Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364AFEC/C1CCFE3680F711EFACC908AA762E951A/A97C3F504AD011F1BE6F54D1CE1D38B0.roa
File: A97C3F504AD011F1BE6F54D1CE1D38B0.roa (raw, json)
Hash identifier: chlbzEdLSH7pwdvxJS0cCBl8R8+IFiUzyZpFklWO+JY=
Subject key identifier: 95:8C:B2:BC:80:CE:B5:12:17:42:1A:B5:21:1A:8F:70:F3:8B:43:66
Certificate issuer: /CN=F364AFECAF/serialNumber=46466D356ACB19519D64CD829BED403D042004EC
Certificate serial: 0266
Authority key identifier: 46:46:6D:35:6A:CB:19:51:9D:64:CD:82:9B:ED:40:3D:04:20:04:EC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/RkZtNWrLGVGdZM2Cm-1APQQgBOw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364AFEC/C1CCFE3680F711EFACC908AA762E951A/A97C3F504AD011F1BE6F54D1CE1D38B0.roa
Signing time: Fri 08 May 2026 11:25:49 +0000
ROA not before: Fri 08 May 2026 11:25:44 +0000
ROA not after: Sun 02 Apr 2028 11:25:44 +0000
asID: 329497
IP address blocks: 102.203.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364AFEC/C1CCFE3680F711EFACC908AA762E951A/RkZtNWrLGVGdZM2Cm-1APQQgBOw.crl
rsync://rpki.afrinic.net/repository/member_repository/F364AFEC/C1CCFE3680F711EFACC908AA762E951A/RkZtNWrLGVGdZM2Cm-1APQQgBOw.mft
rsync://rpki.afrinic.net/repository/afrinic/RkZtNWrLGVGdZM2Cm-1APQQgBOw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 14 May 2026 04:32:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 614 (0x266)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364AFECAF, serialNumber=46466D356ACB19519D64CD829BED403D042004EC
Validity
Not Before: May 8 11:25:44 2026 GMT
Not After : Apr 2 11:25:44 2028 GMT
Subject: CN=69fdc83c-3ea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b3:f2:9d:e4:d8:1c:4b:aa:c9:a1:f4:10:d9:
91:14:71:87:5f:c8:53:b5:bd:3e:b3:1e:1b:12:e9:
16:a1:c7:f5:17:ed:23:1b:60:32:28:33:4c:7a:db:
94:48:cc:47:e9:d1:86:30:53:b9:d0:ca:5b:1e:26:
3b:b0:a2:97:cd:93:39:c4:82:e0:29:51:54:c6:18:
f8:cd:4f:4c:47:3f:4d:c8:70:82:39:94:f0:46:eb:
30:ad:89:a0:b8:10:2e:0a:9b:d2:81:51:28:1d:29:
81:6c:7f:68:e4:8d:db:a8:b0:8f:1e:5b:6d:47:58:
a6:13:e3:64:12:80:49:51:68:d2:1a:86:15:c3:54:
7d:8d:8e:d2:d9:d5:02:7a:d6:00:25:b5:fd:9a:79:
76:53:ff:98:0a:fb:87:fb:9d:94:56:1e:c6:a0:8d:
ed:65:5f:d7:11:54:bf:bd:53:03:de:ba:6c:df:b6:
89:35:b1:59:77:be:8d:8c:fc:9d:3b:93:a5:85:ff:
be:e6:ec:20:1c:25:13:61:4f:cd:98:8f:c3:a8:90:
89:da:f1:0c:f1:6c:ab:6c:23:0d:60:54:fc:ac:2e:
7d:79:93:5d:1a:bf:9d:d8:1a:54:86:9f:f7:ac:81:
ae:84:bc:1e:2b:cd:c8:42:bc:c8:67:ea:b6:61:cd:
56:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:8C:B2:BC:80:CE:B5:12:17:42:1A:B5:21:1A:8F:70:F3:8B:43:66
X509v3 Authority Key Identifier:
keyid:46:46:6D:35:6A:CB:19:51:9D:64:CD:82:9B:ED:40:3D:04:20:04:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364AFEC/C1CCFE3680F711EFACC908AA762E951A/RkZtNWrLGVGdZM2Cm-1APQQgBOw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/RkZtNWrLGVGdZM2Cm-1APQQgBOw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364AFEC/C1CCFE3680F711EFACC908AA762E951A/A97C3F504AD011F1BE6F54D1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.203.103.0/24
Signature Algorithm: sha256WithRSAEncryption
33:07:c2:fe:75:4e:ed:b0:9d:1a:c8:c0:97:23:b8:c8:8e:fd:
6f:a5:78:6d:4d:15:4c:5b:79:c7:fd:05:97:9d:ab:e8:36:11:
b8:3c:5e:2b:3b:eb:fb:96:83:cf:95:ef:9e:22:a3:72:0c:6f:
cb:6c:54:0a:d5:be:c3:4d:96:14:cc:50:3e:00:a6:50:35:b6:
75:8b:dc:45:9e:db:ce:b3:13:63:fc:d7:89:aa:bf:51:90:e2:
f4:1b:ac:18:5f:ca:aa:31:d9:cf:ef:24:ba:65:79:c6:d6:1e:
56:b3:2e:56:87:cc:61:14:d3:87:88:e5:3a:44:d9:c2:b3:3b:
f6:96:16:6b:19:59:30:94:a3:6d:b8:69:3c:d4:19:53:39:9f:
e9:16:5b:01:57:df:80:df:84:ca:25:db:25:a3:bf:86:c5:e2:
51:58:34:3b:33:eb:82:3e:a3:83:1c:64:78:a0:ba:d3:fe:9d:
ee:1e:08:f4:4c:f5:06:81:15:78:89:7f:5c:71:7e:e8:66:a0:
13:e4:4d:f0:03:c5:44:d5:af:6e:7d:9d:e5:9c:be:3d:20:d1:
06:79:a8:9e:9c:d6:97:ca:1a:3b:f0:7d:8e:d1:2a:a3:17:fe:
b5:bf:50:ce:62:d9:87:c8:9a:06:79:fb:41:32:2d:30:ac:31:
16:2a:f7:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:44:38 2026 by rpki-client