a0:80:6b:0e:e9:
1d:a4:fc:df:3f:3b:bd:f9:20:10:40:f9:16:c9:32:
ee:f6:a7:88:9f:9c:20:8d:b6:ed:84:d5:75:3a:c5:
0c:f1:4a:ca:58:98:5a:4b:07:71:47:b2:ac:b0:fe:
f1:66:61:9a:0e:bc:21:77:cb:a8:77:04:3c:8e:bf:
68:77:53:23:53:a7:0c:a5:f3:bc:27:29:2f:21:c8:
6a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:CD:D3:42:89:FA:06:1D:57:DC:31:2D:51:C7:79:52:3E:AA:1A:06
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/814D95E2123611F1A9F29C84DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.108.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:78:d1:ef:92:94:36:77:3b:1a:a6:e4:06:99:65:e5:4a:d1:
61:83:69:d1:5e:96:6a:3b:27:ea:48:5c:c5:91:f5:2a:55:03:
05:52:7f:7f:bf:a6:c1:c4:1f:e1:4e:1d:73:2c:73:db:45:c8:
2d:37:38:4d:01:3a:c7:cb:04:33:93:d9:46:fd:b4:0e:95:a4:
3d:42:b8:2e:44:a3:96:41:97:ad:74:6a:45:16:23:dc:36:5b:
83:bf:e7:d4:75:53:8e:a2:e9:1c:48:c7:40:99:97:4d:fc:3c:
c0:d4:23:64:dd:7f:a9:2d:d3:53:3e:db:ff:c6:97:29:13:be:
ae:85:61:88:01:18:6e:6c:1f:91:96:69:cd:3c:c3:70:e9:38:
a6:b6:0c:cc:4b:fa:4d:80:c9:9f:da:82:f2:ea:1f:e9:bd:e2:
32:24:62:25:d1:20:52:f5:ef:9a:af:bf:1a:6b:13:c1:b7:8d:
e3:4a:20:20:c2:21:01:7a:65:95:a9:30:b1:39:b4:8f:f3:a9:
06:68:d1:b8:3c:f8:d9:d8:fe:23:e0:8a:72:c7:96:d6:26:81:
e3:fc:27:12:ee:8a:f4:34:71:b7:67:d7:b7:50:47:1e:37:95:
b7:2b:03:14:2f:d8:a3:e9:7b:20:03:4e:97:fb:34:95:23:77:
aa:0f:cc:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:27:35 2026 by rpki-client