Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364AFEC/C1CCFE3680F711EFACC908AA762E951A/5AA874664AD011F1A8AEEBD0CE1D38B0.roa
File: 5AA874664AD011F1A8AEEBD0CE1D38B0.roa (raw, json)
Hash identifier: RXIzo69umpuvsAlFMvqSVsB1Psb5JOFRD36LwToymak=
Subject key identifier: D4:60:1C:39:4A:0E:5F:87:5A:B7:CE:E1:64:2C:BE:98:E1:9A:17:61
Certificate issuer: /CN=F364AFECAF/serialNumber=46466D356ACB19519D64CD829BED403D042004EC
Certificate serial: 0262
Authority key identifier: 46:46:6D:35:6A:CB:19:51:9D:64:CD:82:9B:ED:40:3D:04:20:04:EC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/RkZtNWrLGVGdZM2Cm-1APQQgBOw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364AFEC/C1CCFE3680F711EFACC908AA762E951A/5AA874664AD011F1A8AEEBD0CE1D38B0.roa
Signing time: Fri 08 May 2026 11:23:36 +0000
ROA not before: Fri 08 May 2026 11:23:32 +0000
ROA not after: Sun 02 Apr 2028 11:23:32 +0000
asID: 329497
IP address blocks: 102.203.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364AFEC/C1CCFE3680F711EFACC908AA762E951A/RkZtNWrLGVGdZM2Cm-1APQQgBOw.crl
rsync://rpki.afrinic.net/repository/member_repository/F364AFEC/C1CCFE3680F711EFACC908AA762E951A/RkZtNWrLGVGdZM2Cm-1APQQgBOw.mft
rsync://rpki.afrinic.net/repository/afrinic/RkZtNWrLGVGdZM2Cm-1APQQgBOw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 14 May 2026 04:32:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 610 (0x262)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364AFECAF, serialNumber=46466D356ACB19519D64CD829BED403D042004EC
Validity
Not Before: May 8 11:23:32 2026 GMT
Not After : Apr 2 11:23:32 2028 GMT
Subject: CN=69fdc7b8-2118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fe:8c:fe:83:d4:d9:eb:f0:fa:9b:14:39:2c:
52:e3:8d:61:00:66:53:b2:f7:a3:95:7d:30:31:2c:
ad:38:94:12:88:6e:f0:f1:8b:28:d0:85:5d:94:8a:
d3:39:2f:26:f7:80:d7:da:14:42:66:41:66:26:d9:
3c:fe:a5:9a:92:d4:ef:54:16:1d:55:4b:b5:f9:be:
5a:1c:da:2f:19:2c:51:32:2b:72:fd:02:39:82:11:
97:ba:be:2e:d3:96:67:30:a9:37:6e:f3:b2:48:78:
79:f9:fc:bf:9a:9f:46:a2:fa:6f:45:54:91:a3:ea:
e8:1b:2d:b2:a2:aa:f1:e3:13:bf:fb:d0:3f:59:7f:
bb:88:79:0c:fb:f6:90:7d:a3:2b:83:67:c5:1c:23:
52:dd:ae:29:86:69:0e:24:8d:b6:3c:14:66:1b:31:
7f:c8:fd:69:03:12:28:6c:8c:c0:5b:69:21:36:45:
cd:02:c7:be:2a:ba:6c:73:57:ee:c5:52:a2:d2:65:
af:0e:14:c2:e2:69:45:8c:17:5b:5a:1e:d2:f2:fb:
ab:0d:d6:61:e0:92:d0:90:5a:ae:1e:fc:c9:8c:b0:
3f:f0:3f:4d:8c:b7:a9:16:3c:07:8f:cb:f5:43:45:
16:be:b6:e2:36:f8:ed:59:bb:62:22:69:7e:e6:19:
8f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:60:1C:39:4A:0E:5F:87:5A:B7:CE:E1:64:2C:BE:98:E1:9A:17:61
X509v3 Authority Key Identifier:
keyid:46:46:6D:35:6A:CB:19:51:9D:64:CD:82:9B:ED:40:3D:04:20:04:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364AFEC/C1CCFE3680F711EFACC908AA762E951A/RkZtNWrLGVGdZM2Cm-1APQQgBOw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/RkZtNWrLGVGdZM2Cm-1APQQgBOw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364AFEC/C1CCFE3680F711EFACC908AA762E951A/5AA874664AD011F1A8AEEBD0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.203.101.0/24
Signature Algorithm: sha256WithRSAEncryption
67:ef:25:cf:db:4c:10:0c:42:7f:7f:35:13:80:02:a8:5b:41:
b1:6b:79:5c:8f:56:6e:dc:3d:ae:63:81:34:c3:09:eb:e8:79:
39:89:95:ab:cd:24:f1:1a:cd:33:86:03:e3:5d:8c:34:cb:01:
b9:31:54:35:42:59:4a:23:82:e7:64:80:59:06:b9:ba:6c:d7:
3f:b7:22:85:96:a2:62:72:2a:b0:58:2e:cb:db:56:40:1e:b2:
8c:37:9c:53:34:9e:8f:39:7f:7b:ce:a2:b1:ca:80:a0:05:e0:
cd:8f:4f:90:82:0c:f0:8f:2b:05:f9:a3:2a:ad:80:d0:2a:b2:
76:1d:6e:22:d2:49:d0:ab:49:9c:17:f5:f4:e0:42:1c:7f:b9:
98:73:8c:3e:d0:8e:9b:3f:fb:15:6a:29:a2:ff:2b:4f:77:19:
66:7c:58:e3:44:e3:72:b2:b5:d8:61:bc:65:1e:e9:f5:e5:b8:
87:4f:28:eb:8f:c7:ce:1f:35:d9:b2:6e:a5:58:24:fa:79:69:
69:f8:50:04:cb:55:78:89:92:8a:16:4a:1d:2c:4f:04:08:90:
e8:fc:03:df:88:e6:23:d4:4e:a3:05:fe:ea:56:6e:88:cd:e6:
02:e6:3c:8e:2a:6b:c6:1b:ea:65:cc:a2:73:52:18:35:33:24:
9c:c7:4e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:44:37 2026 by rpki-client