Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/3D71A6821C9111F18CCD2AD1DAE4EC9C.roa
File: 3D71A6821C9111F18CCD2AD1DAE4EC9C.roa (raw, json)
Hash identifier: UVwSMaGbMl/DAfWetirdJftqh3TSiqq+bvhtljLq+s8=
Subject key identifier: BE:81:B8:B4:26:14:7A:58:7C:DA:6F:C0:71:D4:68:12:C1:DA:31:44
Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial: 0903
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/3D71A6821C9111F18CCD2AD1DAE4EC9C.roa
Signing time: Tue 10 Mar 2026 14:55:56 +0000
ROA not before: Tue 10 Mar 2026 14:55:50 +0000
ROA not after: Mon 13 Apr 2026 14:55:50 +0000
asID: 209242
IP address blocks: 102.177.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 15 Mar 2026 01:54:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2307 (0x903)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DFA4AF, serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Validity
Not Before: Mar 10 14:55:50 2026 GMT
Not After : Apr 13 14:55:50 2026 GMT
Subject: CN=69b030fc-3849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2a:a4:dd:f5:cb:60:0d:cd:fb:30:5f:f7:a2:
88:e4:b3:70:f0:d3:bb:c4:e4:89:4f:da:56:53:91:
cf:87:1f:83:0e:34:2c:30:9a:81:64:b3:0c:de:91:
fa:aa:b4:ef:6a:fd:e8:62:14:1d:ca:43:b5:be:c3:
c1:ef:59:ff:f1:fd:00:98:e8:ae:a9:2d:2e:77:39:
e4:63:8c:95:81:fa:73:50:0d:6e:2a:79:bf:f6:6a:
16:4b:e5:a8:a4:5f:e1:ae:ed:38:39:b0:45:88:31:
60:99:e9:94:21:25:ff:22:48:4a:ea:c2:af:b2:ae:
e4:07:c6:a8:bd:37:54:ec:d8:ef:4d:1e:e6:44:a8:
ed:8f:cd:78:87:34:a8:37:3c:ba:22:72:b4:00:9e:
bd:fe:bf:68:90:73:2d:db:be:2d:41:6b:5d:4d:96:
4e:c8:c4:a2:38:59:5c:cc:bd:35:dc:77:c1:ba:c7:
35:5d:c1:01:5e:f7:2c:a0:ac:af:a8:b1:f5:44:33:
b9:34:1b:a3:24:4e:cb:b0:8b:9c:6a:ea:c1:b6:2c:
1d:3e:aa:62:a8:a9:f2:ab:7a:7b:f5:29:f1:3e:56:
65:50:46:a6:56:ac:f4:9d:a7:23:9f:59:21:44:88:
d1:5a:cb:8d:ff:d7:f9:af:35:40:a5:e8:3d:d8:e6:
ce:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:81:B8:B4:26:14:7A:58:7C:DA:6F:C0:71:D4:68:12:C1:DA:31:44
X509v3 Authority Key Identifier:
keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/3D71A6821C9111F18CCD2AD1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.176.0/24
Signature Algorithm: sha256WithRSAEncryption
02:db:19:a3:20:e1:0c:e3:32:ea:24:3b:d2:7e:67:fb:43:da:
8a:c7:b9:8c:b5:25:79:ea:73:fe:b0:dd:95:ef:c7:35:77:fc:
14:bc:d3:69:9c:be:20:2c:b2:cc:c8:79:f0:52:67:f9:b7:6c:
cf:0c:0e:42:12:6f:2f:11:d0:23:64:b3:cf:57:f4:7f:11:b6:
5b:4f:a1:20:18:9e:af:22:d7:76:73:5f:e6:a4:9a:c1:b0:0b:
e2:7a:5f:81:4d:25:06:db:85:37:0d:64:3a:b7:c9:ba:63:db:
9a:19:1b:72:1a:b2:b9:ad:24:a9:89:d9:04:69:e1:f2:ee:ad:
1a:bf:2a:8c:4d:27:2b:a6:4d:c7:de:a1:91:fc:d8:14:e3:93:
93:8a:fe:85:d7:15:69:a9:b9:da:ca:00:cb:76:14:21:25:27:
01:e6:d9:fc:eb:8c:b5:9b:5d:40:27:fb:94:be:52:e5:84:7a:
2e:da:1e:b7:0f:23:57:64:a6:56:a4:c1:16:57:66:37:af:36:
6b:9d:2b:c6:50:0f:d9:fc:e8:9a:62:ce:3b:45:15:be:5d:9c:
96:cc:a3:af:8d:27:d2:9f:dc:ab:bf:10:59:3e:2d:3e:4c:cc:
1f:02:aa:36:d3:09:63:12:43:86:27:78:04:6a:a4:e0:7e:c6:
ac:16:3f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 03:22:40 2026 by rpki-client