Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3616990/A93E89803A7711F19B381905CF1D38B0/FAA05D2C492611F1AC4697B3CE1D38B0.roa
File: FAA05D2C492611F1AC4697B3CE1D38B0.roa (raw, json)
Hash identifier: xorOWYvfQgtYLkV5YjCLsFPmuKoApGkVbCKmg4lfAUk=
Subject key identifier: 43:C6:2E:F0:DA:95:56:68:DF:99:3E:7A:C6:F1:48:9A:54:E8:5F:73
Certificate issuer: /CN=F3616990AF/serialNumber=870816B510FB895E9EAF72910468AE96A1873E5C
Certificate serial: 16
Authority key identifier: 87:08:16:B5:10:FB:89:5E:9E:AF:72:91:04:68:AE:96:A1:87:3E:5C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/hwgWtRD7iV6er3KRBGiulqGHPlw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3616990/A93E89803A7711F19B381905CF1D38B0/FAA05D2C492611F1AC4697B3CE1D38B0.roa
Signing time: Wed 06 May 2026 08:38:39 +0000
ROA not before: Wed 06 May 2026 08:38:34 +0000
ROA not after: Sun 06 May 2029 08:38:34 +0000
asID: 329683
IP address blocks: 102.203.184.0/22 maxlen: 22
102.203.184.0/24 maxlen: 24
102.203.185.0/24 maxlen: 24
102.203.186.0/24 maxlen: 24
102.203.187.0/24 maxlen: 24
2c0f:4320::/32 maxlen: 32
2c0f:4320::/48 maxlen: 48
2c0f:4320:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3616990/A93E89803A7711F19B381905CF1D38B0/hwgWtRD7iV6er3KRBGiulqGHPlw.crl
rsync://rpki.afrinic.net/repository/member_repository/F3616990/A93E89803A7711F19B381905CF1D38B0/hwgWtRD7iV6er3KRBGiulqGHPlw.mft
rsync://rpki.afrinic.net/repository/afrinic/hwgWtRD7iV6er3KRBGiulqGHPlw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 09 May 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22 (0x16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3616990AF, serialNumber=870816B510FB895E9EAF72910468AE96A1873E5C
Validity
Not Before: May 6 08:38:34 2026 GMT
Not After : May 6 08:38:34 2029 GMT
Subject: CN=69fafe0f-4087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2d:b2:02:86:21:df:85:69:88:69:88:56:09:
f9:d9:a6:c6:66:e5:7f:31:f7:a1:39:0f:40:f4:d1:
b5:e1:a4:64:74:71:6c:1e:d2:1b:bd:57:28:67:85:
f1:39:bd:05:bb:7c:0b:e4:20:f8:e6:f9:f6:92:2e:
0f:85:d3:5a:4b:da:e7:bb:4f:fd:eb:24:5e:d7:90:
a6:59:12:57:56:52:43:b0:d3:ec:66:a8:ea:55:45:
b9:07:9a:65:aa:80:c4:9b:a8:3a:57:8e:c8:21:76:
cf:42:1e:c0:70:b0:41:32:e4:19:f9:88:da:d8:3d:
1d:bc:b7:4f:48:45:91:6e:63:0e:0b:c2:f0:c0:7f:
2a:10:13:cb:45:4b:77:8e:7a:93:cd:ce:a3:ed:02:
3c:82:a2:d9:8d:61:d5:2c:fc:b1:01:23:9a:0b:1c:
c8:e9:c5:0a:0c:ba:24:76:af:94:e6:c2:a0:05:0d:
73:94:8c:ad:ab:2b:a1:af:81:1d:5c:6e:bc:99:39:
5e:f6:63:5a:6d:89:cb:a4:63:82:a0:2c:a2:26:86:
f3:9f:ad:35:42:2b:a5:7d:e1:35:68:06:54:a3:13:
af:28:6e:11:5c:ea:d5:1c:72:b9:13:51:68:53:04:
b7:b0:8e:07:48:0f:55:5e:2c:54:cc:16:a7:9e:7a:
d9:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:C6:2E:F0:DA:95:56:68:DF:99:3E:7A:C6:F1:48:9A:54:E8:5F:73
X509v3 Authority Key Identifier:
keyid:87:08:16:B5:10:FB:89:5E:9E:AF:72:91:04:68:AE:96:A1:87:3E:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3616990/A93E89803A7711F19B381905CF1D38B0/hwgWtRD7iV6er3KRBGiulqGHPlw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hwgWtRD7iV6er3KRBGiulqGHPlw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3616990/A93E89803A7711F19B381905CF1D38B0/FAA05D2C492611F1AC4697B3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.203.184.0/22
IPv6:
2c0f:4320::/32
Signature Algorithm: sha256WithRSAEncryption
20:48:8f:14:56:26:59:a0:3e:d0:d8:32:a7:e1:3c:a3:f5:01:
21:75:f8:80:bb:9a:d5:2a:83:e3:a0:dc:85:f4:ab:e8:99:e1:
0d:fb:2a:11:b8:71:9d:87:21:c1:36:86:1f:52:ee:77:a1:7d:
70:10:55:90:3d:d4:db:93:54:bc:90:04:3f:ee:e7:e2:25:c5:
81:c4:5f:be:15:49:2a:af:db:77:34:4b:24:7b:1a:1a:5f:6c:
26:bb:a9:d4:22:5b:a2:3d:6f:f9:44:5d:98:e9:3c:4a:c9:03:
43:93:43:26:35:3f:d9:27:91:d1:a2:c5:21:24:52:8f:52:0a:
1c:43:8e:1a:bc:6c:15:a4:b5:d6:50:9b:b6:53:ef:41:33:81:
91:c6:bb:24:fb:12:a0:3a:34:27:47:99:6d:be:11:31:8a:79:
ff:21:a6:43:be:76:d2:cd:14:11:d4:ae:bb:6b:64:35:3e:2d:
36:f2:00:df:de:c8:ec:a3:25:5c:62:3c:b9:dc:4c:26:86:9e:
49:1a:38:fa:49:bd:7d:ef:fc:64:46:41:ac:8d:50:e0:7e:30:
c8:50:ff:46:f5:2d:1f:28:31:82:65:78:5d:99:d6:61:0a:2b:
5d:3b:e8:8a:4b:3d:cf:56:2f:75:9e:ee:53:5c:44:92:07:48:
83:13:b2:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 22:24:58 2026 by rpki-client