Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/2136776C877C11F1A490AB14CF1D38B0.roa
File: 2136776C877C11F1A490AB14CF1D38B0.roa (raw, json)
Hash identifier: pubON2oZ76H5okZr/8fRUpGwb41qtEWSfqIrEZ/TV0A=
Subject key identifier: 6B:2A:52:10:5C:C7:92:5E:D8:D7:8F:18:F0:BE:27:DA:DF:3B:58:1C
Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial: 09E8
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/2136776C877C11F1A490AB14CF1D38B0.roa
Signing time: Fri 24 Jul 2026 16:24:23 +0000
ROA not before: Fri 24 Jul 2026 16:24:19 +0000
ROA not after: Fri 28 Aug 2026 16:24:19 +0000
asID: 211826
IP address blocks: 102.177.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2536 (0x9e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DFA4AF, serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Validity
Not Before: Jul 24 16:24:19 2026 GMT
Not After : Aug 28 16:24:19 2026 GMT
Subject: CN=6a6391b7-5780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1c:78:fe:f1:44:5b:49:33:46:1d:37:c8:a1:
2e:e3:12:16:b2:1d:92:4d:d3:fd:28:15:14:1f:30:
ed:31:87:16:34:ca:5b:e7:2d:dc:e2:02:f5:63:91:
13:4d:be:98:55:a0:c5:36:dd:ea:76:d8:e4:23:31:
4b:69:a0:d1:99:96:14:30:fb:87:8e:6a:68:f1:6c:
57:da:6d:b0:6b:7e:ef:bf:0d:33:af:4d:4f:5b:28:
e3:86:55:e8:67:de:bf:38:9e:e8:57:f4:ce:a3:bc:
ac:24:b1:d9:9a:65:5d:5e:f3:93:25:d5:d1:4f:93:
1f:2a:94:30:bf:cd:78:65:00:53:55:a7:67:eb:c2:
36:d6:a7:9f:1c:59:20:84:46:8a:62:2e:f9:7b:4d:
46:2c:8e:2e:ee:18:64:56:99:e3:4f:0b:39:16:43:
01:3b:7c:c8:52:02:2c:e9:d6:48:68:5a:08:28:38:
ba:fa:0d:76:74:4a:1b:b8:73:15:ca:43:30:55:52:
23:f8:de:55:b9:98:66:17:60:ed:b1:ec:2a:90:0c:
cb:97:91:f3:b4:2b:75:fa:6a:d4:24:c4:93:af:00:
86:0a:4d:4c:db:2d:34:56:43:72:bb:3b:73:e0:74:
eb:61:e5:be:4d:64:e0:1d:06:d7:f5:e2:9d:9c:5b:
27:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:2A:52:10:5C:C7:92:5E:D8:D7:8F:18:F0:BE:27:DA:DF:3B:58:1C
X509v3 Authority Key Identifier:
keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/2136776C877C11F1A490AB14CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.184.0/24
Signature Algorithm: sha256WithRSAEncryption
82:95:45:51:bf:e2:02:56:d8:43:d1:e1:d5:d3:7c:b8:57:84:
f3:4c:07:3b:e4:12:61:2b:c1:12:e2:ed:03:ae:61:b1:b6:03:
2f:3c:a9:01:79:23:ec:69:6d:77:07:f9:bd:e8:02:5f:e6:54:
01:0b:3a:1a:7c:92:b5:52:dd:6e:dc:d1:0c:67:26:80:87:5d:
f3:d1:cc:27:df:e7:e6:80:b3:2b:da:87:71:89:3e:79:d7:26:
0f:67:fa:7e:ac:b8:03:d0:93:88:a3:ba:e4:08:4e:59:af:0f:
db:dc:f2:07:f9:af:01:5b:3e:a2:a3:7c:f6:1b:36:96:72:a8:
9a:8b:2a:93:fb:f3:bd:da:e5:f7:43:27:81:bb:bd:3f:8e:b1:
84:88:2d:45:9c:5d:d4:c0:78:73:20:bd:30:2b:35:65:0a:ee:
2e:a8:4d:ff:73:69:5b:37:94:3c:8c:08:9d:b0:e9:c6:60:23:
02:8a:94:ff:e1:af:a4:ab:0a:0f:2a:41:9e:d6:87:a4:90:ab:
7c:a2:e3:35:b4:e6:de:37:b0:52:f1:b2:9e:9f:00:d4:27:f9:
83:82:fb:bf:17:cd:4a:1d:cd:32:b0:6d:74:c2:75:64:00:c7:
40:9a:e5:a3:53:82:85:fb:27:57:45:95:6f:51:fc:7f:88:c8:
47:2c:18:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 04:17:30 2026 by rpki-client