Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/28924CD81DF611F1BCF0FA7CDAE4EC9C.roa
File: 28924CD81DF611F1BCF0FA7CDAE4EC9C.roa (raw, json)
Hash identifier: Vr/qnMlJda9jwgfi9kzGRTrAaNh/cBYcrsqYYr+7wdY=
Subject key identifier: 4F:97:99:19:6C:79:A7:D9:CC:7D:5B:AD:50:B8:62:69:45:6E:E5:EF
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 1093
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/28924CD81DF611F1BCF0FA7CDAE4EC9C.roa
Signing time: Thu 12 Mar 2026 09:30:51 +0000
ROA not before: Thu 12 Mar 2026 09:30:46 +0000
ROA not after: Fri 12 Mar 2027 09:30:46 +0000
asID: 208185
IP address blocks: 102.135.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 23 Mar 2026 00:06:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4243 (0x1093)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Mar 12 09:30:46 2026 GMT
Not After : Mar 12 09:30:46 2027 GMT
Subject: CN=69b287cb-cf64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:bc:b9:4a:81:87:a8:90:44:f7:97:28:50:e4:
e5:47:da:66:07:a1:fb:31:3c:b3:b9:3b:d4:00:a2:
2a:56:8e:75:cc:b1:af:69:fd:bd:a5:fb:8c:d1:4d:
f6:60:4f:45:a1:f2:67:4d:6b:28:50:db:35:c3:93:
ef:e8:d4:2b:6d:05:72:b5:87:89:33:93:b5:2f:7a:
bf:8c:7f:6f:51:f5:67:1c:be:c4:99:f8:c4:ce:4a:
0a:45:59:0f:e0:d8:06:3d:5f:cd:d2:9e:6f:e7:91:
4f:83:b7:ca:6e:3f:cf:4c:8a:51:c7:8b:95:ee:90:
f6:56:63:fa:11:5f:cf:1d:e9:7c:c1:fa:6f:cf:d6:
af:c0:d0:b5:85:9b:ab:8c:42:d0:2c:05:50:2c:60:
73:4f:48:49:16:87:cc:1e:b0:c9:32:23:63:e3:19:
ce:de:4f:04:3e:11:38:5f:97:2d:52:fa:fc:7c:07:
5a:5b:af:5a:e7:97:11:17:93:c6:76:df:00:11:2e:
01:e9:39:8f:d2:3a:fd:88:93:4c:34:00:4a:9e:7a:
c0:84:b5:98:f9:54:d7:28:c4:06:58:93:68:49:7e:
46:d3:5c:07:78:ee:b3:d5:a0:bb:76:3f:a5:3a:2c:
67:b0:4a:59:5f:89:ac:d3:c4:f3:fa:25:66:20:c7:
21:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:97:99:19:6C:79:A7:D9:CC:7D:5B:AD:50:B8:62:69:45:6E:E5:EF
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/28924CD81DF611F1BCF0FA7CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.105.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:35:c9:9f:04:58:96:ca:34:bd:91:34:44:3c:68:ac:3c:5f:
91:4e:7a:b0:75:cb:52:17:2d:e4:20:fc:83:ec:b2:18:99:26:
e5:72:30:e9:ca:08:ef:b9:2d:f1:8e:81:91:4e:82:b3:7c:5c:
cd:c8:11:11:e7:eb:7a:fb:75:ee:52:a8:e2:29:39:83:52:18:
c6:57:23:c5:d1:b5:7f:57:20:bf:8b:eb:ef:da:43:53:e7:68:
7a:0a:0f:d1:37:bb:8e:63:66:76:56:23:2b:67:2c:d7:bf:34:
01:18:a1:d7:e4:1a:f2:a4:2f:24:1b:56:61:07:25:59:4c:96:
a8:c8:5b:73:9b:e0:11:8d:d9:48:29:68:c1:83:3e:d4:41:49:
ad:63:59:ff:b8:04:73:e4:86:b8:21:68:16:34:6c:a7:37:01:
f6:5e:37:ba:10:5b:58:f9:3a:75:d8:50:3a:22:bd:86:a0:16:
9d:46:f2:df:54:47:52:69:85:8a:1a:ec:76:cc:6c:60:7c:80:
85:4a:3b:ae:e2:ee:3d:21:90:05:94:99:16:99:00:56:87:a8:
54:cd:dc:75:52:2a:fc:95:72:4e:aa:eb:22:4e:10:13:79:48:
d2:5b:7f:c4:ce:d9:8d:e9:60:f7:c1:de:9a:a1:4b:da:23:40:
bc:c4:79:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 12:16:25 2026 by rpki-client