Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/95D8C046121711F1AD37FFC9DAE4EC9C.roa
File: 95D8C046121711F1AD37FFC9DAE4EC9C.roa (raw, json)
Hash identifier: ThZcc+gfBpUSJg2RvIwa5Pr8spTuND7TXOa48uHj9Tg=
Subject key identifier: 5D:C0:26:B3:0F:0C:07:C3:33:BE:CB:5F:50:02:3E:C7:AD:E0:B9:AF
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 1060
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/95D8C046121711F1AD37FFC9DAE4EC9C.roa
Signing time: Wed 25 Feb 2026 06:59:53 +0000
ROA not before: Wed 25 Feb 2026 06:59:50 +0000
ROA not after: Thu 25 Feb 2027 06:59:50 +0000
asID: 212238
IP address blocks: 102.135.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4192 (0x1060)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Feb 25 06:59:50 2026 GMT
Not After : Feb 25 06:59:50 2027 GMT
Subject: CN=699e9de9-cdc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:57:87:cc:78:1d:8b:32:c6:a8:25:af:d0:5c:
8a:50:35:e3:b8:2b:c1:d5:c5:53:32:34:dd:4d:cc:
56:ee:69:e9:f9:30:2e:eb:9d:32:25:7b:e8:f9:b5:
a1:30:f1:fb:17:0f:12:c7:3a:70:05:0a:f3:b9:87:
46:62:8c:60:1b:45:8c:5f:5b:1f:74:83:f2:77:c7:
f1:83:ae:73:3d:9f:2c:2d:46:6b:7b:3f:fd:9c:02:
d8:c2:85:1f:64:5c:32:97:64:5c:88:35:cb:f5:34:
db:54:4f:90:6e:56:a1:6d:b8:1a:1f:d8:97:92:3c:
af:e2:ae:36:8e:5c:fa:fb:65:1e:24:f1:3c:ae:d6:
2f:f5:c3:04:fd:d8:fc:d0:a1:10:14:e5:c3:c6:a4:
2f:18:d7:14:e4:40:3f:bb:d5:3c:32:9a:0d:48:b4:
5d:50:5a:9e:d7:02:ed:c9:24:c2:84:46:c8:d4:73:
63:95:e9:b8:6a:7a:a5:02:f7:fe:0c:97:5c:44:b7:
9c:b4:e4:81:7c:d0:18:21:e5:bc:c9:b6:4a:45:b7:
cd:30:32:38:42:41:ef:76:fb:ad:ac:81:62:9f:f3:
b2:44:1e:2e:7c:fe:9d:60:10:c7:25:e0:34:3d:28:
91:38:70:03:dd:06:6a:bb:fb:1a:85:6c:9f:0c:17:
4a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:C0:26:B3:0F:0C:07:C3:33:BE:CB:5F:50:02:3E:C7:AD:E0:B9:AF
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/95D8C046121711F1AD37FFC9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.15.0/24
Signature Algorithm: sha256WithRSAEncryption
35:b0:57:63:39:9f:23:4a:df:08:17:ae:9b:3e:ff:71:fd:fa:
38:69:21:8b:96:d6:d9:cb:f3:43:37:49:9f:8a:f0:e3:c3:90:
5b:84:04:11:1e:9b:72:8b:73:6b:27:e8:66:43:6a:a9:c9:75:
4f:04:f5:d3:6f:30:81:f9:98:7e:50:c7:bf:1d:9f:78:e3:79:
09:15:84:c4:7a:1b:e0:3d:43:5b:ad:c3:52:b9:c4:ee:d8:1e:
d1:5b:0d:21:78:f8:60:3e:b4:2c:77:cd:ab:fe:c8:11:9f:73:
f8:1a:af:67:95:56:bf:e3:59:7d:24:e4:10:9e:91:71:76:63:
86:98:e5:bf:5a:91:2a:11:d3:91:de:69:f4:3a:2e:ad:3d:8d:
45:5e:07:79:30:5a:36:a4:21:f4:e7:a6:26:02:b4:54:e0:18:
f1:f2:1e:ae:55:83:1b:d2:66:47:a8:15:43:89:df:08:9f:e2:
f7:80:0c:00:2e:bc:42:2e:11:a5:ee:bf:ea:29:0f:dd:ec:38:
2c:3e:16:e6:ba:4b:00:b0:06:0c:06:a7:28:79:a1:51:6c:c9:
da:07:f4:fb:33:fe:bf:4e:65:f9:66:ea:70:af:59:05:6a:3e:
d5:b7:6e:7d:de:57:63:5a:fa:c7:33:34:bd:92:20:89:1a:39:
69:1c:c8:c3
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICEGAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNjAyMjUwNjU5NTBaFw0yNzAyMjUwNjU5NTBaMBgxFjAU
BgNVBAMTDTY5OWU5ZGU5LWNkYzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC5V4fMeB2LMsaoJa/QXIpQNeO4K8HVxVMyNN1NzFbuaen5MC7rnTIle+j5
taEw8fsXDxLHOnAFCvO5h0ZijGAbRYxfWx90g/J3x/GDrnM9nywtRmt7P/2cAtjC
hR9kXDKXZFyINcv1NNtUT5BuVqFtuBof2JeSPK/irjaOXPr7ZR4k8Tyu1i/1wwT9
2PzQoRAU5cPGpC8Y1xTkQD+71Twymg1ItF1QWp7XAu3JJMKERsjUc2OV6bhqeqUC
9/4Ml1xEt5y05IF80Bgh5bzJtkpFt80wMjhCQe92+62sgWKf87JEHi58/p1gEMcl
4DQ9KJE4cAPdBmq7+xqFbJ8MF0pzAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUXcAm
sw8MB8MzvstfUAI+x63gua8wHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3Lzk1RDhDMDQ2MTIxNzExRjFBRDM3RkZDOURBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmhw8wDQYJKoZIhvcNAQEL
BQADggEBADWwV2M5nyNK3wgXrps+/3H9+jhpIYuW1tnL80M3SZ+K8OPDkFuEBBEe
m3KLc2sn6GZDaqnJdU8E9dNvMIH5mH5Qx78dn3jjeQkVhMR6G+A9Q1utw1K5xO7Y
HtFbDSF4+GA+tCx3zav+yBGfc/gar2eVVr/jWX0k5BCekXF2Y4aY5b9akSoR05He
afQ6Lq09jUVeB3kwWjakIfTnpiYCtFTgGPHyHq5VgxvSZkeoFUOJ3wif4veADAAu
vEIuEaXuv+opD93sOCw+Fua6SwCwBgwGpyh5oVFsydoH9Psz/r9OZflm6nCvWQVq
PtW3bn3eV2Na+sczNL2SIIkaOWkcyMM=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:06:32 2026 by rpki-client