Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/B02C377E6B5511F19A208202CF1D38B0.roa
File: B02C377E6B5511F19A208202CF1D38B0.roa (raw, json)
Hash identifier: F2uhB6NmUItfbApVcL3nMXYX+kYCGBRMdAMG9hk05zs=
Subject key identifier: 60:3F:22:71:4D:5D:22:D4:D3:E8:59:93:7C:F0:CF:AF:74:51:BC:CD
Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial: 09AE
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/B02C377E6B5511F19A208202CF1D38B0.roa
Signing time: Thu 18 Jun 2026 20:38:40 +0000
ROA not before: Thu 18 Jun 2026 20:38:20 +0000
ROA not after: Tue 28 Jul 2026 20:38:20 +0000
asID: 211826
IP address blocks: 102.177.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 11 Jul 2026 02:03:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2478 (0x9ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DFA4AF, serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Validity
Not Before: Jun 18 20:38:20 2026 GMT
Not After : Jul 28 20:38:20 2026 GMT
Subject: CN=6a345750-a372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:72:09:32:02:24:f2:c3:89:ce:0c:94:35:dc:
ad:07:c9:bb:78:8b:a1:3f:5f:3d:22:44:00:8c:49:
a6:6b:a0:e8:1f:f9:b5:66:88:e1:2a:cc:24:8b:06:
08:9e:2d:56:c0:c0:61:3c:7c:a4:56:4e:9d:58:25:
1e:bd:8a:6f:5e:3f:98:48:8c:42:4a:cd:15:f1:a1:
40:ca:bc:01:24:55:b2:d3:dd:48:12:8e:c7:61:8a:
81:e3:46:32:f2:38:5e:23:2a:ef:42:7d:48:28:f6:
31:f7:d8:91:9f:78:6f:1e:78:e8:53:11:1b:3d:58:
36:37:79:e9:19:99:a3:e0:23:52:7e:9f:4d:87:d9:
de:b2:3b:f9:9d:2f:68:88:82:04:1a:b5:bd:10:da:
7c:ee:7f:9a:40:82:76:50:b6:34:f2:c7:4e:a9:ae:
24:eb:08:d2:6d:98:27:a2:82:83:b3:4d:74:9d:63:
a8:e9:29:4a:06:8e:62:ae:fb:61:d4:09:f2:b6:7b:
87:c9:3d:27:0b:39:1d:2d:5a:1f:d4:0d:33:46:58:
03:b3:90:3c:c5:b3:fb:42:f2:6d:f6:c2:ae:e9:5f:
2e:49:c6:15:66:3e:d0:54:27:64:66:b0:7b:30:44:
ee:1a:14:86:69:1e:24:e1:1c:64:16:17:0f:44:56:
09:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:3F:22:71:4D:5D:22:D4:D3:E8:59:93:7C:F0:CF:AF:74:51:BC:CD
X509v3 Authority Key Identifier:
keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/B02C377E6B5511F19A208202CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.177.0/24
Signature Algorithm: sha256WithRSAEncryption
20:41:e9:10:bf:f1:d8:a6:1a:3f:db:68:45:c1:a0:b2:f0:99:
95:a1:5d:7a:93:3d:0e:cd:c7:74:26:ae:28:c2:eb:46:a5:bf:
11:8a:75:d2:f8:27:e6:04:d8:9a:68:f0:d8:53:fa:33:ae:16:
6c:2e:d3:1e:91:d5:a7:8e:79:66:52:97:ca:60:eb:8b:b3:ff:
50:bd:f6:48:ad:4b:7d:e7:98:09:b5:73:2b:b9:ee:06:12:80:
09:ef:7b:fd:33:3d:75:38:32:43:65:5e:1b:ef:13:03:ac:c2:
d5:06:ae:db:d7:d0:33:a5:a2:56:fd:5d:63:fd:29:15:40:e1:
fd:70:b2:6d:f5:7b:ff:3d:bf:8c:05:c9:9c:6e:8d:ec:01:59:
77:34:d1:ad:73:26:c9:d1:c8:e2:f1:49:40:b7:53:32:3a:53:
94:a8:19:27:6c:05:0c:58:3a:34:21:d6:5c:dd:1c:7a:b1:c1:
8d:11:fa:8d:87:69:97:67:e5:90:22:46:4d:38:cd:77:8d:e8:
36:5e:57:97:b5:f7:f5:59:d2:49:d8:8e:d2:99:61:c6:2a:e8:
d9:2f:90:1e:c4:39:9d:2b:cd:0a:79:61:78:e2:b5:2e:3b:4c:
b0:99:8e:e3:33:58:83:95:dc:ed:aa:67:a9:db:ee:bf:a4:16:
1a:cd:6b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 16:52:38 2026 by rpki-client