Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/9A84AD3E11C311F1BF5B00B3DAE4EC9C.roa
File: 9A84AD3E11C311F1BF5B00B3DAE4EC9C.roa (raw, json)
Hash identifier: P/lqdhKz2qnZ4C+UPmgXSJnw29EF+B0hRLQpPCRGO9g=
Subject key identifier: 33:0B:CA:86:6E:B6:E4:A6:2B:95:25:06:BA:92:B8:25:F3:DE:FA:DB
Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial: 08D7
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/9A84AD3E11C311F1BF5B00B3DAE4EC9C.roa
Signing time: Tue 24 Feb 2026 20:58:43 +0000
ROA not before: Tue 24 Feb 2026 20:58:39 +0000
ROA not after: Sat 28 Mar 2026 20:58:39 +0000
asID: 200113
IP address blocks: 102.177.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2263 (0x8d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DFA4AF, serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Validity
Not Before: Feb 24 20:58:39 2026 GMT
Not After : Mar 28 20:58:39 2026 GMT
Subject: CN=699e1103-7a78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:8b:ed:38:5e:79:26:74:ef:4c:b3:e6:b7:a2:
4c:99:3f:25:d4:3e:76:ce:5b:5a:46:c3:a5:8d:63:
8a:56:f4:ee:08:d6:23:1b:d9:dd:b4:90:34:4b:7a:
28:01:f0:08:15:3b:7c:17:b1:16:b5:d8:b2:cc:bf:
61:47:c8:45:47:1a:c7:96:6d:d0:63:f8:0d:30:3d:
75:77:62:3a:7c:c0:06:7b:63:b9:29:84:f6:8c:be:
1f:18:17:33:89:0d:9f:23:d4:dd:16:cf:93:47:91:
7c:cc:59:65:32:06:57:ba:c8:7e:57:b4:c8:e3:fa:
65:4a:e8:2c:4e:b8:cb:73:cc:73:ab:67:61:88:66:
be:8c:0f:94:ac:64:e4:7d:b4:4c:57:45:e5:05:fc:
56:e9:3f:5a:0d:4f:49:98:9e:d2:9e:a5:58:47:90:
c7:e1:1e:53:0c:35:d2:0f:1c:eb:01:a3:8b:13:db:
75:f0:a9:86:c6:f2:ea:95:05:f0:2c:ac:7d:9f:08:
a4:2a:a9:d7:d0:e7:35:5d:be:69:f3:f1:ae:16:45:
a0:03:50:88:96:e6:3b:f2:4f:f5:db:7e:b8:c1:9b:
68:36:21:ae:ce:76:ed:e9:86:12:b4:b0:10:a5:54:
cc:27:90:b3:a8:85:28:3d:03:d4:e5:b0:42:f6:b3:
12:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:0B:CA:86:6E:B6:E4:A6:2B:95:25:06:BA:92:B8:25:F3:DE:FA:DB
X509v3 Authority Key Identifier:
keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/9A84AD3E11C311F1BF5B00B3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.184.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:d1:a3:3f:f1:b1:44:43:09:6e:4f:e4:f3:e9:e1:27:31:ed:
cc:8b:d0:c6:a7:6c:86:1b:e8:fb:3e:84:24:80:0b:c7:d0:52:
6c:ea:0e:db:72:02:34:ab:72:25:22:fd:5a:7c:3a:4c:ef:43:
92:93:d7:55:03:45:4f:ae:c7:83:21:bc:c4:99:4b:87:27:29:
9e:0a:24:d8:ee:25:f7:42:95:d2:31:48:b6:dd:d9:a8:7a:a4:
b3:f3:68:38:b6:77:e8:34:c4:cc:a7:ff:d4:ec:69:ab:d2:12:
28:9f:7a:0d:6c:b5:7a:87:c1:c8:cb:73:e5:20:d3:50:2c:b6:
5e:a8:b9:cb:15:5c:8c:10:c1:22:a5:2d:fa:73:53:2f:e7:44:
ed:2e:fb:f4:e7:29:3d:2d:86:fa:65:b7:bd:1a:a6:d7:6e:04:
a4:d7:20:3a:25:54:c5:b0:0e:bf:0a:a1:2d:b3:5f:15:7c:ad:
b8:11:93:36:17:c7:63:0e:c7:22:42:87:d8:68:fa:1c:ea:d9:
58:ca:70:85:b3:6c:41:74:4a:1e:06:cf:1c:77:d0:29:76:a8:
53:3f:8a:da:5a:f5:7b:4e:24:5c:68:42:45:63:b5:dc:6e:a1:
08:e2:13:ac:97:51:e0:0b:84:28:14:8c:f7:e0:d2:88:87:ac:
cc:e5:d3:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:45:49 2026 by rpki-client