Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/5ACAE91E23F311F189824BDCDAE4EC9C.roa
File: 5ACAE91E23F311F189824BDCDAE4EC9C.roa (raw, json)
Hash identifier: N+77hC+vFB1MNKmHV5qpgUffRp2vXLDzauc0ZupK7UQ=
Subject key identifier: FF:9E:C1:5B:12:53:08:15:9A:D2:A9:92:9C:39:FF:62:85:81:D0:44
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 10B3
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/5ACAE91E23F311F189824BDCDAE4EC9C.roa
Signing time: Fri 20 Mar 2026 00:25:54 +0000
ROA not before: Fri 20 Mar 2026 00:00:49 +0000
ROA not after: Wed 31 Mar 2027 00:00:49 +0000
asID: 208185
IP address blocks: 102.135.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 23 Mar 2026 00:06:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4275 (0x10b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Mar 20 00:00:49 2026 GMT
Not After : Mar 31 00:00:49 2027 GMT
Subject: CN=69bc9412-dbd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:9c:f1:e5:df:1c:04:a8:d9:96:5e:86:b4:43:
5d:6e:89:1a:6c:8d:3d:97:ee:09:10:50:dc:20:73:
47:65:14:a6:f6:b1:cb:17:f7:43:63:be:e3:ab:d3:
b9:1a:a2:07:4e:6d:7b:e5:7e:19:05:37:a7:af:fa:
34:fa:3b:73:51:d9:da:e9:a4:f0:13:99:cf:55:36:
7c:e6:af:6c:98:f5:85:8a:88:40:3a:9a:6c:ea:ee:
ff:95:ee:fe:e2:de:61:f4:cd:e4:01:b5:67:47:08:
ed:52:22:8d:e7:31:8a:cf:0d:b3:a5:a3:e6:4f:0d:
6f:6c:5b:80:ce:f2:fe:af:eb:19:a9:5e:1d:f4:62:
91:e7:9c:1b:24:4e:3c:b5:f1:5f:7c:72:b8:22:23:
ab:d6:6a:2d:6d:61:a8:d2:0a:e1:47:57:bd:ee:15:
a7:55:e4:79:80:3c:40:13:34:3e:7a:90:2c:98:22:
ed:60:43:4f:41:35:43:36:2a:95:7d:05:68:78:76:
40:ce:60:2a:a2:aa:f2:ec:d4:4d:6f:cc:a8:79:3d:
6a:2e:43:29:fd:55:d0:e7:4c:41:ed:fe:a3:ad:94:
c0:a6:f7:17:d0:4c:75:f5:1e:52:9e:f8:f0:1b:96:
5a:cf:93:bc:6e:37:08:10:bc:c7:69:75:2b:f1:6b:
3a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:9E:C1:5B:12:53:08:15:9A:D2:A9:92:9C:39:FF:62:85:81:D0:44
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/5ACAE91E23F311F189824BDCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.91.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:17:de:01:78:bf:41:19:4e:c0:a8:30:89:94:a1:0b:61:d2:
be:05:26:a3:6d:f5:9a:fb:61:d4:34:1e:01:72:26:61:fe:e3:
0f:7a:f4:f5:c7:b0:0a:d3:d2:b0:9b:f5:8b:1d:4d:15:18:4b:
7e:c5:d0:55:06:78:7d:39:e6:cb:13:c9:fb:a8:e7:3d:92:ae:
2a:bd:85:14:3d:31:4e:62:1c:9a:5d:a9:43:50:dc:57:63:ab:
0b:64:ad:22:4f:3b:c5:7e:e8:23:96:b4:10:68:75:97:83:cf:
9b:c8:d8:81:31:19:27:b9:05:1f:05:80:7a:ff:2e:ff:d7:13:
21:c1:ed:ef:e6:e2:a2:ce:7a:8f:f1:6e:db:3a:48:4f:13:56:
00:2e:27:ad:fa:07:8f:3b:e6:5e:3f:84:fe:9e:02:fc:b2:c7:
d9:3d:56:a0:b7:25:bf:89:9f:d4:da:8b:4e:1a:cd:80:46:6f:
98:b5:1a:ab:d9:6d:3d:85:d8:86:87:7f:00:13:a4:fe:56:d1:
0e:60:a8:ac:68:3d:32:0b:d1:4f:e4:3c:e2:d7:0d:cf:5d:25:
90:5f:99:15:73:8b:15:1d:b6:42:77:34:cd:24:a9:6e:42:9e:
e0:8c:2e:14:2e:85:2f:43:7f:a1:d0:20:8a:ac:16:55:4a:b3:
ba:44:73:e5
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICELMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNjAzMjAwMDAwNDlaFw0yNzAzMzEwMDAwNDlaMBgxFjAU
BgNVBAMTDTY5YmM5NDEyLWRiZDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDdnPHl3xwEqNmWXoa0Q11uiRpsjT2X7gkQUNwgc0dlFKb2scsX90NjvuOr
07kaogdObXvlfhkFN6ev+jT6O3NR2drppPATmc9VNnzmr2yY9YWKiEA6mmzq7v+V
7v7i3mH0zeQBtWdHCO1SIo3nMYrPDbOlo+ZPDW9sW4DO8v6v6xmpXh30YpHnnBsk
Tjy18V98crgiI6vWai1tYajSCuFHV73uFadV5HmAPEATND56kCyYIu1gQ09BNUM2
KpV9BWh4dkDOYCqiqvLs1E1vzKh5PWouQyn9VdDnTEHt/qOtlMCm9xfQTHX1HlKe
+PAbllrPk7xuNwgQvMdpdSvxazqlAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU/57B
WxJTCBWa0qmSnDn/YoWB0EQwHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3LzVBQ0FFOTFFMjNGMzExRjE4OTgyNEJEQ0RBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmh1swDQYJKoZIhvcNAQEL
BQADggEBAKkX3gF4v0EZTsCoMImUoQth0r4FJqNt9Zr7YdQ0HgFyJmH+4w969PXH
sArT0rCb9YsdTRUYS37F0FUGeH055ssTyfuo5z2Sriq9hRQ9MU5iHJpdqUNQ3Fdj
qwtkrSJPO8V+6COWtBBodZeDz5vI2IExGSe5BR8FgHr/Lv/XEyHB7e/m4qLOeo/x
bts6SE8TVgAuJ636B4875l4/hP6eAvyyx9k9VqC3Jb+Jn9Tai04azYBGb5i1GqvZ
bT2F2IaHfwATpP5W0Q5gqKxoPTIL0U/kPOLXDc9dJZBfmRVzixUdtkJ3NM0kqW5C
nuCMLhQuhS9Df6HQIIqsFlVKs7pEc+U=
-----END CERTIFICATE-----
Generated at Sat Mar 21 12:17:10 2026 by rpki-client