Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/2C26647A3B1E11F1AA6B1905CF1D38B0.roa
File: 2C26647A3B1E11F1AA6B1905CF1D38B0.roa (raw, json)
Hash identifier: ycO5FfdJse1udo/+/wcj0J+HceiCojhi9x719nX45+c=
Subject key identifier: 4D:E3:75:C0:D4:B8:64:19:AB:78:47:24:C3:AD:2B:DA:A3:8E:21:A1
Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial: 094A
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/2C26647A3B1E11F1AA6B1905CF1D38B0.roa
Signing time: Sat 18 Apr 2026 12:00:21 +0000
ROA not before: Sat 18 Apr 2026 12:00:16 +0000
ROA not after: Thu 28 May 2026 12:00:16 +0000
asID: 211826
IP address blocks: 102.177.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Apr 2026 00:07:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2378 (0x94a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DFA4AF, serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Validity
Not Before: Apr 18 12:00:16 2026 GMT
Not After : May 28 12:00:16 2026 GMT
Subject: CN=69e37254-b748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:22:74:64:08:bf:27:94:e5:13:4b:6a:c1:94:
c9:30:0a:15:b9:59:25:e5:3b:0e:6f:37:4a:c8:1d:
2d:15:fe:f3:79:0b:89:86:cb:a7:48:9b:32:ad:34:
8d:57:62:21:77:a3:42:45:3a:ef:13:b4:22:5a:40:
26:3d:5a:2e:fc:f3:75:6e:f4:76:c9:c4:de:04:b4:
21:48:59:c5:88:84:5f:ed:3f:51:44:5d:a0:0e:65:
5b:05:11:6e:6a:4c:b7:c7:f1:a0:1f:27:de:0b:65:
68:29:94:fb:c8:e3:58:54:19:7a:fa:dd:ad:cf:fe:
90:d9:97:e8:ea:07:c9:45:d7:83:f8:6b:e2:05:70:
8c:6a:12:25:c7:93:b3:3b:ea:26:12:de:a8:40:ea:
3a:4d:e3:53:9e:6b:89:62:a9:50:43:c6:5b:cd:22:
69:30:c4:cc:aa:e7:1d:49:68:67:17:52:74:38:59:
da:42:49:27:60:a5:31:a4:18:af:3e:ce:2c:b6:b0:
a0:d8:ef:72:62:b4:9b:35:93:ea:1a:53:ad:cb:1e:
55:eb:f4:70:88:17:e7:01:d7:60:18:e5:9d:92:6b:
00:05:0f:54:62:bb:e5:e2:bc:41:92:56:92:28:b0:
78:e0:41:b1:2d:2e:02:26:1b:99:54:77:6a:1b:11:
8c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:E3:75:C0:D4:B8:64:19:AB:78:47:24:C3:AD:2B:DA:A3:8E:21:A1
X509v3 Authority Key Identifier:
keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/2C26647A3B1E11F1AA6B1905CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.177.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:dc:35:d2:d9:99:70:5d:5b:4c:38:43:18:2e:72:20:9d:d4:
5c:dc:cf:46:d3:97:5a:16:05:9a:3b:38:2c:93:5f:7b:f9:76:
33:7f:c1:c4:eb:77:bb:69:24:df:65:63:cc:d1:05:39:1c:1a:
ef:9f:28:42:93:97:a0:79:dc:c6:fe:65:cc:eb:ef:5f:a5:da:
df:c9:da:12:56:4e:66:e8:4a:18:9f:7b:b2:65:ef:89:ec:80:
b6:01:2e:cd:8b:8e:de:6e:09:cd:0e:ae:ee:08:fb:54:a3:73:
31:b0:a0:97:09:1c:75:f8:5a:82:fe:a1:c8:ff:ae:18:f1:41:
47:62:c0:28:21:6c:7f:ad:56:e4:ad:8b:73:af:48:5a:7e:19:
50:6c:6a:fd:47:d4:a4:3f:7d:5a:43:fd:7b:ec:b9:c3:89:4e:
2e:02:74:af:3a:fd:3b:0b:e8:7f:e8:ee:56:96:f4:be:ef:9b:
4d:74:70:b3:77:be:98:06:50:d3:38:1e:3e:58:d8:2e:18:6a:
5d:5c:3f:90:7a:4d:f1:e0:7a:d3:e9:80:23:4c:ed:71:4c:d8:
80:be:7a:0f:e8:83:d1:9b:e2:7d:6a:06:0a:90:20:78:38:3f:
85:3e:af:0c:b4:53:33:df:34:83:46:65:d4:95:b4:f4:e1:21:
74:10:ef:77
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCUowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
N0RGQTRBRjExMC8GA1UEBRMoOTdDOTBFMjUyMTJEODg3Q0Y5RTFERTZGRERGNTUx
QkE4MTJGQTEzOTAeFw0yNjA0MTgxMjAwMTZaFw0yNjA1MjgxMjAwMTZaMBgxFjAU
BgNVBAMTDTY5ZTM3MjU0LWI3NDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDRInRkCL8nlOUTS2rBlMkwChW5WSXlOw5vN0rIHS0V/vN5C4mGy6dImzKt
NI1XYiF3o0JFOu8TtCJaQCY9Wi7883Vu9HbJxN4EtCFIWcWIhF/tP1FEXaAOZVsF
EW5qTLfH8aAfJ94LZWgplPvI41hUGXr63a3P/pDZl+jqB8lF14P4a+IFcIxqEiXH
k7M76iYS3qhA6jpN41Oea4liqVBDxlvNImkwxMyq5x1JaGcXUnQ4WdpCSSdgpTGk
GK8+ziy2sKDY73JitJs1k+oaU63LHlXr9HCIF+cB12AY5Z2SawAFD1Riu+XivEGS
VpIosHjgQbEtLgImG5lUd2obEYz3AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUTeN1
wNS4ZBmreEckw60r2qOOIaEwHwYDVR0jBBgwFoAUl8kOJSEtiHz54d5v3fVRuoEv
oTkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdERkE0LzA4QjhEODIwOTNBQzExRUJCMUQyQTgzMkY4QUVBMjI4L2w4a09K
U0V0aUh6NTRkNXYzZlZSdW9Fdm9Uay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2w4a09KU0V0aUh6NTRkNXYzZlZSdW9Fdm9Uay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjdERkE0LzA4QjhEODIwOTNBQzExRUJCMUQyQTgzMkY4
QUVBMjI4LzJDMjY2NDdBM0IxRTExRjFBQTZCMTkwNUNGMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmsbEwDQYJKoZIhvcNAQEL
BQADggEBAGrcNdLZmXBdW0w4QxguciCd1Fzcz0bTl1oWBZo7OCyTX3v5djN/wcTr
d7tpJN9lY8zRBTkcGu+fKEKTl6B53Mb+Zczr71+l2t/J2hJWTmboShife7Jl74ns
gLYBLs2Ljt5uCc0Oru4I+1SjczGwoJcJHHX4WoL+ocj/rhjxQUdiwCghbH+tVuSt
i3OvSFp+GVBsav1H1KQ/fVpD/XvsucOJTi4CdK86/TsL6H/o7laW9L7vm010cLN3
vpgGUNM4Hj5Y2C4Yal1cP5B6TfHgetPpgCNM7XFM2IC+eg/og9Gb4n1qBgqQIHg4
P4U+rwy0UzPfNINGZdSVtPThIXQQ73c=
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:13:09 2026 by rpki-client