Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/D16DBB3654FA11F19A7B69A6CE1D38B0.roa
File: D16DBB3654FA11F19A7B69A6CE1D38B0.roa (raw, json)
Hash identifier: +VPyVTOZlv1HumGcygJJLoW0UsbclgscixjxcGWOcN8=
Subject key identifier: CD:69:9E:FE:9F:86:B9:BB:C7:A2:73:3B:63:05:23:CA:4E:82:77:72
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 117B
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/D16DBB3654FA11F19A7B69A6CE1D38B0.roa
Signing time: Thu 21 May 2026 09:52:46 +0000
ROA not before: Thu 21 May 2026 09:52:42 +0000
ROA not after: Thu 20 May 2027 09:52:42 +0000
asID: 208185
IP address blocks: 102.135.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 07 Jun 2026 02:37:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4475 (0x117b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: May 21 09:52:42 2026 GMT
Not After : May 20 09:52:42 2027 GMT
Subject: CN=6a0ed5ee-4c12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:54:23:b6:61:53:86:a2:21:42:be:fe:5f:1c:
79:d0:b0:9d:51:a8:4b:19:9c:f1:78:f9:dd:39:0d:
98:28:cf:36:56:33:f3:d7:31:e7:98:fd:d4:24:de:
13:6d:ef:fe:82:73:7f:f1:39:af:60:a1:13:74:82:
c3:b5:8b:d7:89:c5:52:1a:dc:78:92:64:7a:ab:f1:
32:28:27:b8:95:6a:43:27:db:1c:a8:7a:51:b6:12:
c6:c0:80:a3:ed:d2:a8:9e:65:ea:75:2f:6c:8f:9d:
e3:20:2d:8e:1b:fd:31:c6:85:d4:82:6a:22:88:3e:
0e:63:3a:48:d6:b0:ee:23:40:0b:76:9b:95:fc:0a:
4e:07:9c:25:51:f5:37:5b:03:90:e8:3b:d6:ca:b5:
ac:81:a9:71:87:c3:7f:d9:5d:ea:c4:74:dc:87:85:
fc:d4:f4:5d:af:11:3b:29:30:3d:1c:4b:43:d1:16:
eb:bc:a6:35:bf:cd:b2:c3:22:2a:5c:27:73:df:c0:
ad:8a:d2:5e:85:a5:2f:ed:21:2a:70:01:c7:81:e4:
3d:5a:ab:ed:13:4c:29:ba:3e:88:15:0b:b0:37:34:
0e:ff:a3:f2:f6:29:1d:f2:c7:52:9d:63:9c:50:46:
da:c3:55:a8:23:3f:e2:bf:5d:9d:75:8c:ed:52:88:
ce:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:69:9E:FE:9F:86:B9:BB:C7:A2:73:3B:63:05:23:CA:4E:82:77:72
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/D16DBB3654FA11F19A7B69A6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.121.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:a8:da:5c:f1:4d:4a:27:f7:43:3c:f8:3f:7b:bd:f1:2c:11:
80:16:5a:2a:fb:73:be:5b:83:c5:2e:83:e5:a7:3f:85:e3:d2:
36:ae:f8:87:fc:1b:60:25:18:64:8a:40:8e:b7:0c:c3:a0:20:
22:a8:ab:ae:3d:c1:af:b7:b3:cc:df:9b:bf:b6:5f:ff:e1:f9:
d7:be:99:b2:3b:45:1c:24:43:e2:57:1c:19:05:f9:b5:30:f2:
15:d5:cb:44:89:0a:92:78:b5:9a:f1:0e:84:52:15:80:8f:b3:
60:f7:ba:1b:e5:82:af:f8:95:a9:59:3c:f1:f4:e8:80:97:e4:
d6:0a:48:ed:8f:ab:ef:98:44:d5:77:33:92:f7:7b:fa:d7:1a:
d9:91:eb:be:7d:d4:b8:3e:2e:7a:11:fd:9d:d7:1f:44:aa:19:
28:8a:05:ad:c6:ae:86:ca:0b:b3:38:a1:fe:d4:fe:8b:f7:e8:
03:7a:0d:ae:c2:fc:9f:3c:5e:35:67:a0:74:43:7b:0e:41:1e:
85:f2:ed:85:4f:e5:a2:f6:51:6b:b7:e8:70:89:2f:3f:00:27:
8d:31:ae:f2:04:37:a1:6a:7f:0f:51:b1:45:9c:76:d0:ba:7a:
e3:18:59:8c:a8:2d:2f:7c:5b:fa:f4:3a:00:4d:6c:ea:9f:ea:
86:0f:4b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 02:27:49 2026 by rpki-client