Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/C1E8AFA611C311F1B6BEC5B4DAE4EC9C.roa
File: C1E8AFA611C311F1B6BEC5B4DAE4EC9C.roa (raw, json)
Hash identifier: JEqp2N2TXrJ+Ky/pTVMu50jhhMR0hRKsd7V4NfPv25Y=
Subject key identifier: 05:73:1F:F3:C1:73:47:6A:7E:80:2D:0A:CC:A7:AF:DC:AF:F6:BF:0C
Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial: 08D9
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/C1E8AFA611C311F1B6BEC5B4DAE4EC9C.roa
Signing time: Tue 24 Feb 2026 20:59:49 +0000
ROA not before: Tue 24 Feb 2026 20:59:45 +0000
ROA not after: Sat 28 Mar 2026 20:59:45 +0000
asID: 141718
IP address blocks: 102.177.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2265 (0x8d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DFA4AF, serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Validity
Not Before: Feb 24 20:59:45 2026 GMT
Not After : Mar 28 20:59:45 2026 GMT
Subject: CN=699e1145-5e18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:42:0d:48:00:18:c6:60:88:89:d6:da:b9:55:
ff:05:81:5c:3e:4e:01:1a:55:6d:72:09:98:58:22:
05:65:53:dc:2e:a7:93:09:a7:7e:ed:37:84:ac:48:
0d:9d:67:4e:e0:1f:46:51:aa:d9:c0:ed:94:29:e9:
b5:a7:30:21:67:51:63:47:d4:30:19:93:c8:f3:02:
65:82:88:89:3e:98:7e:6b:7f:3c:95:0d:1e:8e:8b:
62:9e:d4:e5:51:22:35:3b:0a:20:96:68:9a:a3:60:
57:45:86:3d:4a:4f:11:d7:ba:84:bf:6c:51:aa:05:
7a:68:cf:77:92:c3:61:39:cb:03:68:97:26:69:d1:
7e:7a:82:97:73:97:5a:66:1f:eb:a7:0c:5e:b7:fd:
1f:fc:84:14:4f:45:e7:0c:b0:35:08:a7:31:bd:da:
76:8c:cf:a6:4a:e2:c6:6a:ad:28:4b:2c:00:0c:1b:
6d:2c:04:30:b3:13:d6:91:1f:67:cc:c0:88:2d:45:
0d:c6:bc:64:2c:f8:67:d2:64:f7:c8:ff:0c:e7:14:
fd:81:5f:48:78:5a:23:bf:04:1f:7d:37:ea:2d:ab:
4f:d6:ae:c9:4f:f5:bf:38:d9:f1:86:27:b4:cb:05:
d2:9f:38:22:23:cd:51:56:64:1a:db:c9:c5:44:8a:
87:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:73:1F:F3:C1:73:47:6A:7E:80:2D:0A:CC:A7:AF:DC:AF:F6:BF:0C
X509v3 Authority Key Identifier:
keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/C1E8AFA611C311F1B6BEC5B4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.180.0/24
Signature Algorithm: sha256WithRSAEncryption
94:53:95:b6:ea:0e:26:9c:72:6b:43:ca:f9:02:71:0a:3b:c5:
97:d5:ad:ed:87:e7:45:ea:4e:be:5f:5e:10:3e:cf:3f:8f:fc:
d6:f7:74:0d:2c:8d:5c:49:74:2c:7d:d8:ad:20:00:d6:2c:19:
e1:79:c1:97:bd:5c:ec:b2:d9:41:9a:6d:d6:18:ff:72:14:ed:
59:79:94:5b:c8:8f:1b:4b:f6:84:26:21:8c:f3:90:1e:6a:79:
63:5f:93:21:d0:76:bb:01:cf:e9:a3:26:a7:ee:11:9e:0b:8c:
2a:c0:c7:55:a7:d2:13:94:17:d1:03:0d:38:49:c3:29:3e:69:
42:fd:a8:11:ea:b3:12:43:13:8c:0e:4a:3e:c4:47:a7:e5:cf:
85:ce:d9:2a:2e:eb:2a:25:7b:a2:07:ca:f8:85:6d:b5:da:1e:
38:76:73:2d:47:19:2c:e0:ed:89:f5:79:bc:e7:c1:e0:e1:59:
09:4c:43:d9:4b:7f:a8:a3:62:31:a6:42:28:64:59:8a:24:7b:
c8:da:4b:d7:d9:38:e2:19:44:d6:e1:eb:a1:c8:c9:4e:c4:31:
fc:aa:91:d7:47:51:5d:3b:7c:e3:d3:9b:d6:b8:38:0e:11:2d:
c3:9d:c4:9d:73:7e:b1:b9:35:e1:70:0e:44:21:f6:0e:e3:24:
e4:61:95:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:51:34 2026 by rpki-client