Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/CB00CD20133611F192B77C9DDAE4EC9C.roa
File: CB00CD20133611F192B77C9DDAE4EC9C.roa (raw, json)
Hash identifier: EnX4FiJMbZsBiRy37zDGZqdb/W0Xtk6nLE8hDKNhHo4=
Subject key identifier: 9B:50:CA:F8:67:E4:AB:A1:0F:81:45:AF:A2:4D:12:09:9F:B3:FD:A5
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 1081
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/CB00CD20133611F192B77C9DDAE4EC9C.roa
Signing time: Thu 26 Feb 2026 17:15:48 +0000
ROA not before: Fri 27 Feb 2026 17:15:43 +0000
ROA not after: Thu 25 Feb 2027 17:15:43 +0000
asID: 401838
IP address blocks: 102.135.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4225 (0x1081)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Feb 27 17:15:43 2026 GMT
Not After : Feb 25 17:15:43 2027 GMT
Subject: CN=69a07fc4-1566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c8:78:b7:3a:81:cd:70:4d:e7:39:d0:fe:5c:
4d:83:b3:94:6b:0f:00:90:44:18:df:7a:e2:9d:de:
f5:d8:d1:4f:4a:25:8f:86:af:36:52:4f:fc:52:61:
6b:47:b8:97:06:1e:de:ff:b3:a5:33:e1:8f:00:b4:
3c:4d:49:59:71:ab:58:81:6a:e1:1b:f9:a5:e3:8d:
58:5e:dd:93:30:51:8e:9b:a8:e6:1d:12:63:a3:ac:
3c:19:38:6d:c4:f3:ff:3d:84:76:46:f9:8e:d6:2c:
d0:50:87:8b:ad:0d:32:e4:21:73:e0:da:ce:97:4f:
cb:3c:43:cc:3d:0f:6f:a1:11:c1:f1:a2:a7:72:3e:
2c:78:39:bf:b2:ea:ed:26:e4:57:ba:69:5b:7f:16:
53:96:94:4a:6e:51:b4:3a:cb:2b:78:47:8c:32:9c:
1f:4e:f4:df:0c:98:dc:68:36:df:f5:c5:4e:cb:60:
c5:1b:cd:cd:cb:12:41:d7:3e:61:92:ad:99:d5:37:
59:d4:30:04:e7:6a:7e:4d:da:3f:c5:5d:35:d2:d1:
c5:8e:df:59:45:cc:30:24:b4:d4:10:57:3a:fc:d2:
74:a1:6e:a8:db:77:61:c1:b6:66:28:f0:81:12:a2:
b1:95:5c:f3:5c:05:8d:16:59:9e:0e:c1:e4:7b:ba:
82:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:50:CA:F8:67:E4:AB:A1:0F:81:45:AF:A2:4D:12:09:9F:B3:FD:A5
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/CB00CD20133611F192B77C9DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.20.0/24
Signature Algorithm: sha256WithRSAEncryption
80:d9:99:26:0b:d0:ce:79:dc:a8:16:39:e1:d4:a3:d9:d3:cc:
6b:2a:f6:18:23:51:8a:cb:3c:b4:fb:53:f0:a6:d6:09:73:74:
23:5a:86:aa:0a:65:dc:1f:60:ba:f8:ba:a7:5d:b4:c4:13:dd:
da:8a:63:cd:97:bc:e6:a4:13:f7:eb:3e:3f:ba:67:34:b0:e5:
7a:76:ff:78:45:9f:7f:5a:e5:85:c8:cb:4c:86:0c:60:74:2d:
22:bc:89:e1:69:b5:7c:43:db:d1:72:8d:0f:ca:c3:28:25:2b:
6b:49:81:10:c0:fd:37:17:1b:41:f1:f6:fe:b1:2a:66:52:53:
91:9a:b9:63:78:43:4d:db:46:fe:07:da:85:0f:fc:8b:c8:ff:
39:77:93:dd:10:ec:4f:e1:c5:50:10:b7:b6:a1:40:75:a7:e6:
a7:e9:3d:44:d8:15:c4:57:9c:e2:5d:6e:a2:db:77:b2:d5:ca:
0b:6e:aa:2b:3e:0f:00:09:3f:db:ea:0a:41:e2:e7:46:80:e2:
93:84:4d:aa:85:f7:90:79:ff:3a:b0:c5:91:10:d3:dd:f8:d3:
6a:9e:4c:8f:b7:9d:b9:8f:93:ea:85:0b:b6:77:f3:90:77:ae:
e8:9f:4c:a3:1d:0b:4d:69:f0:ff:6a:a3:5c:e0:16:90:b6:88:
4e:b6:7b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:03:17 2026 by rpki-client