Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/2A201D84542211F1A83CD8F7CE1D38B0.roa
File: 2A201D84542211F1A83CD8F7CE1D38B0.roa (raw, json)
Hash identifier: ajXTvI5AV/PTyKh9beahkkS74dlcYjXzHiGk1BLqK6w=
Subject key identifier: 1B:8E:94:89:B7:A9:01:90:AC:33:65:F3:18:0E:33:CB:40:2F:12:21
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 116A
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/2A201D84542211F1A83CD8F7CE1D38B0.roa
Signing time: Wed 20 May 2026 08:01:54 +0000
ROA not before: Wed 20 May 2026 08:01:49 +0000
ROA not after: Thu 20 May 2027 08:01:49 +0000
asID: 205301
IP address blocks: 196.251.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Jun 2026 00:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4458 (0x116a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: May 20 08:01:49 2026 GMT
Not After : May 20 08:01:49 2027 GMT
Subject: CN=6a0d6a72-95c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6a:86:1c:d0:9f:90:bb:4f:a7:b1:9d:64:8f:
66:37:4c:bd:33:ce:51:44:75:47:c1:0e:c3:b1:d8:
ee:95:6f:0d:db:5e:55:5c:dd:7b:ad:b6:78:a1:89:
1f:b7:d5:ae:fc:e1:c0:85:8c:f0:c7:0f:bf:12:28:
24:e0:22:bf:1d:4b:a2:7d:c3:14:7a:2d:4c:42:cb:
3e:17:cb:1f:7c:ed:8a:ba:bc:dd:22:74:79:bf:00:
9b:c3:2f:9c:35:2b:43:84:8b:fd:70:11:ab:82:3c:
7d:55:d4:fd:c1:c0:b1:28:57:bb:cf:6b:f8:97:04:
2e:34:9f:30:c7:49:f8:19:04:bd:54:18:4a:53:cd:
ac:48:b8:e5:84:fc:ce:d4:22:dc:aa:b2:27:9b:76:
1d:1c:d8:1f:ce:6c:4d:05:1a:15:01:03:8a:ef:0b:
63:7a:68:71:10:46:1a:5d:af:0a:b1:ff:89:57:3d:
3c:d8:91:a1:5a:d7:4a:1b:cf:0c:51:12:02:45:a3:
fd:36:f5:e3:8c:92:ac:95:e2:bf:c3:80:b1:27:09:
88:c1:1b:4c:98:f4:e0:d4:03:c5:39:24:c9:f2:20:
08:86:d8:5d:43:e5:87:72:73:11:9b:f0:1d:91:dd:
7e:1f:49:d4:a8:85:65:a9:df:11:c0:e8:3e:a1:68:
c7:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:8E:94:89:B7:A9:01:90:AC:33:65:F3:18:0E:33:CB:40:2F:12:21
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/2A201D84542211F1A83CD8F7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.127.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:8b:c3:4b:28:00:91:21:90:f7:ed:61:fc:22:50:38:90:9f:
53:85:00:7e:7b:a2:0b:89:64:de:32:91:ee:63:46:37:7e:26:
76:42:0b:33:99:cd:36:10:30:57:5f:3a:09:52:ac:4f:d8:76:
70:01:c6:70:79:68:92:ef:32:d9:df:d9:10:19:c1:a8:96:f6:
a7:86:d8:5e:e0:71:a3:cb:32:1a:39:b9:b1:6c:fe:4a:05:71:
98:eb:5f:42:92:20:79:05:b7:4c:51:78:93:b5:f2:c7:d0:20:
b3:ba:5a:4d:10:31:b3:de:68:f1:0f:47:7d:7f:67:2f:f0:e5:
52:4f:c2:a5:59:bd:3c:90:43:40:46:95:f1:37:db:ea:4e:27:
60:c7:2c:38:21:28:85:5a:60:72:2a:58:da:15:41:90:fa:29:
9f:92:be:41:30:19:07:33:96:4c:5f:ee:df:14:21:6e:5c:78:
4f:8f:1a:19:c0:74:94:7d:2d:c0:94:e3:69:f2:94:e4:ac:fd:
eb:7d:fe:49:f8:85:d8:18:4a:da:97:13:26:d6:68:8a:07:04:
eb:f9:fb:90:1b:d4:b7:c5:d0:42:81:62:21:ef:2b:52:5b:15:
2e:cc:99:05:02:23:50:a9:a1:72:35:3e:84:a8:c2:c3:d4:dc:
0c:2a:5e:50
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICEWowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNjA1MjAwODAxNDlaFw0yNzA1MjAwODAxNDlaMBgxFjAU
BgNVBAMTDTZhMGQ2YTcyLTk1YzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDBaoYc0J+Qu0+nsZ1kj2Y3TL0zzlFEdUfBDsOx2O6Vbw3bXlVc3Xuttnih
iR+31a784cCFjPDHD78SKCTgIr8dS6J9wxR6LUxCyz4Xyx987Yq6vN0idHm/AJvD
L5w1K0OEi/1wEauCPH1V1P3BwLEoV7vPa/iXBC40nzDHSfgZBL1UGEpTzaxIuOWE
/M7UItyqsiebdh0c2B/ObE0FGhUBA4rvC2N6aHEQRhpdrwqx/4lXPTzYkaFa10ob
zwxREgJFo/029eOMkqyV4r/DgLEnCYjBG0yY9ODUA8U5JMnyIAiG2F1D5YdycxGb
8B2R3X4fSdSohWWp3xHA6D6haMc9AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUG46U
ibepAZCsM2XzGA4zy0AvEiEwHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3LzJBMjAxRDg0NTQyMjExRjFBODNDRDhGN0NFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADE+38wDQYJKoZIhvcNAQEL
BQADggEBANKLw0soAJEhkPftYfwiUDiQn1OFAH57oguJZN4yke5jRjd+JnZCCzOZ
zTYQMFdfOglSrE/YdnABxnB5aJLvMtnf2RAZwaiW9qeG2F7gcaPLMho5ubFs/koF
cZjrX0KSIHkFt0xReJO18sfQILO6Wk0QMbPeaPEPR31/Zy/w5VJPwqVZvTyQQ0BG
lfE32+pOJ2DHLDghKIVaYHIqWNoVQZD6KZ+SvkEwGQczlkxf7t8UIW5ceE+PGhnA
dJR9LcCU42nylOSs/et9/kn4hdgYStqXEybWaIoHBOv5+5Ab1LfF0EKBYiHvK1Jb
FS7MmQUCI1CpoXI1PoSowsPU3AwqXlA=
-----END CERTIFICATE-----
Generated at Wed Jun 3 09:16:20 2026 by rpki-client