Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364791E/7EC3F6362F8511EEA83976724AD9E6FC/C26927C8123411F1827B8CF6DAE4EC9C.roa
File: C26927C8123411F1827B8CF6DAE4EC9C.roa (raw, json)
Hash identifier: FKmgrUQrHwB7Bn53T709mzLbEAJMnGZv0nhnz9QSrfE=
Subject key identifier: 28:EE:A5:B6:0F:38:D4:7B:A3:1B:D9:56:43:50:29:7D:D9:EA:48:D8
Certificate issuer: /CN=F364791EAF/serialNumber=292584A1ECFE2AF309322D72E62D8D5C6A5EF7AF
Certificate serial: 03D2
Authority key identifier: 29:25:84:A1:EC:FE:2A:F3:09:32:2D:72:E6:2D:8D:5C:6A:5E:F7:AF
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/KSWEoez-KvMJMi1y5i2NXGpe968.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364791E/7EC3F6362F8511EEA83976724AD9E6FC/C26927C8123411F1827B8CF6DAE4EC9C.roa
Signing time: Wed 25 Feb 2026 10:28:43 +0000
ROA not before: Wed 25 Feb 2026 10:28:39 +0000
ROA not after: Mon 25 Feb 2036 10:28:39 +0000
asID: 329206
IP address blocks: 102.203.80.0/22 maxlen: 24
102.207.60.0/22 maxlen: 24
102.209.20.0/22 maxlen: 24
102.213.4.0/22 maxlen: 24
2c0f:7580::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364791E/7EC3F6362F8511EEA83976724AD9E6FC/KSWEoez-KvMJMi1y5i2NXGpe968.crl
rsync://rpki.afrinic.net/repository/member_repository/F364791E/7EC3F6362F8511EEA83976724AD9E6FC/KSWEoez-KvMJMi1y5i2NXGpe968.mft
rsync://rpki.afrinic.net/repository/afrinic/KSWEoez-KvMJMi1y5i2NXGpe968.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 02:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 978 (0x3d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364791EAF, serialNumber=292584A1ECFE2AF309322D72E62D8D5C6A5EF7AF
Validity
Not Before: Feb 25 10:28:39 2026 GMT
Not After : Feb 25 10:28:39 2036 GMT
Subject: CN=699ecedb-3956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:06:2b:b1:63:92:cc:49:19:41:0d:4d:48:20:
8b:7c:79:9b:64:e8:22:b6:ce:60:44:80:81:ff:ac:
c0:ba:e1:76:26:f4:dd:a2:87:e6:bd:df:1a:bc:83:
86:6b:34:ba:de:99:31:3b:db:25:45:56:cc:ae:cb:
3f:f7:ca:59:67:25:1f:44:42:f6:46:76:5c:39:37:
64:e0:24:bf:48:e3:46:72:bb:b0:e2:19:13:98:3f:
77:1f:5f:68:00:4c:7b:0b:c9:80:94:6b:11:8c:d4:
97:c1:ae:2b:fd:c1:da:8e:e7:96:95:a1:b9:1e:e2:
1b:8d:12:b3:b1:6c:ed:2d:c5:28:df:6e:3e:09:75:
09:01:ed:c9:95:56:62:8d:1f:d4:d5:ca:36:91:2c:
01:0f:bf:89:db:47:1d:5e:d3:88:00:2b:6b:88:40:
57:82:68:ee:9e:25:54:45:35:2b:2c:6c:48:87:25:
1f:14:f4:c0:86:7c:09:e7:a8:3c:db:a2:ab:b7:8c:
a5:0b:be:0d:fa:0e:49:0c:e2:15:52:b3:e0:5d:af:
09:b6:8d:97:6d:76:02:91:9d:22:a2:a3:f2:9f:38:
13:65:60:21:c2:a6:4f:93:98:20:6a:1a:be:5d:0a:
ed:36:58:84:7a:64:da:3e:38:cd:31:95:ae:ef:d2:
d9:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:EE:A5:B6:0F:38:D4:7B:A3:1B:D9:56:43:50:29:7D:D9:EA:48:D8
X509v3 Authority Key Identifier:
keyid:29:25:84:A1:EC:FE:2A:F3:09:32:2D:72:E6:2D:8D:5C:6A:5E:F7:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364791E/7EC3F6362F8511EEA83976724AD9E6FC/KSWEoez-KvMJMi1y5i2NXGpe968.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KSWEoez-KvMJMi1y5i2NXGpe968.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364791E/7EC3F6362F8511EEA83976724AD9E6FC/C26927C8123411F1827B8CF6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.203.80.0/22
102.207.60.0/22
102.209.20.0/22
102.213.4.0/22
IPv6:
2c0f:7580::/32
Signature Algorithm: sha256WithRSAEncryption
90:7b:62:2b:27:81:d9:ee:66:69:ad:0b:ff:c3:f4:30:94:7d:
bc:3e:85:ea:22:a5:42:3e:58:53:36:b0:bf:fc:64:be:bb:68:
6d:3d:4a:64:b3:3e:93:bd:65:e3:c9:92:5c:29:81:47:9d:62:
00:43:69:33:79:48:b0:82:0a:91:ef:ee:7c:47:4b:fe:cc:13:
de:10:ca:4b:b5:ac:ee:42:09:95:ee:53:00:47:7d:f8:a0:b8:
03:bd:1e:43:3a:c0:29:2c:65:51:07:11:35:e6:2a:8d:65:24:
2a:6c:51:a3:93:d9:5e:ab:a4:58:62:80:5a:2b:24:a6:44:d3:
ca:51:6f:3d:e4:d9:ed:a8:c8:10:8b:ba:bd:d0:1e:82:6f:c5:
b5:0e:72:0a:f0:ca:9c:35:fc:a1:1e:05:c4:b4:44:a4:63:1b:
81:d9:77:a9:9b:36:cc:3b:0f:cd:ac:0a:7e:6f:2a:11:97:a8:
65:29:4e:d7:b3:f8:73:12:f2:94:7e:16:1c:33:3e:6b:0e:48:
50:a1:6b:b0:10:66:f8:e0:cf:19:9f:0f:5e:68:f4:6c:d0:e3:
a3:88:b5:d5:54:52:93:f7:1e:2a:3f:fa:c2:46:05:4c:d2:be:
8d:da:9e:d2:c4:90:85:d3:7d:cb:04:8b:05:ca:54:1d:cc:25:
06:25:e9:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:57:08 2026 by rpki-client