Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/E230D98211C311F19EC4DEB6DAE4EC9C.roa
File: E230D98211C311F19EC4DEB6DAE4EC9C.roa (raw, json)
Hash identifier: gOYSWL2Lg9L2pOgZoVRNIEaVmFGhDhKeXyI02beuiOk=
Subject key identifier: DE:40:B7:A3:05:07:50:D3:FC:2B:D4:77:B3:68:98:B2:5F:2C:C2:D4
Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial: 08DB
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/E230D98211C311F19EC4DEB6DAE4EC9C.roa
Signing time: Tue 24 Feb 2026 21:00:44 +0000
ROA not before: Tue 24 Feb 2026 21:00:40 +0000
ROA not after: Sat 28 Mar 2026 21:00:40 +0000
asID: 211826
IP address blocks: 102.177.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2267 (0x8db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DFA4AF, serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Validity
Not Before: Feb 24 21:00:40 2026 GMT
Not After : Mar 28 21:00:40 2026 GMT
Subject: CN=699e117c-d204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:8f:e0:75:62:18:8b:ea:84:f1:c8:ee:5b:cb:
88:b6:f1:6f:10:c8:7c:c8:36:d6:a8:57:1c:83:7b:
a6:16:7b:91:9f:d2:02:83:e6:f9:9f:0c:79:8e:34:
d2:6b:c9:d6:f0:9b:47:ed:f0:40:68:8c:e4:9b:81:
8f:61:df:23:cb:56:48:6d:b6:f7:b7:5f:67:eb:f6:
72:04:f3:50:cc:dd:bf:ce:52:68:93:ac:37:e6:07:
9d:4f:e2:7a:64:e3:f6:e0:ea:59:b7:37:0c:64:fc:
85:f1:32:01:79:59:e2:3e:7e:db:20:85:56:e0:e0:
ab:59:b4:fa:5a:31:08:59:45:63:a9:52:75:b4:32:
38:fe:7d:77:fe:aa:93:46:8a:4e:f7:9e:c0:f1:d1:
b4:b0:d3:1e:b0:59:01:97:d7:92:05:c8:05:46:54:
89:22:1c:42:a9:6c:ce:87:c7:57:62:01:39:99:bf:
24:74:12:c2:bf:ba:81:10:6e:4f:2f:8e:13:e8:10:
04:a8:ff:cf:aa:96:92:0a:4d:62:a8:01:ad:aa:6b:
93:18:0f:3d:5d:42:c4:4f:00:08:82:f3:8f:86:67:
6c:d0:cb:77:5b:02:23:07:de:8a:06:68:f0:43:bf:
8a:a0:67:39:08:82:e5:9a:f9:78:1c:6a:74:23:ce:
06:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:40:B7:A3:05:07:50:D3:FC:2B:D4:77:B3:68:98:B2:5F:2C:C2:D4
X509v3 Authority Key Identifier:
keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/E230D98211C311F19EC4DEB6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.177.0/24
Signature Algorithm: sha256WithRSAEncryption
33:01:63:2b:6f:97:41:6a:20:11:d1:da:63:a0:0e:92:7f:96:
9d:8f:4a:5c:4b:cf:59:bf:ea:c7:68:59:c7:97:dc:d1:55:fe:
ab:1a:86:97:89:f1:cb:8f:17:05:9e:81:25:61:40:8a:67:c9:
16:81:3c:f0:82:f8:f1:b1:e0:9b:23:9b:27:b3:63:9a:aa:74:
2f:a0:fe:75:83:da:f8:c1:32:6b:c1:76:46:3e:48:ea:28:cd:
47:d7:38:72:2e:ef:d4:9a:d5:91:12:c0:10:10:f2:b4:6f:74:
a2:1f:7a:b0:12:21:2b:31:39:4f:c7:86:cb:fc:4d:bd:26:ee:
1b:f4:ea:b1:f1:fc:5d:53:cd:dc:03:99:43:51:fd:b7:b4:f6:
a8:48:9a:f3:45:3f:f3:8e:2a:76:97:49:ab:36:68:61:d4:b6:
2f:6f:71:67:85:17:ea:a7:fc:4a:47:99:5c:91:68:65:85:f8:
1d:d6:0e:fe:c4:7f:29:31:26:54:1d:2a:d7:55:4c:c4:e8:25:
2d:7b:2c:11:88:2e:7b:6c:bc:21:54:95:04:7c:b9:6d:e1:64:
08:d8:33:4e:b5:34:48:f2:10:54:c9:63:62:1b:78:81:79:ac:
12:72:bc:d0:6f:f2:b3:d8:03:a0:1c:c5:96:44:4a:ad:8c:ab:
b5:71:9d:30
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCNswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
N0RGQTRBRjExMC8GA1UEBRMoOTdDOTBFMjUyMTJEODg3Q0Y5RTFERTZGRERGNTUx
QkE4MTJGQTEzOTAeFw0yNjAyMjQyMTAwNDBaFw0yNjAzMjgyMTAwNDBaMBgxFjAU
BgNVBAMTDTY5OWUxMTdjLWQyMDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDjj+B1YhiL6oTxyO5by4i28W8QyHzINtaoVxyDe6YWe5Gf0gKD5vmfDHmO
NNJrydbwm0ft8EBojOSbgY9h3yPLVkhttve3X2fr9nIE81DM3b/OUmiTrDfmB51P
4npk4/bg6lm3Nwxk/IXxMgF5WeI+ftsghVbg4KtZtPpaMQhZRWOpUnW0Mjj+fXf+
qpNGik73nsDx0bSw0x6wWQGX15IFyAVGVIkiHEKpbM6Hx1diATmZvyR0EsK/uoEQ
bk8vjhPoEASo/8+qlpIKTWKoAa2qa5MYDz1dQsRPAAiC84+GZ2zQy3dbAiMH3ooG
aPBDv4qgZzkIguWa+XgcanQjzgaLAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU3kC3
owUHUNP8K9R3s2iYsl8swtQwHwYDVR0jBBgwFoAUl8kOJSEtiHz54d5v3fVRuoEv
oTkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdERkE0LzA4QjhEODIwOTNBQzExRUJCMUQyQTgzMkY4QUVBMjI4L2w4a09K
U0V0aUh6NTRkNXYzZlZSdW9Fdm9Uay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2w4a09KU0V0aUh6NTRkNXYzZlZSdW9Fdm9Uay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjdERkE0LzA4QjhEODIwOTNBQzExRUJCMUQyQTgzMkY4
QUVBMjI4L0UyMzBEOTgyMTFDMzExRjE5RUM0REVCNkRBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmsbEwDQYJKoZIhvcNAQEL
BQADggEBADMBYytvl0FqIBHR2mOgDpJ/lp2PSlxLz1m/6sdoWceX3NFV/qsahpeJ
8cuPFwWegSVhQIpnyRaBPPCC+PGx4JsjmyezY5qqdC+g/nWD2vjBMmvBdkY+SOoo
zUfXOHIu79Sa1ZESwBAQ8rRvdKIferASISsxOU/Hhsv8Tb0m7hv06rHx/F1TzdwD
mUNR/be09qhImvNFP/OOKnaXSas2aGHUti9vcWeFF+qn/EpHmVyRaGWF+B3WDv7E
fykxJlQdKtdVTMToJS17LBGILntsvCFUlQR8uW3hZAjYM061NEjyEFTJY2IbeIF5
rBJyvNBv8rPYA6AcxZZESq2Mq7VxnTA=
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:13:56 2026 by rpki-client