Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E3D54/10D7FDF8077C11F18A9EE389DAE4EC9C/D03272A4077D11F1B2E27D92DAE4EC9C.roa
File: D03272A4077D11F1B2E27D92DAE4EC9C.roa (raw, json)
Hash identifier: MNGXrpINz1Q16hHZ2N8QvRAzr2kMre4hq/Y0Tbq6HLY=
Subject key identifier: 85:B8:8C:9D:69:2A:3C:ED:84:C7:6C:A2:4D:DD:BB:0F:13:32:2E:56
Certificate issuer: /CN=F36E3D54AF/serialNumber=9C31BF61B8B6F07DD299B985E7329DFAAA3CE2A7
Certificate serial: 04
Authority key identifier: 9C:31:BF:61:B8:B6:F0:7D:D2:99:B9:85:E7:32:9D:FA:AA:3C:E2:A7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/nDG_Ybi28H3SmbmF5zKd-qo84qc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E3D54/10D7FDF8077C11F18A9EE389DAE4EC9C/D03272A4077D11F1B2E27D92DAE4EC9C.roa
Signing time: Wed 11 Feb 2026 19:13:57 +0000
ROA not before: Wed 11 Feb 2026 19:13:53 +0000
ROA not after: Mon 11 Feb 2036 19:13:53 +0000
asID: 329702
IP address blocks: 102.203.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E3D54/10D7FDF8077C11F18A9EE389DAE4EC9C/nDG_Ybi28H3SmbmF5zKd-qo84qc.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E3D54/10D7FDF8077C11F18A9EE389DAE4EC9C/nDG_Ybi28H3SmbmF5zKd-qo84qc.mft
rsync://rpki.afrinic.net/repository/afrinic/nDG_Ybi28H3SmbmF5zKd-qo84qc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E3D54AF, serialNumber=9C31BF61B8B6F07DD299B985E7329DFAAA3CE2A7
Validity
Not Before: Feb 11 19:13:53 2026 GMT
Not After : Feb 11 19:13:53 2036 GMT
Subject: CN=698cd4f5-fe54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:83:8c:8e:c3:a7:7d:d1:91:7e:5c:46:e1:28:
0f:ca:e8:52:0a:f9:9d:c5:85:07:64:a1:51:95:07:
b3:86:dd:cf:80:f5:70:3f:47:65:3b:65:3e:06:87:
60:6c:3b:c6:21:af:69:68:dc:21:39:77:aa:2c:c1:
db:66:50:10:53:a6:7d:31:de:4d:b1:2b:17:a1:41:
50:32:af:05:23:78:22:ae:1d:b7:76:9d:37:60:3a:
6e:ba:29:c4:c9:9b:bd:32:85:5f:a2:0e:f9:07:ea:
1a:09:b7:65:95:b3:47:3b:dd:a3:7b:d0:e4:59:5f:
cb:b8:54:aa:9c:b8:a4:57:7a:59:45:27:80:84:7a:
37:5f:10:98:91:36:3c:4b:af:7a:71:6c:a5:bc:b2:
00:e1:51:d3:3e:17:6f:f2:fd:cc:81:e7:14:c7:5c:
1c:cb:2a:b9:69:a1:ab:b9:3e:4b:a5:3f:fe:0d:40:
b2:72:d5:8a:56:6d:f4:70:f6:a1:81:b2:60:0d:79:
b8:92:fb:f9:fe:7b:46:7e:09:2e:e0:c9:93:29:66:
81:98:fe:15:e2:a6:d1:3c:9d:f8:bb:ff:8e:75:13:
c7:f5:b8:aa:dc:84:c5:b2:73:dd:9b:86:24:1b:99:
ec:b0:78:b7:40:62:7a:e0:91:e9:e5:ff:ff:37:2e:
fc:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:B8:8C:9D:69:2A:3C:ED:84:C7:6C:A2:4D:DD:BB:0F:13:32:2E:56
X509v3 Authority Key Identifier:
keyid:9C:31:BF:61:B8:B6:F0:7D:D2:99:B9:85:E7:32:9D:FA:AA:3C:E2:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3D54/10D7FDF8077C11F18A9EE389DAE4EC9C/nDG_Ybi28H3SmbmF5zKd-qo84qc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/nDG_Ybi28H3SmbmF5zKd-qo84qc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3D54/10D7FDF8077C11F18A9EE389DAE4EC9C/D03272A4077D11F1B2E27D92DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.203.85.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:67:c7:eb:d6:1f:f3:e9:28:6f:c2:d5:b6:9c:a9:27:01:bb:
e7:67:2d:51:f0:c3:9f:59:30:c0:27:07:d2:83:86:c9:00:5d:
15:28:51:6c:64:1a:f1:be:fb:48:e7:98:5a:0a:05:dc:19:3e:
91:53:ad:12:06:9d:ef:ab:6a:f0:27:c7:ba:9a:07:3c:e2:e4:
bb:89:c9:fc:c9:27:9e:42:a0:9c:76:96:07:54:93:1a:56:16:
b3:b6:ba:d9:c1:dd:79:d4:5e:6d:52:30:f9:9b:94:54:da:87:
a0:49:62:a0:4e:e1:22:ce:56:2b:c1:7d:b9:32:87:ae:f7:0d:
0b:1b:73:1b:51:1e:ad:f6:59:26:0f:c3:73:81:d6:3d:c5:cc:
41:61:dd:4e:b2:87:c4:e5:08:33:af:19:78:1b:69:93:e9:2e:
9a:ce:b0:f8:1d:13:77:ac:13:7a:d6:24:c5:e3:53:ab:ef:0d:
ea:25:02:84:15:e6:62:01:38:22:60:c5:52:8c:e1:dc:a9:99:
07:f4:72:4b:ef:9f:26:5a:d2:80:34:06:05:56:3e:dd:07:e3:
77:8f:0b:37:08:af:ce:76:9f:ab:36:96:fd:24:87:e3:4e:11:
bb:7b:74:f4:26:2f:df:ed:3c:b3:61:ca:b7:22:92:2d:b0:7a:
22:f0:13:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:41:54 2026 by rpki-client