Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/13851D08964011F19286D1E2CE1D38B0.roa
File: 13851D08964011F19286D1E2CE1D38B0.roa (raw, json)
Hash identifier: OAQC7xpRQYx0IbIo3seS6KJ0pklEah2fld/1eai3dLI=
Subject key identifier: 87:0C:CC:40:04:19:5D:70:28:23:CA:7D:DE:83:39:A4:B9:53:2E:3C
Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial: 09FF
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/13851D08964011F19286D1E2CE1D38B0.roa
Signing time: Wed 12 Aug 2026 11:22:18 +0000
ROA not before: Wed 12 Aug 2026 11:22:14 +0000
ROA not after: Sat 21 Oct 2028 11:22:14 +0000
asID: 140867
IP address blocks: 102.177.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 21 Aug 2026 02:04:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2559 (0x9ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DFA4AF, serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Validity
Not Before: Aug 12 11:22:14 2026 GMT
Not After : Oct 21 11:22:14 2028 GMT
Subject: CN=6a7c576a-1940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b9:f2:d6:c6:3c:6a:1b:c8:3f:96:e3:a0:c6:
f2:b8:a7:cb:61:31:be:57:ac:cd:1a:b6:a0:17:62:
88:4e:ba:60:03:bc:88:25:1e:b9:6b:46:81:64:72:
68:bf:d5:d7:6b:e1:6c:05:e2:79:51:74:93:ed:e2:
48:9e:a3:9f:cd:7a:a4:4a:13:40:46:70:e9:c8:7f:
e7:bc:d7:f4:ac:e2:cb:49:3b:6a:65:a4:71:02:10:
b0:de:6f:54:96:d1:d3:94:41:36:d5:fd:75:75:e9:
38:b5:9c:b1:c3:56:41:5f:33:a6:ef:2a:f4:0e:a8:
66:ec:f0:5d:99:89:85:ca:b7:05:0a:e3:71:35:41:
03:a3:fd:d0:ae:d8:b4:34:32:9c:0a:41:71:60:26:
8f:4f:e5:68:45:52:fa:a6:dd:ef:ba:0f:30:c2:c9:
df:83:16:2e:b1:22:6b:5c:ef:92:24:20:4c:cb:fa:
b3:ed:14:f9:58:d1:13:cb:49:62:1d:47:19:83:9f:
49:5a:35:70:db:5c:d0:83:d1:ea:52:fb:9e:f8:4b:
4c:7a:73:13:a2:ae:6b:9a:ae:08:31:4e:4e:77:55:
b4:59:5c:15:c8:80:34:2c:d0:c9:39:27:87:83:01:
6d:9c:53:5f:53:45:78:ff:d3:fc:d7:72:63:05:6f:
9f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:0C:CC:40:04:19:5D:70:28:23:CA:7D:DE:83:39:A4:B9:53:2E:3C
X509v3 Authority Key Identifier:
keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/13851D08964011F19286D1E2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.178.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:72:3d:1c:06:fe:b9:7c:ab:45:f5:4f:f2:7d:7d:14:09:79:
a5:ae:6d:59:7b:54:73:de:79:c6:49:f0:70:c8:85:62:4d:d1:
31:54:95:18:77:8c:a9:50:40:79:13:6c:a1:6a:30:ea:49:05:
0c:76:25:fa:7e:a8:40:41:71:f3:81:f4:e3:3f:9e:35:2c:f3:
42:12:ad:d0:e1:74:95:05:2b:cc:d8:fa:29:1b:72:b2:ad:7b:
82:be:f7:da:a3:9b:9f:f9:5f:43:7d:5c:52:ad:40:66:d8:91:
1e:7b:11:a6:f5:45:1f:f3:5e:00:3b:05:96:7c:0a:ac:19:a4:
42:39:42:13:ac:8c:1c:2f:3c:d3:ed:8e:4a:16:a5:b2:43:77:
47:fc:42:58:4e:6d:e7:f7:c4:07:19:d4:bf:fb:3d:6d:47:29:
9f:9f:f5:db:d3:c9:4f:c6:f4:d3:55:50:29:46:5b:3a:b5:30:
33:2f:67:57:d8:52:66:7f:e9:fc:31:73:1f:70:1e:d8:8a:dd:
b0:25:a6:f4:17:3c:a1:b3:7f:df:0f:45:88:d2:0a:e1:3c:71:
36:69:84:92:50:7a:2a:e3:05:f3:e7:63:90:c6:16:7e:c7:e9:
b0:1f:d3:41:fc:55:c4:98:e7:03:49:5b:f1:f6:d2:38:90:c7:
45:b4:f3:34
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCf8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
N0RGQTRBRjExMC8GA1UEBRMoOTdDOTBFMjUyMTJEODg3Q0Y5RTFERTZGRERGNTUx
QkE4MTJGQTEzOTAeFw0yNjA4MTIxMTIyMTRaFw0yODEwMjExMTIyMTRaMBgxFjAU
BgNVBAMTDTZhN2M1NzZhLTE5NDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCsufLWxjxqG8g/luOgxvK4p8thMb5XrM0atqAXYohOumADvIglHrlrRoFk
cmi/1ddr4WwF4nlRdJPt4kieo5/NeqRKE0BGcOnIf+e81/Ss4stJO2plpHECELDe
b1SW0dOUQTbV/XV16Ti1nLHDVkFfM6bvKvQOqGbs8F2ZiYXKtwUK43E1QQOj/dCu
2LQ0MpwKQXFgJo9P5WhFUvqm3e+6DzDCyd+DFi6xImtc75IkIEzL+rPtFPlY0RPL
SWIdRxmDn0laNXDbXNCD0epS+574S0x6cxOirmuarggxTk53VbRZXBXIgDQs0Mk5
J4eDAW2cU19TRXj/0/zXcmMFb59hAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUhwzM
QAQZXXAoI8p93oM5pLlTLjwwHwYDVR0jBBgwFoAUl8kOJSEtiHz54d5v3fVRuoEv
oTkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdERkE0LzA4QjhEODIwOTNBQzExRUJCMUQyQTgzMkY4QUVBMjI4L2w4a09K
U0V0aUh6NTRkNXYzZlZSdW9Fdm9Uay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2w4a09KU0V0aUh6NTRkNXYzZlZSdW9Fdm9Uay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjdERkE0LzA4QjhEODIwOTNBQzExRUJCMUQyQTgzMkY4
QUVBMjI4LzEzODUxRDA4OTY0MDExRjE5Mjg2RDFFMkNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmsbIwDQYJKoZIhvcNAQEL
BQADggEBAIpyPRwG/rl8q0X1T/J9fRQJeaWubVl7VHPeecZJ8HDIhWJN0TFUlRh3
jKlQQHkTbKFqMOpJBQx2Jfp+qEBBcfOB9OM/njUs80ISrdDhdJUFK8zY+ikbcrKt
e4K+99qjm5/5X0N9XFKtQGbYkR57Eab1RR/zXgA7BZZ8CqwZpEI5QhOsjBwvPNPt
jkoWpbJDd0f8QlhObef3xAcZ1L/7PW1HKZ+f9dvTyU/G9NNVUClGWzq1MDMvZ1fY
UmZ/6fwxcx9wHtiK3bAlpvQXPKGzf98PRYjSCuE8cTZphJJQeirjBfPnY5DGFn7H
6bAf00H8VcSY5wNJW/H20jiQx0W08zQ=
-----END CERTIFICATE-----
Generated at Wed Aug 19 17:51:08 2026 by rpki-client