Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/43268C00542211F18503AAF9CE1D38B0.roa
File: 43268C00542211F18503AAF9CE1D38B0.roa (raw, json)
Hash identifier: 6khtL21xQpYnyaQPOA225U4jlgIbYh2iAAF8AmvL5H0=
Subject key identifier: 14:0F:B1:3C:B5:BB:25:C3:43:CA:BE:95:62:B7:3F:7C:09:73:DB:DA
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 116E
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/43268C00542211F18503AAF9CE1D38B0.roa
Signing time: Wed 20 May 2026 08:02:36 +0000
ROA not before: Wed 20 May 2026 08:02:31 +0000
ROA not after: Thu 20 May 2027 08:02:31 +0000
asID: 205745
IP address blocks: 196.251.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 07 Jun 2026 02:37:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4462 (0x116e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: May 20 08:02:31 2026 GMT
Not After : May 20 08:02:31 2027 GMT
Subject: CN=6a0d6a9c-18eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:12:4b:28:c9:84:26:d3:18:d7:5e:98:0a:7d:
93:9a:50:e6:85:9e:7a:34:0f:bd:6b:e8:0a:06:8c:
6b:ce:7e:d0:62:ee:7c:f0:7e:68:53:af:11:7c:ae:
f1:cc:87:72:90:1f:fc:91:b9:41:9e:f3:47:32:0d:
56:57:b2:2c:78:fc:b3:28:5a:da:9f:21:37:19:f7:
53:c4:03:f9:45:f7:b4:47:19:09:5f:de:cc:19:83:
86:25:96:0f:c3:45:30:c1:c1:a3:6a:08:57:e5:1d:
60:8f:2f:a9:ea:be:01:d2:ff:79:c4:0a:cb:b8:7a:
1d:c7:da:6e:0c:fb:5b:fc:ff:6f:66:eb:68:95:ef:
5d:15:25:d2:d4:31:64:75:f3:82:fb:5e:f4:c7:c1:
2a:88:31:aa:28:af:ab:af:c0:90:7d:67:f9:91:5c:
e3:5b:db:61:a7:d3:f1:59:1d:0d:2f:78:b2:33:e4:
8f:59:e1:b7:e6:3c:29:57:07:4c:2c:66:0f:c7:14:
5b:47:b6:d8:b7:f2:aa:1b:13:19:12:ec:92:65:59:
71:84:8f:2b:74:11:12:4c:f1:f9:72:87:7f:12:0d:
55:63:b2:99:a7:7e:2f:f2:20:06:79:d7:79:9c:10:
ab:98:60:8b:b0:7b:8a:d3:3d:33:9e:bf:a8:b2:e5:
7c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:0F:B1:3C:B5:BB:25:C3:43:CA:BE:95:62:B7:3F:7C:09:73:DB:DA
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/43268C00542211F18503AAF9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.68.0/24
Signature Algorithm: sha256WithRSAEncryption
be:99:0a:07:6f:65:81:d0:dd:62:68:9d:d5:79:b6:51:19:29:
79:ed:83:ec:c9:00:7b:4b:6d:e8:79:bb:4b:b4:cd:75:75:b7:
5c:45:52:0b:53:ae:35:8b:60:39:30:d0:20:4d:6f:4d:ad:30:
94:08:08:0d:73:22:ca:c6:8e:70:e2:6d:3f:02:2e:81:e8:05:
a0:fa:cc:ab:cd:39:8d:10:bb:2c:fb:76:b7:9d:68:66:76:0f:
cf:9d:62:d6:b4:2b:3c:e2:ab:c2:81:9d:87:25:c9:f2:f6:54:
8f:94:f5:6c:7e:d4:f9:e0:75:3d:b5:51:b3:76:ad:30:95:5e:
98:35:a4:ab:7a:0e:2f:e4:83:1f:d0:53:07:38:37:cb:99:a6:
05:81:80:b8:63:66:4e:e6:c8:54:84:84:2f:ba:ac:a4:47:6c:
f0:28:83:43:6a:3d:fe:34:8e:f6:3f:1a:15:ab:fd:a8:92:79:
7e:28:89:1b:bc:01:ea:d0:28:2b:38:7d:49:fa:05:b7:7f:f2:
00:ee:01:cb:bc:f5:7e:89:db:cb:14:65:87:95:c4:d8:55:7c:
f6:57:24:5e:d5:9d:e0:e9:f7:ee:86:7d:32:26:77:8c:6c:dc:
27:ab:f7:a9:0c:7a:31:4c:be:55:f2:9b:5e:e5:e4:56:cd:f6:
a5:7b:02:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 02:28:25 2026 by rpki-client