Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/087B5DDA187F11F1B908269BDAE4EC9C.roa
File: 087B5DDA187F11F1B908269BDAE4EC9C.roa (raw, json)
Hash identifier: +iSgYQye2OWt8JVvNd+soAvL1h8eN44KQQOxfGUmU6o=
Subject key identifier: 0E:B7:A9:04:37:2D:08:A4:60:3D:64:8B:59:03:D0:AA:8E:1E:07:54
Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial: 08EE
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/087B5DDA187F11F1B908269BDAE4EC9C.roa
Signing time: Thu 05 Mar 2026 10:35:31 +0000
ROA not before: Thu 05 Mar 2026 10:35:26 +0000
ROA not after: Fri 05 Mar 2027 10:35:26 +0000
asID: 60171
IP address blocks: 102.177.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 15 Mar 2026 01:54:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2286 (0x8ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DFA4AF, serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Validity
Not Before: Mar 5 10:35:26 2026 GMT
Not After : Mar 5 10:35:26 2027 GMT
Subject: CN=69a95c73-84b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:17:ae:21:36:d3:20:b0:10:9b:ad:bd:b3:5e:
7e:61:d8:e0:ed:be:a8:85:ec:90:7d:8c:27:fb:66:
59:34:d4:95:6a:9d:d8:9a:bb:b7:45:b7:b2:de:db:
27:01:cd:5c:c6:bb:b7:9f:c4:b5:89:89:d0:ec:67:
41:96:1c:02:4a:2a:38:c9:e6:d5:9b:f5:b2:f7:e7:
8f:7f:fd:7d:66:c9:68:b4:7e:d1:a4:cb:f4:97:77:
66:bf:75:fa:eb:3b:94:1f:3e:5a:50:02:24:cb:9b:
4c:72:ba:88:05:44:24:f8:66:4f:69:1f:49:04:d9:
c4:12:74:63:46:54:4f:59:6e:44:27:4d:03:03:8b:
e7:3f:b5:80:d2:f8:70:8a:73:c1:94:70:f7:49:4a:
27:9f:9b:91:80:cf:a4:01:fb:8f:d9:88:7c:11:81:
67:06:a4:ec:4e:96:45:d4:1c:e5:41:d0:a3:34:c6:
e3:76:c4:a2:e1:3e:a1:0c:19:3d:8b:23:e2:33:f0:
5e:ae:5c:09:18:b0:8a:a9:b5:96:40:30:ad:ee:03:
22:f7:7b:7c:c9:4f:55:ac:7f:b9:45:1b:1b:59:54:
d5:7b:8e:ea:3f:54:c0:23:42:7c:8f:c4:42:a2:29:
cf:ec:e0:9b:06:d8:3b:8f:50:2d:6a:82:45:7f:22:
b7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:B7:A9:04:37:2D:08:A4:60:3D:64:8B:59:03:D0:AA:8E:1E:07:54
X509v3 Authority Key Identifier:
keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/087B5DDA187F11F1B908269BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.136.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:b6:60:25:28:00:8b:14:e7:0f:bb:77:b0:24:14:59:49:2a:
96:a1:15:e8:4d:4e:a3:dd:78:03:53:41:6f:c9:e7:84:be:26:
30:05:e8:b0:97:29:d7:46:de:ba:94:a7:71:38:80:8e:cf:66:
67:f2:77:4c:f4:a9:fb:1b:8e:2f:a1:27:a5:27:83:dd:da:31:
ec:63:a9:bf:c1:8c:05:f0:1d:ab:de:41:9a:52:e6:7a:bf:cc:
71:c3:d0:68:b5:2b:77:da:97:2e:3e:9e:1f:49:da:bd:31:df:
b4:02:a7:38:d6:fb:65:4e:ac:a4:d6:41:0f:1c:49:ad:be:d3:
bd:47:16:e3:af:cb:d9:24:d9:5c:97:d7:c4:14:29:bf:2d:75:
1f:17:6a:09:21:ce:3c:74:19:51:8c:e9:b6:d7:ae:d4:7d:e2:
fc:57:da:06:ad:0a:26:24:fa:b1:b9:60:39:2e:07:a0:15:e2:
4c:cf:c5:85:22:8e:ab:e8:4a:37:95:59:21:e2:12:97:36:d2:
a0:44:f5:75:cc:5f:cc:a4:e2:ee:5a:49:bb:88:a0:0f:a4:5b:
43:06:b4:a8:d0:18:84:cc:23:72:45:41:19:a1:cd:be:94:38:
e5:af:43:2f:b7:56:36:cc:b5:15:b6:7b:49:1d:87:ce:e0:61:
67:64:7a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 03:22:38 2026 by rpki-client