Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363A203/353A12F40F3C11F1B55D76B5DAE4EC9C/C20CD5EA0F3C11F18C19D2B7DAE4EC9C.roa
File: C20CD5EA0F3C11F18C19D2B7DAE4EC9C.roa (raw, json)
Hash identifier: 9DL2whMS7ZI7tnV/tidUr5/DmnfTdqpW1ue5JaKqkBw=
Subject key identifier: 9E:F3:CF:75:55:53:B8:A3:06:F1:74:13:1B:92:8A:49:A3:08:A6:F4
Certificate issuer: /CN=F363A203AF/serialNumber=266D494DC335DA214A4FB0F67A9851EC9E30BB6B
Certificate serial: 02
Authority key identifier: 26:6D:49:4D:C3:35:DA:21:4A:4F:B0:F6:7A:98:51:EC:9E:30:BB:6B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Jm1JTcM12iFKT7D2ephR7J4wu2s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363A203/353A12F40F3C11F1B55D76B5DAE4EC9C/C20CD5EA0F3C11F18C19D2B7DAE4EC9C.roa
Signing time: Sat 21 Feb 2026 15:48:25 +0000
ROA not before: Sat 21 Feb 2026 15:48:20 +0000
ROA not after: Thu 21 Feb 2036 15:48:20 +0000
asID: 329703
IP address blocks: 102.203.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363A203/353A12F40F3C11F1B55D76B5DAE4EC9C/Jm1JTcM12iFKT7D2ephR7J4wu2s.crl
rsync://rpki.afrinic.net/repository/member_repository/F363A203/353A12F40F3C11F1B55D76B5DAE4EC9C/Jm1JTcM12iFKT7D2ephR7J4wu2s.mft
rsync://rpki.afrinic.net/repository/afrinic/Jm1JTcM12iFKT7D2ephR7J4wu2s.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 03:42:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363A203AF, serialNumber=266D494DC335DA214A4FB0F67A9851EC9E30BB6B
Validity
Not Before: Feb 21 15:48:20 2026 GMT
Not After : Feb 21 15:48:20 2036 GMT
Subject: CN=6999d3c9-3b83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e8:d2:bb:5f:1d:a1:ad:95:53:7e:9c:f8:eb:
97:c4:b0:ff:d9:21:10:6e:80:a2:a5:16:c1:7b:a9:
19:0f:4e:25:dd:e1:e6:ed:fe:56:45:e5:16:06:04:
f9:2e:49:7e:a5:1a:55:de:40:2c:97:f3:d2:72:47:
10:aa:84:78:e3:76:dc:b3:ad:23:e1:42:5d:03:29:
a3:ec:10:99:86:a3:2d:41:9c:43:c6:54:18:f9:f9:
ed:8d:0f:d0:52:ac:8d:71:bd:c0:d1:38:64:45:6b:
41:c2:6e:f2:b1:06:6a:4d:b8:70:2b:16:de:7c:93:
82:95:32:fe:da:32:46:82:a6:a1:09:a2:7b:f5:e5:
c1:d7:0a:e4:42:4e:b4:15:2a:c9:60:f1:71:fb:dc:
d0:c0:c8:b6:29:a5:b9:6a:de:81:71:46:02:fd:9e:
78:d9:c6:8a:be:b5:2c:4a:b4:3e:34:17:8d:a6:ca:
5b:ac:6b:e2:8c:66:f3:1a:c1:d8:c9:42:ac:f7:df:
8c:85:91:82:8e:c1:43:28:0e:5f:d8:1a:47:24:a5:
11:32:0b:24:19:3a:33:44:dd:d1:ba:4a:45:26:23:
7d:73:b1:27:15:49:ab:12:b4:e0:10:a3:9a:0d:b8:
6e:d2:8e:86:c4:77:03:7a:6a:fe:64:d2:27:2a:a2:
fa:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F3:CF:75:55:53:B8:A3:06:F1:74:13:1B:92:8A:49:A3:08:A6:F4
X509v3 Authority Key Identifier:
keyid:26:6D:49:4D:C3:35:DA:21:4A:4F:B0:F6:7A:98:51:EC:9E:30:BB:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363A203/353A12F40F3C11F1B55D76B5DAE4EC9C/Jm1JTcM12iFKT7D2ephR7J4wu2s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Jm1JTcM12iFKT7D2ephR7J4wu2s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363A203/353A12F40F3C11F1B55D76B5DAE4EC9C/C20CD5EA0F3C11F18C19D2B7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.203.112.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:13:a7:41:e9:ac:f4:89:fb:a7:ab:99:ad:4c:42:93:dd:ff:
20:1b:e0:16:be:7a:b3:83:6f:a0:55:d4:ec:f2:56:ad:f9:c8:
d4:80:5e:ce:8d:3a:a9:e3:49:af:9f:8d:de:00:71:f6:de:c9:
cf:d5:ed:73:98:13:15:6c:85:1f:a4:eb:c9:28:0d:54:d6:4e:
2d:68:4a:91:5b:ba:d3:65:c1:52:e2:9e:ae:c3:be:bf:d8:de:
c5:f6:9e:5e:98:43:e0:0d:83:a0:c4:86:35:a1:a1:36:b5:5c:
1b:a4:9b:e2:e9:df:8d:b7:95:8a:bc:eb:46:e3:11:af:3f:fb:
70:19:cc:ba:57:55:4a:6c:e1:4e:40:f5:f9:78:d9:3a:ba:93:
0f:56:d9:fd:a7:e6:7f:9a:a5:be:a0:0a:dd:33:7f:f5:c7:fa:
a7:13:77:a2:e6:2e:ff:22:7d:39:b7:07:77:0d:f8:ae:9c:7c:
4d:0e:9a:aa:13:36:bb:cc:72:51:c9:e3:6a:4c:c2:e2:64:7b:
3b:13:9b:0a:ae:92:bb:a2:49:30:e0:ab:15:c3:07:97:f1:f6:
d6:b9:90:f3:c1:31:fa:f3:b1:c7:d3:dd:7e:ce:1a:df:ec:cb:
53:a2:18:6d:21:8e:96:0b:c0:05:2d:34:e6:97:8a:d9:b2:53:
2d:58:8f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 04:00:03 2026 by rpki-client