Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/7FD061787A9F11F1B77942C8CE1D38B0.roa
File: 7FD061787A9F11F1B77942C8CE1D38B0.roa (raw, json)
Hash identifier: A57S84FpN+JRmEzoMrFb+39XAkwMq63ftGnc4BQ08dI=
Subject key identifier: AA:A7:15:29:F6:E7:AD:E0:E9:E6:B0:B9:68:53:EC:75:18:97:00:40
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 1234
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/7FD061787A9F11F1B77942C8CE1D38B0.roa
Signing time: Wed 08 Jul 2026 07:34:49 +0000
ROA not before: Wed 08 Jul 2026 07:34:45 +0000
ROA not after: Fri 30 Jul 2027 07:34:45 +0000
asID: 402236
IP address blocks: 102.135.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 00:08:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4660 (0x1234)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Jul 8 07:34:45 2026 GMT
Not After : Jul 30 07:34:45 2027 GMT
Subject: CN=6a4dfd99-df85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:db:01:15:e0:7c:46:bd:0e:41:86:f0:8b:93:
9a:b6:b6:10:ae:f7:cc:c2:29:80:ff:1a:75:72:c0:
e7:da:83:05:a5:bc:30:b7:23:3f:9f:82:54:d4:9d:
5c:82:3b:a7:34:ba:32:62:5d:d3:d1:ae:26:13:9d:
52:ac:06:16:7c:2b:63:24:f8:45:18:e7:9b:f8:7b:
a5:3f:82:6f:7c:07:f2:25:91:85:0e:25:ed:b7:4e:
21:73:6f:8f:27:2f:81:c3:02:a9:5e:db:91:31:47:
75:b7:a4:f0:1f:10:f9:a9:79:5e:f4:10:b3:ce:a6:
4b:ff:29:51:6b:ab:a7:34:9f:07:e7:2f:40:30:4b:
97:ef:b8:7d:11:36:6a:c7:45:15:bb:c3:4c:7a:73:
9b:f8:55:61:a3:05:ed:46:af:6e:ed:77:4d:60:fe:
eb:ed:7c:a3:af:d0:a8:5a:d2:5c:b0:cc:d2:f7:80:
ee:52:52:6d:86:7a:c8:0e:8c:c3:f7:3b:8c:d9:3e:
7d:21:6a:76:86:43:73:77:d4:3e:b4:81:0e:90:ad:
62:8e:09:6a:a3:60:8b:b8:ef:93:e7:c6:19:45:f6:
7b:7e:e8:fc:dc:00:e2:b8:85:00:52:8c:ee:92:21:
ca:96:f2:cc:06:99:fe:fe:e9:f6:0a:1f:6d:2f:55:
39:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:A7:15:29:F6:E7:AD:E0:E9:E6:B0:B9:68:53:EC:75:18:97:00:40
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/7FD061787A9F11F1B77942C8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.8.0/24
Signature Algorithm: sha256WithRSAEncryption
19:d3:f1:80:07:7a:13:20:d0:69:e3:26:13:4c:83:4c:40:78:
08:ae:52:95:d9:19:f5:d2:7f:33:ae:8f:9f:00:e5:0a:86:db:
c5:07:15:06:ee:69:80:73:b5:0b:20:21:9f:1a:83:eb:9e:f1:
d7:aa:f6:9e:97:a4:43:01:b7:f7:cf:9d:6d:a0:12:8d:fe:d2:
49:24:03:79:b1:78:7b:d7:9b:46:cf:64:09:0d:fd:f2:15:8f:
8e:e7:41:4f:62:b6:83:b9:49:0e:1d:a6:d4:60:f9:45:f4:0e:
7b:26:6b:05:34:1a:a3:cd:a9:a0:0d:0a:98:6f:ab:5a:02:41:
b6:73:62:46:68:ec:ba:8f:8b:e4:13:50:3a:5f:e8:4e:8a:ac:
5a:31:e8:1a:f6:70:a1:6a:4a:15:92:64:7b:0e:85:15:68:74:
e1:73:d3:c7:dc:2d:39:25:ca:87:0c:3d:9c:16:bb:e2:ff:71:
9b:9e:e1:7b:98:82:cf:3a:9e:64:80:ed:59:80:1c:44:25:11:
00:dc:50:c0:68:c2:b1:57:9a:b9:c8:fc:89:cf:6d:b1:3c:17:
49:85:ca:7f:ce:cd:be:14:09:7c:b8:6d:2b:d1:95:60:bb:16:
02:1d:37:2f:38:d0:93:41:a8:87:9c:e7:84:1d:fd:fc:67:47:
e1:bf:39:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:04:46 2026 by rpki-client