Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E3D54/10D7FDF8077C11F18A9EE389DAE4EC9C/FCE69F10077C11F1B6D7578EDAE4EC9C.roa
File: FCE69F10077C11F1B6D7578EDAE4EC9C.roa (raw, json)
Hash identifier: l9w1XT16v5pOs6ZmyalOJI7UHw3oAkl12LArNgvLDY8=
Subject key identifier: 6B:D8:5D:8E:C5:59:38:7D:46:8A:5F:DD:54:79:78:CC:9B:F4:55:87
Certificate issuer: /CN=F36E3D54AF/serialNumber=9C31BF61B8B6F07DD299B985E7329DFAAA3CE2A7
Certificate serial: 02
Authority key identifier: 9C:31:BF:61:B8:B6:F0:7D:D2:99:B9:85:E7:32:9D:FA:AA:3C:E2:A7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/nDG_Ybi28H3SmbmF5zKd-qo84qc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E3D54/10D7FDF8077C11F18A9EE389DAE4EC9C/FCE69F10077C11F1B6D7578EDAE4EC9C.roa
Signing time: Wed 11 Feb 2026 19:08:03 +0000
ROA not before: Wed 11 Feb 2026 19:07:57 +0000
ROA not after: Mon 11 Feb 2036 19:07:57 +0000
asID: 329702
IP address blocks: 102.203.84.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E3D54/10D7FDF8077C11F18A9EE389DAE4EC9C/nDG_Ybi28H3SmbmF5zKd-qo84qc.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E3D54/10D7FDF8077C11F18A9EE389DAE4EC9C/nDG_Ybi28H3SmbmF5zKd-qo84qc.mft
rsync://rpki.afrinic.net/repository/afrinic/nDG_Ybi28H3SmbmF5zKd-qo84qc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E3D54AF, serialNumber=9C31BF61B8B6F07DD299B985E7329DFAAA3CE2A7
Validity
Not Before: Feb 11 19:07:57 2026 GMT
Not After : Feb 11 19:07:57 2036 GMT
Subject: CN=698cd393-2708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:06:2e:6b:54:70:0b:79:5b:92:13:bf:1b:82:
3c:f6:51:7e:56:e5:c0:53:fd:f1:a9:22:3f:96:ca:
eb:f4:06:4a:26:34:7d:ed:65:0a:d4:c7:6a:81:d4:
18:98:3a:6c:30:f6:38:e9:e7:5e:99:9d:ad:86:1c:
73:bc:98:19:4a:78:31:5a:e4:5b:4e:1c:ff:8c:3a:
65:df:d9:00:5b:af:66:6b:80:e4:1f:7f:7c:a9:20:
5e:96:be:0c:7d:5c:bc:23:93:8c:2c:c1:ed:c0:05:
9c:51:d9:c8:e9:26:7a:7a:0c:d8:10:0e:98:a4:28:
3d:1c:f5:4d:26:21:e8:6e:cd:2a:be:ca:2b:bf:78:
f8:59:4f:41:1a:8a:e7:69:d9:0b:6d:5c:87:12:08:
d8:05:06:02:14:7c:fa:8b:1c:ec:df:da:8b:d9:e8:
5c:af:7b:7e:96:d9:e5:44:14:ee:11:fd:df:c5:49:
ef:a5:db:58:c4:50:4a:3d:70:f0:42:c8:dc:d4:91:
0f:ce:b8:d7:18:a0:8f:45:f4:d6:f2:45:13:cf:99:
a3:3d:01:9b:20:44:57:bf:62:a3:71:11:dd:4f:02:
ba:24:a0:b5:71:b8:94:be:b3:53:c4:e4:af:38:d8:
7c:c8:74:02:1a:b0:dd:11:75:89:6b:29:7a:de:46:
5b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:D8:5D:8E:C5:59:38:7D:46:8A:5F:DD:54:79:78:CC:9B:F4:55:87
X509v3 Authority Key Identifier:
keyid:9C:31:BF:61:B8:B6:F0:7D:D2:99:B9:85:E7:32:9D:FA:AA:3C:E2:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3D54/10D7FDF8077C11F18A9EE389DAE4EC9C/nDG_Ybi28H3SmbmF5zKd-qo84qc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/nDG_Ybi28H3SmbmF5zKd-qo84qc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3D54/10D7FDF8077C11F18A9EE389DAE4EC9C/FCE69F10077C11F1B6D7578EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.203.84.0/23
Signature Algorithm: sha256WithRSAEncryption
83:1e:f6:6a:f9:a5:35:e7:d5:9f:28:40:3f:23:6d:28:f0:cc:
d2:8b:20:44:94:99:74:7a:dc:1f:2e:7b:f0:46:9e:e9:d5:f7:
5e:98:7d:71:d8:a1:73:24:98:98:a4:fb:4d:17:71:f2:91:40:
c6:2c:5f:3f:4f:3c:59:ce:30:63:78:79:54:45:f8:16:f3:f4:
ad:90:fc:07:4f:65:4a:84:e2:9d:df:6f:8e:51:1d:ba:de:8d:
ca:d7:ca:c5:fb:b5:88:9a:f9:d2:de:a4:34:de:7c:68:48:26:
37:e3:3e:f1:5d:18:df:e1:6c:d9:4c:3b:62:18:50:92:b5:2c:
df:1a:9d:9c:ab:51:9e:93:19:b4:c2:df:1c:df:a8:0d:f7:d7:
30:52:bc:b5:2d:a1:33:31:33:a4:7a:ae:d7:3c:61:a2:c4:8a:
bd:d7:b2:e2:47:2f:6a:df:3d:4c:60:44:0a:1b:1d:2e:72:69:
14:39:4b:a6:72:60:29:7b:df:b6:32:35:57:80:63:a5:8b:df:
87:61:ae:2a:a7:3e:9a:08:61:ce:1b:ec:a8:da:9a:3d:c8:1e:
f7:bd:ef:40:df:0b:d8:10:e6:66:c9:30:6c:24:ff:89:44:4a:
db:90:84:03:fc:d2:2d:40:5e:a5:66:13:82:ee:48:60:ce:82:
a6:fa:6d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:41:55 2026 by rpki-client