Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/49D0C4FE52FF11F188DF33FECE1D38B0.roa
File: 49D0C4FE52FF11F188DF33FECE1D38B0.roa (raw, json)
Hash identifier: etlMy3gyL+AmZWbdRY8bNgGyEu248ZL3K/4Cn6DWTMI=
Subject key identifier: 61:C5:ED:9A:11:E9:87:DA:65:1B:E4:32:14:E7:55:67:3D:14:42:99
Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial: 097D
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/49D0C4FE52FF11F188DF33FECE1D38B0.roa
Signing time: Mon 18 May 2026 21:19:44 +0000
ROA not before: Mon 18 May 2026 21:19:39 +0000
ROA not after: Sun 28 Jun 2026 21:19:39 +0000
asID: 211826
IP address blocks: 102.177.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 May 2026 00:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2429 (0x97d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DFA4AF, serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Validity
Not Before: May 18 21:19:39 2026 GMT
Not After : Jun 28 21:19:39 2026 GMT
Subject: CN=6a0b8270-da61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e2:b4:e7:b0:8e:2c:c7:33:39:a0:2d:bf:59:
45:78:8a:f9:dd:41:1b:34:bf:a2:e4:8e:41:a4:fb:
30:4e:22:6b:b3:8f:94:62:e4:2e:9c:6f:70:fb:10:
f1:08:41:37:14:c5:b0:2b:c1:0f:ee:d1:64:b7:eb:
60:89:88:f5:94:fa:e5:bb:14:4d:2f:31:95:ca:78:
54:31:7f:6d:21:9e:1f:ae:8b:ed:cd:01:29:77:f6:
de:b2:8b:39:9d:30:d9:3f:67:99:77:74:62:6a:0d:
c6:af:8d:eb:cc:f7:76:87:3e:5f:c2:eb:78:05:b9:
bb:a8:6f:df:a8:5d:b1:71:e7:36:ab:3e:dd:9a:06:
72:9f:27:fa:b2:08:77:c9:a5:95:b1:67:ba:1f:55:
d1:8b:48:4d:5e:db:ad:43:32:a0:2e:6f:8f:79:2c:
36:4b:a5:af:e7:bb:93:cf:24:e6:c8:37:16:4d:43:
14:b4:1c:3a:25:ad:15:35:dd:9e:6f:3f:bb:74:64:
6b:fb:a1:a9:d7:bd:d6:f5:c9:4a:13:f9:94:78:50:
bd:a4:8b:b1:61:fc:80:20:83:e6:62:c7:19:c9:fe:
b7:ed:14:62:bf:29:26:4f:1c:dd:af:11:fb:0b:21:
00:24:bc:4e:3f:90:b3:80:0c:2f:82:9e:09:a7:d0:
26:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:C5:ED:9A:11:E9:87:DA:65:1B:E4:32:14:E7:55:67:3D:14:42:99
X509v3 Authority Key Identifier:
keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/49D0C4FE52FF11F188DF33FECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.177.0/24
Signature Algorithm: sha256WithRSAEncryption
22:67:6b:45:18:91:af:98:e5:7b:5e:f2:c1:ec:fe:96:b5:6e:
ac:f9:95:6d:d0:8f:fb:86:d4:b1:7f:21:85:2d:df:8f:79:c3:
83:08:1c:1b:56:8f:77:4d:a6:85:cb:7f:ad:b1:48:e3:a5:76:
be:df:33:8a:95:35:26:38:9c:5e:2c:f8:c8:8f:cf:f8:6d:c4:
41:e4:59:83:5a:db:c1:7a:8d:a2:22:07:03:81:46:10:81:1e:
f4:72:38:e5:02:3d:00:bd:59:ff:58:81:87:83:23:c9:9e:ae:
b5:47:0b:3a:17:0b:a4:1b:76:fe:43:f6:be:4b:62:17:68:b1:
ed:c5:3d:d6:61:cb:95:20:73:90:53:b1:ce:54:5e:fd:ec:2b:
22:33:35:3b:f1:94:00:0a:f8:72:b9:3a:8a:ae:28:f2:18:ed:
aa:46:06:d7:03:01:e6:98:9f:a3:b3:d4:f8:17:0e:7f:2f:02:
95:2b:0a:30:17:bd:df:8a:cd:fe:46:6a:10:8a:8f:12:2e:57:
a2:8f:1c:6f:31:2b:8f:4b:e6:e7:fb:f7:ab:c5:cf:e5:7f:61:
da:87:a2:10:63:56:40:68:94:4e:c9:08:c4:d8:c6:9f:bd:d2:
92:50:55:f4:23:1e:49:e8:3f:b8:a5:23:7b:4a:dc:1e:2f:3c:
ec:8e:61:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 13:09:14 2026 by rpki-client