Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/479781481DF611F1BCE1117DDAE4EC9C.roa
File: 479781481DF611F1BCE1117DDAE4EC9C.roa (raw, json)
Hash identifier: kbmMysP+MROACKCPYIlOi6jmYFQC8Um1/wYozMgxCzk=
Subject key identifier: 85:F7:BB:22:42:D0:FD:7B:3B:89:C0:74:3A:E6:AA:90:6F:6F:30:C9
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 1095
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/479781481DF611F1BCE1117DDAE4EC9C.roa
Signing time: Thu 12 Mar 2026 09:31:43 +0000
ROA not before: Thu 12 Mar 2026 09:31:38 +0000
ROA not after: Wed 31 Mar 2027 09:31:38 +0000
asID: 208185
IP address blocks: 196.251.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 23 Mar 2026 00:06:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4245 (0x1095)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Mar 12 09:31:38 2026 GMT
Not After : Mar 31 09:31:38 2027 GMT
Subject: CN=69b287ff-529d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:e0:fe:1d:63:13:9e:ab:9d:aa:b1:c2:32:40:
0d:0d:9a:cd:4c:a4:5f:25:f3:b2:fa:98:99:f5:7d:
b1:9f:bb:8c:ab:34:51:50:14:2d:71:d7:12:8e:d0:
19:6c:a7:d8:96:d3:73:db:8c:e7:32:a2:b5:76:25:
6a:2b:54:0d:62:ed:22:28:85:8c:84:0a:fd:b7:c1:
09:d4:e0:dc:c3:fd:bd:ac:4e:63:54:5b:ec:7f:7a:
74:c1:ae:ef:22:55:99:7d:3e:a6:f6:b5:23:10:62:
ca:a5:5f:8c:72:b4:2f:4b:41:94:16:29:de:54:33:
00:f6:c2:6a:1d:b1:cb:21:ee:40:05:69:fd:0e:6d:
de:73:b9:6e:e8:d8:11:d2:2b:36:fd:0a:4f:56:fa:
1f:3a:e2:0d:91:06:58:47:df:b8:fb:0c:8b:63:79:
5b:f6:3c:ad:80:34:79:2b:d0:15:30:0e:a0:af:dc:
ef:9b:c4:07:63:3b:28:47:a6:7f:39:dd:64:f4:36:
84:82:51:d6:c4:32:53:98:3b:25:6f:69:0f:a8:99:
3a:d1:03:d1:a1:c0:d7:5b:62:83:c7:48:79:d0:ba:
1d:01:4c:1f:9a:a9:14:42:16:f6:1a:d2:13:1f:01:
a2:09:98:a7:aa:53:b9:bf:72:65:ff:1c:25:84:22:
55:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:F7:BB:22:42:D0:FD:7B:3B:89:C0:74:3A:E6:AA:90:6F:6F:30:C9
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/479781481DF611F1BCE1117DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.74.0/24
Signature Algorithm: sha256WithRSAEncryption
06:55:08:42:19:a3:6f:18:81:97:31:ee:c9:53:54:fe:a0:df:
91:0d:79:91:2e:33:fc:e9:81:6b:00:e9:38:4f:57:c2:c4:9d:
56:08:e2:d1:70:93:e8:53:27:af:34:e7:09:2c:c9:1a:a6:9e:
01:97:7e:25:33:36:e4:67:4f:e2:28:0b:8c:1f:90:ff:68:5e:
ab:8a:c0:c3:fe:47:01:85:13:db:19:44:3c:b1:32:50:08:7e:
bc:1b:7d:9a:e1:32:01:ea:20:08:18:eb:95:91:56:1b:ff:21:
28:96:d9:66:ca:92:35:52:5c:c2:29:60:92:f9:3f:18:ba:bd:
fb:3b:36:ee:90:90:d3:55:ff:95:8e:21:62:f9:72:c7:b5:c9:
4b:94:db:0e:07:c5:92:ad:6a:79:c7:8a:cf:59:85:be:29:fb:
6d:5d:57:0d:a9:4c:36:28:6c:d6:86:45:ac:c2:b7:af:f2:30:
5d:84:aa:53:46:f3:79:79:26:4e:64:36:95:2c:1a:ac:b4:32:
58:6c:f6:d1:d3:bf:ec:72:e8:6e:b0:d3:2f:45:c1:47:ff:fb:
25:7c:bf:d1:d1:b9:2a:3f:2e:bc:80:32:7b:10:1a:c6:4d:93:
36:b7:82:06:ac:7b:71:03:6b:52:3b:9c:42:4e:05:9a:6d:84:
cc:41:24:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 12:17:07 2026 by rpki-client