Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368CB9C/FE452F46528D11F1931543E1CE1D38B0/ECF7E816529011F19C538BF1CE1D38B0.roa
File: ECF7E816529011F19C538BF1CE1D38B0.roa (raw, json)
Hash identifier: KeoVSn8KB99E9DkmWp38WX9SJJQPBicrHWJ8t32m24w=
Subject key identifier: E0:19:82:26:A5:9E:DC:0D:26:BA:A4:28:9D:C0:45:AB:6C:E6:57:90
Certificate issuer: /CN=F368CB9CAF/serialNumber=4521AB7BCBA9E5CE99C71AFEBF237248B6A00C04
Certificate serial: 02
Authority key identifier: 45:21:AB:7B:CB:A9:E5:CE:99:C7:1A:FE:BF:23:72:48:B6:A0:0C:04
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/RSGre8up5c6Zxxr-vyNySLagDAQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368CB9C/FE452F46528D11F1931543E1CE1D38B0/ECF7E816529011F19C538BF1CE1D38B0.roa
Signing time: Mon 18 May 2026 08:09:43 +0000
ROA not before: Mon 18 May 2026 08:09:38 +0000
ROA not after: Thu 18 May 2028 08:09:38 +0000
asID: 329341
IP address blocks: 102.203.140.0/22 maxlen: 24
102.203.144.0/22 maxlen: 24
102.205.48.0/22 maxlen: 24
102.206.248.0/22 maxlen: 24
102.208.232.0/22 maxlen: 24
102.210.244.0/22 maxlen: 24
2c0f:42c0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368CB9C/FE452F46528D11F1931543E1CE1D38B0/RSGre8up5c6Zxxr-vyNySLagDAQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F368CB9C/FE452F46528D11F1931543E1CE1D38B0/RSGre8up5c6Zxxr-vyNySLagDAQ.mft
rsync://rpki.afrinic.net/repository/afrinic/RSGre8up5c6Zxxr-vyNySLagDAQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368CB9CAF, serialNumber=4521AB7BCBA9E5CE99C71AFEBF237248B6A00C04
Validity
Not Before: May 18 08:09:38 2026 GMT
Not After : May 18 08:09:38 2028 GMT
Subject: CN=6a0ac947-169f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9a:88:26:fd:cd:f1:ac:93:86:dd:5c:bd:fa:
8c:57:4b:b3:c9:32:41:cc:3e:12:9c:c0:f6:9e:fa:
8c:dc:75:6f:96:2c:e2:62:07:d3:11:6a:8a:e6:86:
42:a7:56:f0:dc:29:ce:56:77:0b:94:00:79:6c:c6:
7d:81:85:f7:b5:ff:e5:c8:45:d2:f0:17:fd:c9:81:
f9:fe:a0:88:b9:d9:7a:d6:1e:9b:cf:c3:25:18:91:
8a:77:a9:2b:02:6f:c4:fe:70:95:80:20:88:a2:30:
a7:8c:0c:0b:ac:89:bc:72:07:a0:e5:c2:e6:f4:91:
0a:7c:e6:84:14:d3:2c:75:d2:a6:88:ef:f1:98:a5:
4b:d6:28:db:c3:b8:ef:12:cc:b1:d7:88:98:9e:7a:
e6:05:2d:3c:c5:a5:a1:ff:e0:d1:7e:08:32:1f:96:
15:1b:7e:f2:18:68:a8:1a:fe:55:70:13:2a:28:3d:
11:74:b7:d8:04:7f:c0:2f:36:1f:df:06:03:5b:3c:
87:e4:ab:76:b8:e2:bb:cb:f7:45:72:24:c6:a8:f7:
f1:d2:8b:de:0f:a4:89:c1:75:ed:41:57:d3:65:28:
1f:c9:98:56:3f:00:b6:44:51:f6:1d:0b:2f:a1:7a:
dd:79:08:09:6b:f7:64:08:e7:31:ce:29:10:03:8a:
9e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:19:82:26:A5:9E:DC:0D:26:BA:A4:28:9D:C0:45:AB:6C:E6:57:90
X509v3 Authority Key Identifier:
keyid:45:21:AB:7B:CB:A9:E5:CE:99:C7:1A:FE:BF:23:72:48:B6:A0:0C:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368CB9C/FE452F46528D11F1931543E1CE1D38B0/RSGre8up5c6Zxxr-vyNySLagDAQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/RSGre8up5c6Zxxr-vyNySLagDAQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368CB9C/FE452F46528D11F1931543E1CE1D38B0/ECF7E816529011F19C538BF1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.203.140.0-102.203.147.255
102.205.48.0/22
102.206.248.0/22
102.208.232.0/22
102.210.244.0/22
IPv6:
2c0f:42c0::/32
Signature Algorithm: sha256WithRSAEncryption
91:dc:1f:fd:ce:48:f6:6b:99:94:7e:80:6c:32:31:59:2b:d6:
35:65:29:d2:ec:9c:64:9c:1e:01:44:d8:f0:e2:01:8d:d0:b2:
1e:c4:40:b9:9c:76:24:a5:58:02:57:69:dd:ab:56:61:9f:03:
6f:dc:e2:88:f9:91:07:35:c5:14:80:1b:3b:7e:61:9d:d2:fb:
ca:ed:92:d2:7d:f3:bc:2a:99:82:af:65:21:5c:c1:28:67:a5:
6d:0f:39:c0:12:2e:14:55:52:81:86:c7:fc:e2:b4:09:bb:bf:
42:34:28:47:0b:41:91:67:59:ee:09:7b:a9:86:49:4a:09:cf:
4a:ab:1c:e6:ec:d4:65:b0:41:92:f1:bb:b4:3c:0e:98:6e:39:
fe:6f:e6:8e:91:b6:b1:7d:f4:c2:5a:6d:52:fe:fc:6f:ee:95:
89:5d:ae:a0:56:ab:85:d3:82:43:54:a4:f6:24:ce:b1:e8:46:
86:4f:38:64:f1:e6:b1:b9:87:a2:55:56:d8:6b:5d:e7:df:ba:
27:fb:cb:49:99:8a:30:03:dd:b8:0c:79:3a:1d:cd:92:96:63:
fd:31:5d:7a:c7:43:94:19:4c:69:05:54:3f:73:24:d4:fb:10:
28:a4:c6:1d:93:a9:80:2d:0d:33:fa:4e:42:ab:e7:f7:57:37:
78:f4:74:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:54:00 2026 by rpki-client