Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/049635B208CD11F1A003B2A6DAE4EC9C.roa
File: 049635B208CD11F1A003B2A6DAE4EC9C.roa (raw, json)
Hash identifier: wIy2E4LC4a8eSQsJWQ83311/eMeoR6FDO5g7elbb2jU=
Subject key identifier: 82:F4:59:D1:D7:D0:A3:5C:9A:9C:C8:47:CA:4A:E1:A7:27:CB:BE:81
Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial: 08CA
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/049635B208CD11F1A003B2A6DAE4EC9C.roa
Signing time: Fri 13 Feb 2026 11:13:27 +0000
ROA not before: Fri 13 Feb 2026 11:13:22 +0000
ROA not after: Mon 16 Mar 2026 11:13:22 +0000
asID: 209242
IP address blocks: 102.177.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2250 (0x8ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DFA4AF, serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Validity
Not Before: Feb 13 11:13:22 2026 GMT
Not After : Mar 16 11:13:22 2026 GMT
Subject: CN=698f0757-be65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9d:98:58:d7:3e:ab:16:eb:20:7a:5f:8c:16:
af:7d:82:c6:84:7b:75:31:ea:f5:a4:54:9d:c9:13:
eb:4d:7b:6b:54:2c:09:80:4d:cd:c8:2e:63:61:d2:
b5:f8:db:73:8c:0c:ec:2f:dd:64:4f:b7:e2:a7:67:
54:cb:63:70:eb:3b:25:04:99:3c:3d:e7:d1:2e:e7:
94:e8:21:70:e9:38:0b:2f:2e:2b:7a:9b:15:34:bc:
af:fb:92:a0:b5:92:ec:a1:d7:10:05:09:7f:bc:4c:
ff:9f:61:eb:e3:d5:62:62:80:da:4d:59:11:c4:05:
0c:2b:ae:7e:09:f5:8b:d6:fb:16:67:51:53:54:d5:
13:04:26:66:82:6b:6c:39:52:f1:38:b8:80:5d:ab:
05:78:76:80:25:f1:72:6d:48:6d:f0:9b:e1:c2:e7:
0f:66:23:98:69:da:c3:24:05:ee:ec:09:be:67:0b:
f2:47:e8:8d:9f:e2:f1:a9:e2:13:77:87:7c:a3:22:
ee:59:89:74:0e:e1:72:11:8d:91:43:d1:76:52:12:
f7:8d:72:73:a8:05:68:62:74:2f:66:14:6e:5d:63:
50:3c:1d:34:dd:ab:39:85:56:29:4b:0e:79:60:23:
8b:f6:ce:d5:0d:58:0b:09:3a:7b:fe:91:9e:41:c5:
4c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:F4:59:D1:D7:D0:A3:5C:9A:9C:C8:47:CA:4A:E1:A7:27:CB:BE:81
X509v3 Authority Key Identifier:
keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/049635B208CD11F1A003B2A6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.176.0/24
Signature Algorithm: sha256WithRSAEncryption
36:59:de:0c:35:3d:1d:85:78:a8:47:d5:ff:23:35:f1:11:72:
04:99:ac:27:67:7f:bf:53:31:a7:1a:fe:a1:f3:a8:99:ab:4a:
76:19:a5:54:ad:ba:77:b5:7a:9f:26:d4:38:5e:1f:30:2c:d0:
0a:1e:88:cb:85:45:81:ad:6c:ee:e5:7a:59:d2:8d:22:09:b0:
26:17:9f:a0:11:82:11:e7:5c:3b:49:47:03:a0:42:ab:56:24:
4a:81:3e:62:a2:44:23:9c:89:a6:b4:49:b4:f3:15:d3:ae:4c:
ff:f6:d9:78:8c:9b:c3:80:5f:6f:ae:de:6a:7d:ff:43:f9:c0:
00:02:a3:d1:62:28:48:5e:e1:3c:9e:1a:8e:9d:d6:1f:58:eb:
a8:a2:f6:f8:fa:c6:f5:27:14:5a:09:ef:78:d3:e4:75:a1:8c:
92:50:d8:ca:e1:57:e8:22:ea:3e:e1:e0:0c:94:71:50:dc:23:
aa:5a:d3:2b:15:ad:1f:ff:e6:2d:dc:0e:0a:26:e0:d8:e5:84:
03:59:d0:5a:a8:63:e7:f7:ad:7f:33:36:a4:7a:f4:46:d9:6e:
89:86:55:e8:12:fa:2e:be:ce:eb:71:21:4a:19:eb:63:33:b4:
91:57:9f:8c:e1:4d:b0:41:e0:cb:03:b6:ff:c5:21:03:8a:1b:
e6:b1:78:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:41:58 2026 by rpki-client