Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/7D301404687A11F1BC3BEEB6CE1D38B0.roa
File: 7D301404687A11F1BC3BEEB6CE1D38B0.roa (raw, json)
Hash identifier: fR9v0OJG24cgYIe02QPnbLvTaUvyMzmtvTt7MHorRQI=
Subject key identifier: C2:78:25:73:F6:AA:44:A9:13:83:3D:C5:07:49:E0:9D:2E:F9:FB:A8
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 11DA
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/7D301404687A11F1BC3BEEB6CE1D38B0.roa
Signing time: Mon 15 Jun 2026 05:24:32 +0000
ROA not before: Mon 15 Jun 2026 05:24:28 +0000
ROA not after: Wed 30 Jun 2027 05:24:28 +0000
asID: 834
IP address blocks: 102.135.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 01 Jul 2026 00:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4570 (0x11da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Jun 15 05:24:28 2026 GMT
Not After : Jun 30 05:24:28 2027 GMT
Subject: CN=6a2f8c90-06a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:4a:fa:89:0a:ef:6d:66:bb:3b:7b:03:2d:2e:
09:6b:fb:98:b7:35:ce:e6:6f:d4:8d:29:09:d4:26:
b8:26:e7:e1:3d:28:44:99:10:6a:6a:68:b9:3f:b6:
1a:21:5b:63:a7:12:95:a4:e7:f0:29:a2:95:3c:c8:
ff:ab:45:4f:f1:9d:ee:76:2c:f3:a3:fb:8b:03:a3:
f8:62:5a:52:2f:c4:ee:2f:aa:ba:82:61:50:cb:91:
0b:fb:70:37:d1:82:ed:4d:56:20:92:86:d7:6a:c3:
a7:ff:20:f4:1a:14:78:f4:71:ce:fd:a3:16:46:af:
04:28:67:5a:27:d8:1e:1d:a3:2a:df:4e:4d:72:5c:
82:b5:55:9f:88:d1:f4:a7:e7:72:76:b7:9d:43:31:
8c:ec:52:69:1c:8d:c1:2d:fe:00:7b:e2:f7:8f:36:
ec:7f:05:72:6c:c6:09:89:45:28:fe:1b:ef:60:01:
0c:42:fc:12:1f:35:11:5c:c1:c5:c5:85:c8:8e:58:
6b:a3:b5:18:08:a7:08:97:cd:32:03:0c:3d:16:1a:
27:09:49:b3:69:fc:bc:1b:90:f0:82:3b:4b:63:1f:
90:e9:72:4f:46:a1:d8:c0:09:91:96:86:74:71:64:
f1:53:3a:c9:a5:aa:06:7e:be:f6:95:e4:f8:44:93:
84:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:78:25:73:F6:AA:44:A9:13:83:3D:C5:07:49:E0:9D:2E:F9:FB:A8
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/7D301404687A11F1BC3BEEB6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.13.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:29:f5:32:96:2f:cb:b7:f2:7a:4d:f1:64:06:2c:3f:6a:25:
de:9d:5e:06:d8:43:d4:a4:30:41:20:4b:e1:0b:81:f6:d6:1c:
b6:e9:f8:dc:c7:a6:c2:8d:1e:7d:d4:50:bc:53:2f:01:61:b9:
09:74:a8:0d:5a:12:35:22:63:d4:f8:46:60:ae:dd:0d:c3:71:
d7:3e:d0:9f:88:f6:7a:31:2c:d7:b0:d7:ba:bc:9c:70:78:31:
55:41:b3:fd:80:6d:37:3e:96:99:a3:be:52:49:63:ef:5e:82:
ce:5a:d2:a7:74:ba:59:1d:5d:37:78:c4:e8:d2:d9:24:81:30:
73:9d:a6:78:91:ff:c7:df:28:72:da:a8:21:5c:b0:7e:43:83:
b3:21:cc:01:17:cf:e6:c8:49:ba:83:12:69:09:f1:98:9a:5f:
e4:7a:45:c1:39:e6:5e:2c:15:d3:0b:95:b0:f4:28:72:a5:e7:
a9:85:af:af:53:36:2b:75:8d:0f:f5:11:bb:9f:ed:ba:a9:a9:
cc:ba:1a:4b:bc:67:9a:f3:ca:6d:2a:3c:23:36:fc:ee:1c:51:
0a:88:07:40:cb:af:ff:39:91:e5:69:2a:05:42:d2:ec:9c:8e:
5e:18:f6:fc:31:e0:98:15:40:40:2a:16:6d:66:1d:ab:c9:8e:
e9:a1:15:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 09:59:51 2026 by rpki-client