Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/04FB45606B5611F1A83D0B03CF1D38B0.roa
File: 04FB45606B5611F1A83D0B03CF1D38B0.roa (raw, json)
Hash identifier: d1PRoXtN1fAKEcHcs168YQU2HSkHLOxSasfRHV/jKKk=
Subject key identifier: 07:64:88:D4:18:81:DE:45:60:46:AD:AA:98:4E:AE:46:13:C4:C6:7A
Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial: 09B0
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/04FB45606B5611F1A83D0B03CF1D38B0.roa
Signing time: Thu 18 Jun 2026 20:41:02 +0000
ROA not before: Thu 18 Jun 2026 20:40:57 +0000
ROA not after: Tue 28 Jul 2026 20:40:57 +0000
asID: 211826
IP address blocks: 102.177.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 11 Jul 2026 02:03:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2480 (0x9b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DFA4AF, serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Validity
Not Before: Jun 18 20:40:57 2026 GMT
Not After : Jul 28 20:40:57 2026 GMT
Subject: CN=6a3457de-8cf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:da:30:4f:25:8f:e4:f7:e3:9f:71:18:dd:63:
a3:91:e5:e4:5d:3d:06:67:62:b7:5d:b8:9e:8e:59:
38:cc:fb:61:68:51:79:c2:0b:b9:a1:21:5c:a8:80:
1b:33:39:3d:11:d4:94:a4:ea:19:11:16:bc:91:8e:
73:e0:02:cc:e3:b6:ff:41:94:00:74:86:77:63:cc:
95:a0:71:87:7d:dd:88:2c:77:f7:1f:81:fb:b1:ba:
e4:89:74:ac:d6:cc:92:2a:34:e0:57:fa:7d:e2:5d:
0a:73:d4:0a:51:8a:32:95:3c:b4:d0:4a:6e:66:06:
1e:f0:ee:ee:bf:be:a3:9a:62:a4:32:35:e9:ab:49:
05:bd:cb:a4:b7:9d:47:1b:22:d7:41:7e:a4:88:a7:
c2:e1:49:13:1a:02:eb:69:48:64:8d:bb:20:77:53:
c6:5f:19:c3:3b:34:47:d2:9c:a2:a8:33:e6:74:4a:
68:10:75:12:17:08:7f:7a:03:5c:e7:55:19:7f:c8:
c1:76:0f:e9:6f:8f:7f:fb:99:84:56:b4:e9:df:0b:
ea:1f:f7:75:2f:8d:bd:2c:b8:ff:c9:43:be:58:94:
0e:dd:f7:8f:0f:8b:b4:46:11:13:51:f6:a6:97:8d:
d1:58:45:a7:e6:a0:d2:73:5f:53:10:80:72:42:6d:
f1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:64:88:D4:18:81:DE:45:60:46:AD:AA:98:4E:AE:46:13:C4:C6:7A
X509v3 Authority Key Identifier:
keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/04FB45606B5611F1A83D0B03CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.184.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:9b:2e:9b:62:b6:a5:99:c7:8d:eb:40:ca:db:f4:91:a7:32:
d9:62:55:ed:5d:1b:cb:17:7f:64:d5:f5:0d:76:53:7d:e2:a2:
b5:a1:db:c8:e4:00:3a:a7:fa:fb:b2:ae:dd:6f:74:e5:be:6d:
00:51:d9:87:d0:c6:9d:85:1d:42:23:12:cf:84:81:07:43:d4:
ab:e8:df:ef:42:aa:e2:04:a7:83:b1:87:a8:b9:78:2d:c3:e3:
41:51:87:6f:89:51:13:68:6d:6e:30:79:69:ab:9e:13:22:36:
c6:4b:27:32:43:60:fa:d1:13:84:4a:0c:6e:39:e2:7d:32:35:
47:1f:3b:6e:2d:b6:44:3d:7d:71:a8:c6:bf:00:98:9d:06:94:
de:4f:2e:dd:33:5e:0d:0f:63:ab:8d:1e:80:88:bf:02:2d:78:
c4:74:ec:b9:3d:ef:7a:00:90:49:07:9a:70:54:0f:13:67:c4:
49:c0:e0:e3:63:05:d7:e2:8d:26:55:9c:28:5e:73:27:50:6b:
39:6b:c4:4b:e3:4c:14:1c:33:2a:06:00:67:66:35:37:e7:20:
ca:a9:af:0c:f0:2a:93:bf:d3:af:20:37:72:e6:84:43:f9:df:
aa:a1:98:13:c5:fe:ef:06:7d:c1:56:5b:98:1f:7b:41:61:53:
ef:9a:f4:fa
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCbAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
N0RGQTRBRjExMC8GA1UEBRMoOTdDOTBFMjUyMTJEODg3Q0Y5RTFERTZGRERGNTUx
QkE4MTJGQTEzOTAeFw0yNjA2MTgyMDQwNTdaFw0yNjA3MjgyMDQwNTdaMBgxFjAU
BgNVBAMTDTZhMzQ1N2RlLThjZjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCo2jBPJY/k9+OfcRjdY6OR5eRdPQZnYrdduJ6OWTjM+2FoUXnCC7mhIVyo
gBszOT0R1JSk6hkRFryRjnPgAszjtv9BlAB0hndjzJWgcYd93Ygsd/cfgfuxuuSJ
dKzWzJIqNOBX+n3iXQpz1ApRijKVPLTQSm5mBh7w7u6/vqOaYqQyNemrSQW9y6S3
nUcbItdBfqSIp8LhSRMaAutpSGSNuyB3U8ZfGcM7NEfSnKKoM+Z0SmgQdRIXCH96
A1znVRl/yMF2D+lvj3/7mYRWtOnfC+of93Uvjb0suP/JQ75YlA7d948Pi7RGERNR
9qaXjdFYRafmoNJzX1MQgHJCbfEVAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUB2SI
1BiB3kVgRq2qmE6uRhPExnowHwYDVR0jBBgwFoAUl8kOJSEtiHz54d5v3fVRuoEv
oTkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdERkE0LzA4QjhEODIwOTNBQzExRUJCMUQyQTgzMkY4QUVBMjI4L2w4a09K
U0V0aUh6NTRkNXYzZlZSdW9Fdm9Uay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2w4a09KU0V0aUh6NTRkNXYzZlZSdW9Fdm9Uay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjdERkE0LzA4QjhEODIwOTNBQzExRUJCMUQyQTgzMkY4
QUVBMjI4LzA0RkI0NTYwNkI1NjExRjFBODNEMEIwM0NGMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmsbgwDQYJKoZIhvcNAQEL
BQADggEBAK2bLptitqWZx43rQMrb9JGnMtliVe1dG8sXf2TV9Q12U33iorWh28jk
ADqn+vuyrt1vdOW+bQBR2YfQxp2FHUIjEs+EgQdD1Kvo3+9CquIEp4Oxh6i5eC3D
40FRh2+JURNobW4weWmrnhMiNsZLJzJDYPrRE4RKDG454n0yNUcfO24ttkQ9fXGo
xr8AmJ0GlN5PLt0zXg0PY6uNHoCIvwIteMR07Lk973oAkEkHmnBUDxNnxEnA4ONj
BdfijSZVnChecydQazlrxEvjTBQcMyoGAGdmNTfnIMqprwzwKpO/068gN3LmhEP5
36qhmBPF/u8GfcFWW5gfe0FhU++a9Po=
-----END CERTIFICATE-----
Generated at Thu Jul 9 16:52:38 2026 by rpki-client