Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/DAE024FE4ADE11F1A7CCCDA4CE1D38B0.roa
File: DAE024FE4ADE11F1A7CCCDA4CE1D38B0.roa (raw, json)
Hash identifier: Oq3VyMtqmpxIhCk/XX1vFFBw4LY5gcTLar/qE51zHiE=
Subject key identifier: C8:9C:A7:34:A5:AE:E8:9C:D9:73:EE:30:94:39:F1:9C:8F:36:D5:04
Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial: 096D
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/DAE024FE4ADE11F1A7CCCDA4CE1D38B0.roa
Signing time: Fri 08 May 2026 13:07:24 +0000
ROA not before: Fri 08 May 2026 13:07:20 +0000
ROA not after: Sat 13 Jun 2026 13:07:20 +0000
asID: 209242
IP address blocks: 102.177.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2413 (0x96d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DFA4AF, serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Validity
Not Before: May 8 13:07:20 2026 GMT
Not After : Jun 13 13:07:20 2026 GMT
Subject: CN=69fde00c-4c07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bb:da:6c:ea:b2:a5:00:fc:5f:5d:6e:d3:e9:
b1:fe:4c:24:77:34:83:5c:c4:a6:a5:ab:52:7a:a0:
5c:9e:5b:d9:97:08:4d:4b:5d:b2:13:f3:20:d3:e8:
be:48:c7:be:5b:60:11:3f:9f:51:93:78:3c:5e:ee:
89:04:a0:18:5f:a2:4d:e3:79:57:b0:09:4c:d0:02:
d2:04:71:6f:23:21:e2:a1:22:38:3d:c7:54:69:f3:
92:5a:42:62:f9:97:c9:03:e4:d1:2a:36:09:38:ec:
77:43:5b:29:b4:5f:fd:19:ac:78:c3:fc:2f:09:28:
54:53:6d:cc:c8:62:1b:3b:23:a8:3a:50:fd:f5:3b:
18:73:0f:6e:88:30:a0:46:ad:ab:0b:4f:56:8a:bd:
36:5e:51:00:e5:33:f5:d6:5f:5a:b2:32:e4:51:3e:
dd:1b:7f:8e:6a:10:fa:51:93:d9:3c:dd:92:74:7f:
b7:8b:6d:0f:9c:b5:29:f8:ba:9d:0f:44:24:50:8a:
01:63:11:d0:b5:87:20:2f:e3:61:84:80:dd:9e:89:
9b:42:65:e1:a3:f8:57:04:77:72:c6:d0:a9:76:e9:
e9:ca:b8:a9:31:47:d1:05:c9:94:c0:61:eb:de:7f:
49:60:a3:65:d8:8b:89:17:fe:40:ed:00:ef:f0:18:
b0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:9C:A7:34:A5:AE:E8:9C:D9:73:EE:30:94:39:F1:9C:8F:36:D5:04
X509v3 Authority Key Identifier:
keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/DAE024FE4ADE11F1A7CCCDA4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.176.0/24
Signature Algorithm: sha256WithRSAEncryption
14:41:58:37:ac:52:49:da:d6:e8:57:aa:7e:e4:7c:da:bc:c8:
87:1d:98:de:f8:ce:47:98:c0:cc:26:67:4b:2f:09:68:7e:d4:
9a:9a:09:e8:25:0d:58:b7:6f:e7:f0:7c:a9:d1:71:c9:1e:1d:
93:c5:57:53:99:77:48:9d:ca:75:dc:84:c7:9c:cf:15:3f:04:
e5:b2:4b:57:ce:f5:d3:85:60:9a:7d:22:5d:5e:fe:7a:c9:a6:
3b:41:67:0e:c1:bb:d4:cc:ef:ee:d5:eb:a9:81:1f:77:ce:36:
3c:2b:da:9b:7a:e2:ea:a2:6c:35:c4:3c:a5:52:98:f0:8b:ae:
f0:97:e4:60:a8:dc:e2:5d:79:99:30:60:61:a6:b4:d0:1d:45:
4b:bc:79:f5:16:ad:fa:31:25:71:18:7a:8d:5f:47:9b:56:f2:
4b:f5:e9:98:f7:c5:92:15:25:6c:12:71:82:b7:49:dd:0d:a3:
26:5c:7c:38:1d:f5:87:39:38:aa:e0:42:85:cc:ef:f7:8e:15:
c7:30:08:15:9c:56:80:59:62:ce:51:3a:36:cd:50:3b:87:20:
5d:a0:20:0f:9a:fe:54:41:81:1b:bc:dd:10:9c:33:67:a6:e0:
95:6a:77:06:93:f6:3e:c2:7d:c0:7a:ca:9e:40:4c:94:29:08:
76:bf:ea:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 12:31:36 2026 by rpki-client