Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/883A6EA01D3711F1979BA3A1DAE4EC9C.roa
File: 883A6EA01D3711F1979BA3A1DAE4EC9C.roa (raw, json)
Hash identifier: UA9UI4d18rq6rBPVQ1y6Q/PX1lx2KaDCc9BKpN3d+HQ=
Subject key identifier: AA:BE:50:F6:79:83:CE:E6:AC:5C:CD:96:F1:5E:C2:A3:9B:B8:F1:DB
Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial: 0906
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/883A6EA01D3711F1979BA3A1DAE4EC9C.roa
Signing time: Wed 11 Mar 2026 10:46:18 +0000
ROA not before: Wed 11 Mar 2026 10:46:12 +0000
ROA not after: Mon 30 Mar 2026 10:46:12 +0000
asID: 22724
IP address blocks: 102.177.160.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 15 Mar 2026 01:54:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2310 (0x906)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DFA4AF, serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Validity
Not Before: Mar 11 10:46:12 2026 GMT
Not After : Mar 30 10:46:12 2026 GMT
Subject: CN=69b147f9-5c56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4d:ba:5b:43:fb:67:2c:4f:1a:fd:c2:b0:2d:
53:49:63:77:34:bd:bf:14:2e:27:f3:bf:b4:b2:ef:
0c:49:08:41:f2:34:ff:6b:1d:be:3f:56:e4:bf:45:
b0:1f:15:70:39:f4:72:1f:67:87:50:ab:ff:6c:c6:
f1:8c:21:cc:ee:42:91:07:c4:f2:b0:15:cf:29:fe:
fb:dd:ff:24:6f:9b:fd:e7:9b:2e:16:bf:2a:8f:eb:
c2:77:89:52:3f:1d:53:6c:25:bb:18:df:b1:7f:d3:
ae:fb:6a:9a:3c:08:22:29:c9:58:84:e6:f5:86:05:
fe:d1:ca:fc:c1:5c:4a:69:23:5c:32:71:c9:c8:8e:
ae:38:06:9f:0d:42:80:4c:b1:7a:1e:53:0e:92:23:
60:db:9b:86:0a:be:e5:fc:af:eb:90:f9:2d:20:15:
c7:5c:81:38:82:72:cf:a2:5d:21:3a:68:b5:ec:54:
73:6d:7d:b2:70:fc:01:55:d0:3b:f3:a5:9f:f0:39:
c1:cd:93:14:cc:d2:d2:e0:49:9a:16:d0:31:6c:f0:
5c:23:56:36:6f:98:0d:35:78:46:b5:9e:f5:40:46:
cf:ee:59:5b:f1:aa:7b:6d:1e:7b:fc:7f:91:3c:41:
34:ba:b2:68:55:f3:4d:f4:3b:c7:50:40:82:e7:58:
3b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:BE:50:F6:79:83:CE:E6:AC:5C:CD:96:F1:5E:C2:A3:9B:B8:F1:DB
X509v3 Authority Key Identifier:
keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/883A6EA01D3711F1979BA3A1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.160.0/20
Signature Algorithm: sha256WithRSAEncryption
2b:52:7c:c6:3c:16:05:06:f0:49:a8:8c:ce:13:13:b3:13:7a:
49:4a:88:8e:e3:13:1f:88:67:12:d7:7f:af:26:e1:d5:b6:70:
9d:cc:90:b3:26:a1:1f:60:11:8c:2b:06:b6:f5:e8:1e:6d:d4:
23:6c:7b:c1:65:65:59:5a:ab:70:88:37:4b:ee:ad:d4:be:3d:
5b:71:29:bf:a4:c7:70:d2:3a:6c:24:47:01:af:fb:32:8d:aa:
ed:38:5d:2c:55:f0:6b:54:ae:8b:4f:77:2f:08:10:44:6b:b8:
fe:c9:41:19:70:c3:10:a3:11:0e:f2:79:86:8f:b5:f2:06:2b:
94:12:33:4e:37:b0:d9:fe:2f:bc:31:65:27:e3:66:12:e5:ae:
dc:ee:63:e4:66:46:9c:25:27:1d:3a:b4:eb:36:5e:84:a3:7a:
5e:8d:5f:e5:55:eb:58:aa:d0:b6:5c:c5:7b:ec:bb:ac:30:94:
db:dc:bd:0d:bd:7a:01:e9:f9:cf:f5:63:51:fd:db:db:1a:da:
82:e2:25:ac:fa:ef:3d:c6:35:7c:7c:26:19:f1:3a:d7:15:86:
06:39:7f:6d:8a:43:c8:54:5f:ea:e9:d4:06:06:33:35:ba:1e:
cd:49:ad:e8:d5:a5:aa:96:59:8b:89:f8:60:6d:4f:62:58:77:
ad:81:9b:b8
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCQYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
N0RGQTRBRjExMC8GA1UEBRMoOTdDOTBFMjUyMTJEODg3Q0Y5RTFERTZGRERGNTUx
QkE4MTJGQTEzOTAeFw0yNjAzMTExMDQ2MTJaFw0yNjAzMzAxMDQ2MTJaMBgxFjAU
BgNVBAMTDTY5YjE0N2Y5LTVjNTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC0TbpbQ/tnLE8a/cKwLVNJY3c0vb8ULifzv7Sy7wxJCEHyNP9rHb4/VuS/
RbAfFXA59HIfZ4dQq/9sxvGMIczuQpEHxPKwFc8p/vvd/yRvm/3nmy4WvyqP68J3
iVI/HVNsJbsY37F/0677apo8CCIpyViE5vWGBf7RyvzBXEppI1wyccnIjq44Bp8N
QoBMsXoeUw6SI2Dbm4YKvuX8r+uQ+S0gFcdcgTiCcs+iXSE6aLXsVHNtfbJw/AFV
0DvzpZ/wOcHNkxTM0tLgSZoW0DFs8FwjVjZvmA01eEa1nvVARs/uWVvxqnttHnv8
f5E8QTS6smhV8030O8dQQILnWDttAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUqr5Q
9nmDzuasXM2W8V7Co5u48dswHwYDVR0jBBgwFoAUl8kOJSEtiHz54d5v3fVRuoEv
oTkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdERkE0LzA4QjhEODIwOTNBQzExRUJCMUQyQTgzMkY4QUVBMjI4L2w4a09K
U0V0aUh6NTRkNXYzZlZSdW9Fdm9Uay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2w4a09KU0V0aUh6NTRkNXYzZlZSdW9Fdm9Uay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjdERkE0LzA4QjhEODIwOTNBQzExRUJCMUQyQTgzMkY4
QUVBMjI4Lzg4M0E2RUEwMUQzNzExRjE5NzlCQTNBMURBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBARmsaAwDQYJKoZIhvcNAQEL
BQADggEBACtSfMY8FgUG8EmojM4TE7MTeklKiI7jEx+IZxLXf68m4dW2cJ3MkLMm
oR9gEYwrBrb16B5t1CNse8FlZVlaq3CIN0vurdS+PVtxKb+kx3DSOmwkRwGv+zKN
qu04XSxV8GtUrotPdy8IEERruP7JQRlwwxCjEQ7yeYaPtfIGK5QSM043sNn+L7wx
ZSfjZhLlrtzuY+RmRpwlJx06tOs2XoSjel6NX+VV61iq0LZcxXvsu6wwlNvcvQ29
egHp+c/1Y1H929sa2oLiJaz67z3GNXx8JhnxOtcVhgY5f22KQ8hUX+rp1AYGMzW6
Hs1JrejVpaqWWYuJ+GBtT2JYd62Bm7g=
-----END CERTIFICATE-----
Generated at Sat Mar 14 03:22:08 2026 by rpki-client