Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/2648297C4EA011F1ADBB7FFDCE1D38B0.roa
File: 2648297C4EA011F1ADBB7FFDCE1D38B0.roa (raw, json)
Hash identifier: kUItt7uoYeNzlazHcJcXwyMfWf5lI+oA5mXoRSX1/Nc=
Subject key identifier: 25:D9:D5:A2:5B:6F:D8:A4:CE:92:62:CD:B3:37:0F:32:1B:74:66:5C
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 1152
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/2648297C4EA011F1ADBB7FFDCE1D38B0.roa
Signing time: Wed 13 May 2026 07:48:37 +0000
ROA not before: Wed 13 May 2026 07:48:32 +0000
ROA not after: Wed 12 May 2027 07:48:32 +0000
asID: 401776
IP address blocks: 102.135.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 07 Jun 2026 02:37:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4434 (0x1152)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: May 13 07:48:32 2026 GMT
Not After : May 12 07:48:32 2027 GMT
Subject: CN=6a042cd5-9f0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7e:cf:93:8d:e9:d8:ed:04:6f:6f:fe:40:14:
4a:ae:24:89:e8:2b:c0:21:00:dd:19:76:2d:04:16:
86:01:9f:1d:ee:95:0c:7a:a6:5c:c5:b0:40:a3:b4:
71:b0:08:71:13:79:20:7c:24:5e:13:c6:f6:13:4c:
e0:a2:9f:2c:27:5f:db:22:2e:5a:7c:75:6d:54:85:
4a:f6:aa:d0:6a:c3:b2:7e:cf:6f:dc:95:cc:c8:10:
25:9e:8f:34:50:fb:de:c0:cc:ca:9c:0b:b7:6b:42:
25:71:21:e5:a6:22:79:9f:aa:3e:da:ed:15:f7:2a:
48:11:34:90:38:cf:91:4e:08:0a:a6:2a:11:a0:a6:
bf:88:a6:31:43:a4:f6:2d:91:7b:5c:83:74:4e:a9:
99:7c:01:df:0e:34:77:f5:ae:5c:bf:89:51:94:94:
fd:c9:c5:da:ae:86:7d:7a:90:ba:05:eb:4f:30:a4:
05:37:5a:60:ff:a7:f3:14:1f:90:51:eb:4e:46:b3:
d6:19:56:3d:2b:08:17:2e:e1:6a:6f:7f:bf:83:aa:
5c:e8:d6:c9:76:37:54:8b:34:8f:4b:b8:24:88:71:
ae:d1:d0:33:bf:f0:b5:86:ab:44:e5:eb:1b:b6:ff:
38:2b:2a:5b:f8:24:9b:5d:27:9d:93:18:7f:5f:7c:
71:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:D9:D5:A2:5B:6F:D8:A4:CE:92:62:CD:B3:37:0F:32:1B:74:66:5C
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/2648297C4EA011F1ADBB7FFDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.13.0/24
Signature Algorithm: sha256WithRSAEncryption
44:a4:56:84:04:c3:44:63:3d:52:8b:65:eb:9e:6b:4c:37:16:
62:e3:b9:3a:fc:da:3a:4f:c3:4a:f4:78:df:7d:41:a2:1a:e1:
ed:04:04:38:15:68:40:d4:fa:d3:95:51:75:51:59:0a:2c:34:
41:48:b3:41:d5:3e:86:41:69:9f:a8:78:56:a7:3b:c6:70:43:
25:07:d8:a6:e2:64:00:32:c8:cc:66:af:43:65:14:5c:e8:37:
e8:a0:12:bc:d4:4a:5e:21:97:e8:3d:09:f5:da:84:9f:78:87:
1b:47:c3:6e:cc:ef:f3:86:d0:af:d8:ca:2c:c2:8a:d7:43:64:
54:dd:1f:b9:5a:a9:7c:fe:37:48:0a:a8:37:41:72:4d:92:b5:
8e:61:62:aa:9d:a7:e7:ad:1d:53:9d:98:bf:fd:8c:6d:35:d4:
c1:fc:1a:fc:8e:8d:8b:bf:b7:9c:cf:c8:4a:4c:59:1b:13:46:
04:5e:55:e6:25:bd:80:4a:4a:63:89:00:d5:00:5f:97:2b:94:
61:af:ee:b5:71:c4:ea:4b:29:1e:bc:05:b7:c4:c6:98:5b:62:
99:93:21:cd:e0:8f:0a:cb:b7:65:40:19:9f:b0:ac:ec:26:6a:
ed:65:fa:09:6a:87:b4:e1:f2:62:9d:1e:c7:14:78:70:7d:21:
2c:5c:8c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 5 23:33:23 2026 by rpki-client