Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/9804A15265B211F1B8A11FCACE1D38B0.roa
File: 9804A15265B211F1B8A11FCACE1D38B0.roa (raw, json)
Hash identifier: DhDXL6C6a1V48jSxNvThOs1j9SEKmwCjygRp23GuCAU=
Subject key identifier: 99:A8:9E:23:5F:B2:D0:62:4E:4F:7B:EF:B9:D3:B8:E5:24:66:41:52
Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial: 09A5
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/9804A15265B211F1B8A11FCACE1D38B0.roa
Signing time: Thu 11 Jun 2026 16:28:36 +0000
ROA not before: Thu 11 Jun 2026 16:28:31 +0000
ROA not after: Tue 14 Jul 2026 16:28:31 +0000
asID: 209242
IP address blocks: 102.177.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2469 (0x9a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DFA4AF, serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Validity
Not Before: Jun 11 16:28:31 2026 GMT
Not After : Jul 14 16:28:31 2026 GMT
Subject: CN=6a2ae234-1814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f8:3d:d7:33:03:ce:86:cb:4d:42:0c:bb:cb:
5d:92:f2:00:58:8f:af:df:c7:d1:e2:a6:58:ee:5f:
b1:c8:6e:3f:60:5a:42:39:44:a6:3e:65:0e:22:6b:
96:1e:9b:79:ff:58:9b:b4:a3:96:b1:58:06:2b:bb:
04:f9:5a:71:75:b4:69:c4:ca:c4:a6:cd:85:47:f9:
d6:c5:25:8f:93:ca:b4:1b:dd:38:52:14:5d:45:88:
d5:68:a1:d0:1e:53:a5:c7:87:84:7d:32:29:4b:84:
94:80:4b:b1:35:ec:7d:86:b7:52:af:b5:b9:e1:45:
91:d1:7d:1f:dc:38:13:e2:a1:2e:33:93:b9:f3:e8:
9e:ef:af:42:67:65:8b:f6:9a:60:91:be:7e:68:29:
44:f6:9c:29:bd:59:2a:16:b6:f0:88:07:ed:e1:70:
aa:e2:ec:40:2c:de:1a:7c:5c:3e:91:f0:7b:52:40:
4d:c8:d0:e8:27:81:7c:4c:0a:ae:70:06:7d:4c:30:
fe:82:4e:43:dd:0d:2c:66:e4:49:d6:6d:61:0a:86:
df:0c:b9:27:a5:27:aa:a8:89:cf:d4:6a:fd:1d:c7:
b2:23:af:7c:a8:60:5e:32:96:7e:5e:de:70:07:be:
ec:9c:a3:fd:83:13:1d:4a:c1:39:38:dd:9a:fb:32:
24:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:A8:9E:23:5F:B2:D0:62:4E:4F:7B:EF:B9:D3:B8:E5:24:66:41:52
X509v3 Authority Key Identifier:
keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/9804A15265B211F1B8A11FCACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.176.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:3f:84:81:3d:4b:9d:5e:34:4d:a3:8d:e8:e2:35:68:7b:83:
88:0e:72:14:33:e4:09:73:15:43:c9:a6:9e:d7:77:3d:dd:5f:
c4:cc:e3:09:a2:cd:42:b4:a7:7c:c5:1f:fe:6d:91:10:53:15:
61:7e:7d:36:8f:f5:e3:91:b8:e3:4b:b4:b5:48:49:29:5d:db:
50:ab:e6:6d:60:f0:ec:24:5a:60:de:3d:73:3f:03:67:6a:2f:
d9:38:f1:30:d9:ed:32:7c:4c:65:c5:72:3b:f0:cf:34:bb:5b:
2d:5f:7d:f9:fc:b8:2f:50:8a:7f:c7:95:e3:25:ae:71:c9:c6:
c7:eb:fa:14:94:14:93:75:00:cb:e4:f1:18:5b:6d:73:00:04:
7c:53:dc:ff:28:24:6e:ec:6b:19:60:07:e5:fd:52:9b:81:90:
96:1a:17:3b:63:05:1e:97:c4:7f:6f:3a:7b:e9:86:5a:ff:78:
65:b7:1a:37:21:f5:c0:2a:a5:c6:9f:7c:b1:4b:70:6b:90:ef:
12:e8:00:f8:47:94:9b:0d:75:25:8e:67:68:db:d6:97:1e:a2:
26:ec:4e:50:ac:bf:34:c7:ca:c9:ec:b2:a8:f0:71:22:43:f7:
4c:a7:a0:c9:f1:a9:59:fb:3f:b0:0e:54:4c:07:76:9a:b2:ed:
e4:d8:29:6d
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCaUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
N0RGQTRBRjExMC8GA1UEBRMoOTdDOTBFMjUyMTJEODg3Q0Y5RTFERTZGRERGNTUx
QkE4MTJGQTEzOTAeFw0yNjA2MTExNjI4MzFaFw0yNjA3MTQxNjI4MzFaMBgxFjAU
BgNVBAMTDTZhMmFlMjM0LTE4MTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCi+D3XMwPOhstNQgy7y12S8gBYj6/fx9HipljuX7HIbj9gWkI5RKY+ZQ4i
a5Yem3n/WJu0o5axWAYruwT5WnF1tGnEysSmzYVH+dbFJY+TyrQb3ThSFF1FiNVo
odAeU6XHh4R9MilLhJSAS7E17H2Gt1KvtbnhRZHRfR/cOBPioS4zk7nz6J7vr0Jn
ZYv2mmCRvn5oKUT2nCm9WSoWtvCIB+3hcKri7EAs3hp8XD6R8HtSQE3I0OgngXxM
Cq5wBn1MMP6CTkPdDSxm5EnWbWEKht8MuSelJ6qoic/Uav0dx7Ijr3yoYF4yln5e
3nAHvuyco/2DEx1KwTk43Zr7MiRtAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUmaie
I1+y0GJOT3vvudO45SRmQVIwHwYDVR0jBBgwFoAUl8kOJSEtiHz54d5v3fVRuoEv
oTkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdERkE0LzA4QjhEODIwOTNBQzExRUJCMUQyQTgzMkY4QUVBMjI4L2w4a09K
U0V0aUh6NTRkNXYzZlZSdW9Fdm9Uay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2w4a09KU0V0aUh6NTRkNXYzZlZSdW9Fdm9Uay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjdERkE0LzA4QjhEODIwOTNBQzExRUJCMUQyQTgzMkY4
QUVBMjI4Lzk4MDRBMTUyNjVCMjExRjFCOEExMUZDQUNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmsbAwDQYJKoZIhvcNAQEL
BQADggEBALk/hIE9S51eNE2jjejiNWh7g4gOchQz5AlzFUPJpp7Xdz3dX8TM4wmi
zUK0p3zFH/5tkRBTFWF+fTaP9eORuONLtLVISSld21Cr5m1g8OwkWmDePXM/A2dq
L9k48TDZ7TJ8TGXFcjvwzzS7Wy1fffn8uC9Qin/HleMlrnHJxsfr+hSUFJN1AMvk
8RhbbXMABHxT3P8oJG7saxlgB+X9UpuBkJYaFztjBR6XxH9vOnvphlr/eGW3Gjch
9cAqpcaffLFLcGuQ7xLoAPhHlJsNdSWOZ2jb1pceoibsTlCsvzTHysnssqjwcSJD
90ynoMnxqVn7P7AOVEwHdpqy7eTYKW0=
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:02:30 2026 by rpki-client