Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/A0ACF8CC60AD11F198FD15D2CE1D38B0.roa
File: A0ACF8CC60AD11F198FD15D2CE1D38B0.roa (raw, json)
Hash identifier: D1G83oNUfroyGNdogOzA5OFUfJuI2+DJ1eGJKNjaIbo=
Subject key identifier: D6:A3:FB:4C:F3:56:45:EA:26:77:34:6D:F9:77:B2:AF:5E:A5:27:E4
Certificate issuer: /CN=F3617560AP/serialNumber=72F087414CE2DF44BC4F4DFF5BE1147A7A71A9AE
Certificate serial: 05DC
Authority key identifier: 72:F0:87:41:4C:E2:DF:44:BC:4F:4D:FF:5B:E1:14:7A:7A:71:A9:AE
Authority info access: rsync://rpki.afrinic.net/repository/apnic/cvCHQUzi30S8T03_W-EUenpxqa4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/A0ACF8CC60AD11F198FD15D2CE1D38B0.roa
Signing time: Fri 05 Jun 2026 07:10:27 +0000
ROA not before: Fri 05 Jun 2026 07:10:22 +0000
ROA not after: Wed 31 Dec 2042 07:10:22 +0000
asID: 6453
IP address blocks: 202.123.0.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/cvCHQUzi30S8T03_W-EUenpxqa4.crl
rsync://rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/cvCHQUzi30S8T03_W-EUenpxqa4.mft
rsync://rpki.afrinic.net/repository/apnic/cvCHQUzi30S8T03_W-EUenpxqa4.cer
rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.crl
rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 08 Jun 2026 00:15:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1500 (0x5dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3617560AP, serialNumber=72F087414CE2DF44BC4F4DFF5BE1147A7A71A9AE
Validity
Not Before: Jun 5 07:10:22 2026 GMT
Not After : Dec 31 07:10:22 2042 GMT
Subject: CN=6a227663-c72d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:64:c7:e0:5d:25:9f:03:1e:ea:07:91:95:5f:
7f:ec:3d:14:5d:52:f3:a8:b2:40:6e:e4:6a:ba:03:
e7:44:1c:7d:35:78:ba:9d:01:79:67:bd:ae:97:ae:
07:a6:94:cf:73:db:94:79:b7:1c:91:1f:67:48:66:
75:b5:69:38:b3:9b:71:2d:98:90:45:85:98:7f:f0:
65:8a:b8:b7:e8:3e:d3:d4:4b:e2:a2:31:e9:98:cf:
e4:cb:94:49:66:cc:3b:a0:27:0c:3d:eb:80:98:41:
98:d6:53:77:7b:08:92:8e:16:e5:32:57:30:f9:64:
06:68:c4:c4:18:81:5e:b3:fc:16:be:7e:c6:fe:e0:
9a:10:3c:78:6a:fa:11:5d:ae:e5:f5:e7:e4:88:5a:
2e:71:ad:bb:c9:5e:d8:33:e8:ea:9e:84:e5:a6:af:
2d:e7:7e:e1:2e:08:d2:c3:f8:03:55:a9:37:db:6a:
b0:b1:e4:c5:53:fd:f0:d2:6f:e6:a1:52:ec:c3:3e:
c6:c1:24:22:b6:cb:cb:ec:ec:95:57:62:b1:2c:d1:
f5:b6:b8:c3:9a:4e:24:4b:ca:dd:30:f8:f0:f7:a9:
80:ba:d3:f8:df:19:ff:15:af:aa:33:3c:83:b0:58:
55:1f:75:09:19:d2:7b:01:58:bd:0b:17:c0:63:3b:
86:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:A3:FB:4C:F3:56:45:EA:26:77:34:6D:F9:77:B2:AF:5E:A5:27:E4
X509v3 Authority Key Identifier:
keyid:72:F0:87:41:4C:E2:DF:44:BC:4F:4D:FF:5B:E1:14:7A:7A:71:A9:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/cvCHQUzi30S8T03_W-EUenpxqa4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/apnic/cvCHQUzi30S8T03_W-EUenpxqa4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/A0ACF8CC60AD11F198FD15D2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.123.0.0/19
Signature Algorithm: sha256WithRSAEncryption
80:44:ea:ac:12:bb:09:60:48:ef:ef:b9:fc:85:fa:e2:2f:dc:
9f:bb:8c:33:55:26:a3:75:84:51:65:f4:f9:bc:97:1b:49:c1:
7c:e6:ab:b2:66:96:4d:b8:96:cb:39:19:65:55:56:32:9b:ab:
ef:76:20:fe:5b:b4:1e:49:bd:23:86:40:25:ee:d4:dd:59:2f:
fe:ca:44:4a:ae:52:6f:f1:eb:84:09:d0:7b:7b:5b:c5:a6:ad:
97:0e:3f:39:c4:62:3f:f6:62:79:69:96:f4:31:f0:54:00:bb:
21:76:63:24:61:17:1e:16:65:7b:73:94:3b:c5:98:be:74:cd:
b0:6f:40:53:c9:0d:12:65:4c:25:66:24:a4:2b:57:fa:cf:b4:
4f:61:d4:d7:a1:b6:75:ab:29:a9:b5:b7:00:f9:53:84:c7:32:
79:bb:c2:67:fc:60:75:cd:4d:7c:eb:92:68:27:f0:2b:7a:d2:
5d:25:f6:fb:f0:23:83:be:ad:46:5b:95:9d:38:e2:2d:38:e4:
18:20:4f:8f:3f:6b:8e:a6:8a:9e:60:6c:e1:93:76:1e:5f:be:
ac:c2:0e:13:b0:36:df:45:30:e1:ad:c0:ed:47:8e:e8:e4:5c:
7a:a0:6f:33:9a:a1:07:dc:fa:9c:3e:fa:c9:29:b1:13:25:ac:
eb:13:37:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 05:33:11 2026 by rpki-client