Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/94AA763223F211F181564BD8DAE4EC9C.roa
File: 94AA763223F211F181564BD8DAE4EC9C.roa (raw, json)
Hash identifier: LF3kH38lGVycfcyLiN9mK6KqpC4WoaReuI8xmSZv/c0=
Subject key identifier: 9F:69:A0:7D:53:34:2D:DD:ED:5B:BB:CA:09:CD:67:DE:E0:43:7E:5A
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 10AF
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/94AA763223F211F181564BD8DAE4EC9C.roa
Signing time: Fri 20 Mar 2026 00:20:21 +0000
ROA not before: Fri 20 Mar 2026 00:00:16 +0000
ROA not after: Wed 31 Mar 2027 00:00:16 +0000
asID: 208185
IP address blocks: 102.135.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 23 Mar 2026 00:06:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4271 (0x10af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Mar 20 00:00:16 2026 GMT
Not After : Mar 31 00:00:16 2027 GMT
Subject: CN=69bc92c5-3026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c3:68:ae:68:9b:43:92:28:40:9a:2a:2e:7c:
ae:d9:a6:5c:ac:30:c5:eb:9f:f7:e2:fb:35:b5:fd:
d5:73:3b:56:88:b5:25:22:d1:d6:42:4b:86:65:28:
79:72:05:72:64:2c:ee:98:c3:d4:63:bc:67:e3:14:
e3:1d:60:8f:4d:f8:73:17:1a:1a:04:6d:fe:e5:c6:
03:7c:6f:31:7a:5b:10:21:2d:33:15:e8:d5:85:78:
f7:69:9e:d1:6a:2a:18:09:31:1d:47:74:4d:e7:eb:
52:ff:ea:c1:81:79:08:ac:e5:10:ae:cb:ae:fc:00:
92:d0:94:ca:57:9f:8e:89:3b:49:1f:ae:11:cd:51:
7b:18:04:7e:83:e5:42:b1:e9:aa:e2:1f:7e:5a:af:
0a:e3:2a:26:57:c1:ed:bb:b1:88:e8:94:31:f4:7a:
c2:6b:2c:aa:4c:13:e4:e6:55:80:71:d1:4c:e8:46:
2c:cf:b7:0f:b6:65:d4:39:46:2b:8a:56:e8:0d:f0:
0f:d0:2c:7e:b8:3d:88:4e:50:41:72:b7:62:ef:ac:
66:88:fa:02:41:38:45:20:1d:8c:1e:db:24:0a:61:
be:9e:74:73:e2:ee:ce:d0:6e:a5:4e:7d:84:a4:23:
9f:1f:d5:95:a2:75:af:fd:e9:97:1c:2b:0a:54:e3:
19:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:69:A0:7D:53:34:2D:DD:ED:5B:BB:CA:09:CD:67:DE:E0:43:7E:5A
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/94AA763223F211F181564BD8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.88.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:f6:d4:af:58:76:bb:ba:05:8c:b5:26:d9:7e:9f:73:fd:31:
1d:aa:45:93:8a:25:cb:93:45:be:29:6b:df:e5:cd:9f:f2:b2:
7d:52:3a:af:69:85:ed:ca:27:d8:a0:96:91:6c:f7:1b:72:ad:
92:04:d9:b6:37:64:54:cd:56:c7:40:f3:a5:9a:d5:44:52:ef:
56:f0:56:a5:17:4c:7e:a8:29:e0:a2:ca:d4:0f:1e:90:2d:44:
e6:e8:c2:2c:0b:2e:19:5c:bd:9c:1a:31:6c:e5:b5:ca:c3:eb:
ce:b7:22:7a:93:7a:d0:7c:c2:bc:87:fa:8f:e9:57:b2:79:8d:
9a:91:43:11:96:f6:93:2e:a1:7f:12:9f:24:54:b1:e5:ae:52:
04:f7:bf:f2:19:ae:a2:a7:23:00:f5:27:a4:d1:b4:15:38:81:
f1:07:d2:fe:de:3c:1c:45:c6:08:49:aa:6d:24:f5:a8:e1:0e:
d0:99:3f:47:c4:48:88:97:cb:26:eb:7d:fa:99:21:4b:48:ef:
e0:8e:d4:78:34:67:fc:a8:d4:6b:e4:0b:76:6a:6b:c9:b8:0f:
c9:41:13:e4:32:c1:ab:7f:23:51:59:0e:95:9e:6a:ca:84:8b:
6f:a8:cb:8f:44:9a:16:4b:7c:93:59:e0:23:b7:c1:ed:0b:0b:
a5:65:d8:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 12:17:11 2026 by rpki-client