Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/F794A1C6127411F19801F779DAE4EC9C.roa
File: F794A1C6127411F19801F779DAE4EC9C.roa (raw, json)
Hash identifier: xAqHcKOYeVCGp83jVSerJBuCy1Gms3G/ROiPiduA3BI=
Subject key identifier: D7:19:86:21:1A:27:81:C2:C3:C4:19:B5:D3:4E:98:86:93:C0:05:3B
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 107C
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/F794A1C6127411F19801F779DAE4EC9C.roa
Signing time: Wed 25 Feb 2026 18:08:20 +0000
ROA not before: Wed 25 Feb 2026 18:08:15 +0000
ROA not after: Thu 25 Feb 2027 18:08:15 +0000
asID: 996
IP address blocks: 102.135.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4220 (0x107c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Feb 25 18:08:15 2026 GMT
Not After : Feb 25 18:08:15 2027 GMT
Subject: CN=699f3a94-f153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:93:c7:99:c4:f2:1b:c1:aa:27:bd:0a:72:36:
88:ee:cc:69:1a:aa:2e:63:f4:7f:94:e0:32:71:7d:
14:7c:40:51:1b:a5:e8:06:d8:b5:6c:19:62:1a:42:
fe:92:f8:e9:9a:e4:b8:1a:93:66:d9:0c:7d:55:19:
12:45:31:1c:ad:92:9b:e5:f3:86:45:46:9b:76:45:
f2:36:86:53:d3:64:c3:78:9e:46:a2:69:ae:1e:4b:
08:f1:9e:32:1b:17:01:9b:b0:3b:3b:7c:86:0f:f7:
62:e5:43:85:8b:c5:ae:64:e0:5d:1c:90:97:4b:72:
47:25:da:83:50:80:c3:89:81:15:dd:e2:b7:27:88:
22:f4:c1:2b:41:15:b0:f9:d5:12:5c:95:b2:03:02:
26:9e:b1:76:b4:25:65:25:5a:98:2b:0e:4b:1e:af:
d2:8a:78:ce:81:16:95:d1:32:7d:31:26:4d:6c:7f:
95:7b:95:ed:4a:4c:28:02:55:61:a6:ad:ea:e8:ed:
bb:65:8c:fc:5c:0d:45:13:9f:eb:09:ff:d1:53:ec:
08:e4:6a:06:a7:bd:43:65:e4:70:f0:4f:38:23:52:
cb:4b:67:20:35:45:b8:d0:a1:5c:4b:45:96:47:48:
53:49:6d:b5:df:33:80:da:2d:8f:4d:d3:b0:3a:95:
2b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:19:86:21:1A:27:81:C2:C3:C4:19:B5:D3:4E:98:86:93:C0:05:3B
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/F794A1C6127411F19801F779DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.20.0/24
Signature Algorithm: sha256WithRSAEncryption
47:b8:fa:9f:34:5a:1f:3e:20:11:ea:38:0d:4e:cb:e1:3d:3a:
db:8d:6d:63:a4:33:ee:4f:2c:9b:fa:3d:3b:c5:95:19:2f:a4:
f6:49:d1:2d:d9:38:0d:e0:29:97:c0:19:89:33:1c:1a:dc:c7:
f9:ee:62:bc:8b:c6:19:bc:00:72:df:2d:27:6c:12:f2:27:6d:
38:ab:90:26:59:80:50:22:b9:bc:3b:53:0b:89:32:72:d3:73:
d0:b8:a8:e1:23:13:52:b7:48:c5:af:26:ae:ff:d6:f1:41:15:
91:fd:42:6e:c4:12:7e:31:20:b8:d1:6a:ad:32:d1:9c:db:d9:
c9:c1:63:1b:40:3a:70:63:23:15:38:24:1a:79:79:a1:87:40:
30:b6:c3:d2:23:80:61:7e:50:03:74:62:cc:4c:2a:4a:54:04:
c4:ce:62:cf:66:b1:87:3d:30:f2:ef:58:6e:b1:02:56:c7:72:
e6:4c:f4:13:0e:63:ab:1e:61:1a:8f:17:1d:40:fc:a8:43:e7:
f8:3d:ca:88:bd:bb:30:2e:c0:ef:ca:44:4c:62:88:67:f5:c9:
73:31:47:57:e9:cb:58:f9:0d:56:87:65:54:33:6b:c0:1e:1a:
78:09:d9:95:1c:b0:1e:55:bd:67:ba:fa:2f:23:83:5f:a4:a7:
21:51:38:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:44:29 2026 by rpki-client