Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/DF13E8A054FA11F19A3271A6CE1D38B0.roa
File: DF13E8A054FA11F19A3271A6CE1D38B0.roa (raw, json)
Hash identifier: GfgcTIl+9VFDUEq3ZN4dNpUF7IzLxLNbjQ5/RqRPDVo=
Subject key identifier: BC:06:DB:68:36:4D:54:60:00:52:FC:F4:7F:95:2A:07:ED:04:AC:72
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 117D
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/DF13E8A054FA11F19A3271A6CE1D38B0.roa
Signing time: Thu 21 May 2026 09:53:09 +0000
ROA not before: Thu 21 May 2026 09:53:04 +0000
ROA not after: Thu 20 May 2027 09:53:04 +0000
asID: 208185
IP address blocks: 102.135.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 07 Jun 2026 02:37:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4477 (0x117d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: May 21 09:53:04 2026 GMT
Not After : May 20 09:53:04 2027 GMT
Subject: CN=6a0ed605-375a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:fd:34:95:34:fe:04:cd:5e:0f:4b:e9:56:78:
57:2e:e6:0e:62:3e:9d:09:cf:2f:f6:2d:35:9d:8c:
d4:b7:64:d7:bd:2c:68:aa:db:91:7a:f6:27:b7:dd:
99:82:1f:ae:a2:08:eb:61:f9:c0:06:9a:ab:fa:c3:
7c:62:12:c0:b8:25:06:f0:27:cf:9c:d3:4d:23:60:
6c:e6:b1:d4:4e:83:31:c6:51:df:ea:ef:e2:db:e7:
26:5f:e9:b8:b4:87:f1:4d:d1:b1:2a:04:f1:13:8a:
7b:d3:b0:04:33:ad:80:83:d4:50:e8:e8:eb:4f:e5:
67:31:78:87:04:b6:5f:42:a9:8f:df:55:7b:10:30:
02:ba:52:d4:3a:68:96:74:cf:ee:5d:7f:36:43:2d:
bb:64:f9:c1:9f:22:6c:5f:2a:fe:11:e6:df:bb:63:
1e:ab:2c:2e:c6:ed:29:c2:f8:d1:df:86:41:fa:f0:
70:9f:f4:b0:92:28:aa:f9:f1:e5:54:ee:ab:03:bf:
22:b7:ef:98:06:0a:b5:6b:0b:0a:d0:e6:59:85:a0:
d2:1f:2d:1f:f6:36:6e:cd:58:77:02:9b:41:88:e6:
10:f0:8d:97:70:2b:bd:12:99:33:17:a8:05:29:18:
a8:59:e6:fa:23:9f:a8:a7:b2:c5:76:54:71:01:b0:
4d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:06:DB:68:36:4D:54:60:00:52:FC:F4:7F:95:2A:07:ED:04:AC:72
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/DF13E8A054FA11F19A3271A6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.122.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:02:69:2a:ea:cc:89:ab:c0:45:0a:da:28:2d:44:bc:84:2f:
41:ac:21:d7:8d:d9:c4:72:cc:e0:41:7b:9e:29:d8:4f:7b:a3:
a0:6b:b4:95:45:56:08:24:70:b8:ae:3b:31:33:6f:70:45:08:
5a:c4:9a:82:38:2a:eb:3b:e2:d4:d2:79:7d:b7:9d:04:ad:94:
e7:55:c6:97:d7:d9:92:81:69:04:b8:e8:f7:06:af:ef:2d:42:
19:79:5c:8d:5c:94:5a:59:d5:88:25:96:86:2a:0f:d3:32:8f:
97:8e:56:7a:7c:62:08:f9:14:5e:00:22:cc:e4:ec:42:6c:09:
2d:39:b8:24:86:5a:bd:47:db:5f:ca:2f:d6:fd:03:b7:64:fd:
d9:d9:ec:72:c9:67:08:d5:d4:ba:99:36:be:d6:11:d9:de:2a:
e6:c0:23:84:e8:68:fe:41:ec:63:71:b4:95:84:a9:b6:80:98:
12:91:d1:24:65:0e:56:a8:3a:36:a0:70:b0:f3:f5:bf:1a:a7:
5c:fc:a7:0b:4f:ca:9f:11:e9:19:ab:f2:00:bd:5b:52:ee:1f:
9b:26:e4:24:e4:93:85:9d:6a:bd:4e:50:5a:8e:4a:75:42:ff:
1a:e1:17:06:6d:a0:2f:c7:a4:ab:8b:cc:b5:5e:9a:54:8a:a9:
95:36:dd:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 02:28:28 2026 by rpki-client