Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/99E6EDB063F811F1B30EB6D4CE1D38B0.roa
File: 99E6EDB063F811F1B30EB6D4CE1D38B0.roa (raw, json)
Hash identifier: pLi5fyFa9uNVpQymeq6XRu2Lvwi/kzdsGGt5sBtXMtY=
Subject key identifier: 86:CC:4C:B7:8D:39:6A:AD:46:3F:CB:B8:B2:D6:D9:44:59:65:93:5C
Certificate issuer: /CN=F3696E5FAF/serialNumber=5375CF4CA1643B08C341BDA79D8BE105BDC3C48B
Certificate serial: 0635
Authority key identifier: 53:75:CF:4C:A1:64:3B:08:C3:41:BD:A7:9D:8B:E1:05:BD:C3:C4:8B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/U3XPTKFkOwjDQb2nnYvhBb3DxIs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/99E6EDB063F811F1B30EB6D4CE1D38B0.roa
Signing time: Tue 09 Jun 2026 11:44:41 +0000
ROA not before: Tue 09 Jun 2026 11:44:36 +0000
ROA not after: Tue 31 Dec 2030 11:44:36 +0000
asID: 25818
IP address blocks: 102.177.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/U3XPTKFkOwjDQb2nnYvhBb3DxIs.crl
rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/U3XPTKFkOwjDQb2nnYvhBb3DxIs.mft
rsync://rpki.afrinic.net/repository/afrinic/U3XPTKFkOwjDQb2nnYvhBb3DxIs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1589 (0x635)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3696E5FAF, serialNumber=5375CF4CA1643B08C341BDA79D8BE105BDC3C48B
Validity
Not Before: Jun 9 11:44:36 2026 GMT
Not After : Dec 31 11:44:36 2030 GMT
Subject: CN=6a27fca9-c33f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:80:10:4f:d8:02:0b:ee:e4:eb:be:b3:ca:49:
fc:a0:fc:56:d6:3d:5e:bc:3c:d5:3a:d5:d9:4d:02:
c2:c8:2b:87:d3:a6:9f:8f:d9:0c:51:45:0a:95:88:
a9:10:79:3e:bf:cc:66:5d:32:7c:cf:32:76:46:10:
e5:c7:52:92:83:5a:31:1d:1d:f2:56:87:39:4f:79:
05:39:97:6c:4a:12:b9:ee:7b:ce:a4:50:8e:1b:80:
8b:9e:14:30:eb:c6:6f:76:7f:51:02:b3:ea:fe:bf:
eb:d7:b2:61:8f:43:8d:1d:21:ab:4f:eb:b7:19:24:
bd:5c:4b:bb:43:41:32:9e:60:d6:f4:9b:da:5b:ac:
79:d5:1f:61:ae:b2:72:8b:d6:dc:5e:77:b1:71:00:
e8:31:42:76:bc:24:ea:3c:1b:f7:c1:6d:bf:83:b5:
09:c8:27:af:9c:70:14:38:63:77:90:b2:26:22:0d:
ee:e2:27:1a:16:dd:27:96:f4:99:7d:db:1b:bb:8f:
e1:f2:ff:f5:25:0e:04:4b:1f:74:7b:eb:29:ad:b4:
09:40:12:92:ea:0a:40:bd:0d:51:4e:e7:f4:95:1e:
e2:91:97:90:ed:ad:28:48:46:8c:ab:10:91:b7:1e:
b0:7c:b2:10:7b:2f:0c:f6:08:85:05:09:29:d6:64:
33:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:CC:4C:B7:8D:39:6A:AD:46:3F:CB:B8:B2:D6:D9:44:59:65:93:5C
X509v3 Authority Key Identifier:
keyid:53:75:CF:4C:A1:64:3B:08:C3:41:BD:A7:9D:8B:E1:05:BD:C3:C4:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/U3XPTKFkOwjDQb2nnYvhBb3DxIs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/U3XPTKFkOwjDQb2nnYvhBb3DxIs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/99E6EDB063F811F1B30EB6D4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.117.0/24
Signature Algorithm: sha256WithRSAEncryption
57:e8:65:4e:2c:8b:67:83:7c:f2:6d:5c:83:db:b5:ce:59:33:
5b:ad:74:02:df:b1:70:82:88:51:fe:db:bb:2b:d6:23:00:78:
06:4c:74:cd:45:00:74:34:39:70:85:01:b7:f9:e3:40:c5:24:
78:39:c2:e4:34:9b:fa:cb:b3:51:7b:7c:45:86:5a:89:b4:8c:
b4:f6:0f:e1:bf:84:04:81:75:1a:55:92:dd:ad:62:8f:54:32:
bb:ba:d0:42:da:8f:48:be:69:9a:a2:36:26:69:67:c7:5a:e3:
e2:5d:2e:c6:93:71:38:c0:81:97:cb:1d:91:55:fe:18:29:3b:
9d:7a:cc:ed:cc:09:62:2d:9c:73:d8:11:3d:75:af:9d:94:7d:
c3:06:de:6d:f1:3a:69:eb:23:24:0f:8a:98:39:db:2d:07:a9:
e1:7e:76:77:e0:48:b4:55:d3:8e:c4:c9:30:1a:16:fe:f0:8f:
3c:23:61:6a:f0:9c:ee:bf:f0:40:ba:33:58:19:24:2f:64:1b:
03:2e:56:ef:69:9a:d8:d6:d2:db:3d:04:45:d1:65:ac:86:af:
05:b4:30:d9:2e:ed:95:cb:1a:b3:75:3d:9e:cc:a9:33:d3:df:
1d:45:7d:0f:e0:08:7c:8c:31:bd:88:98:d0:9f:c4:cd:20:ac:
b5:39:c8:53
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBjUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTZFNUZBRjExMC8GA1UEBRMoNTM3NUNGNENBMTY0M0IwOEMzNDFCREE3OUQ4QkUx
MDVCREMzQzQ4QjAeFw0yNjA2MDkxMTQ0MzZaFw0zMDEyMzExMTQ0MzZaMBgxFjAU
BgNVBAMTDTZhMjdmY2E5LWMzM2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC2gBBP2AIL7uTrvrPKSfyg/FbWPV68PNU61dlNAsLIK4fTpp+P2QxRRQqV
iKkQeT6/zGZdMnzPMnZGEOXHUpKDWjEdHfJWhzlPeQU5l2xKErnue86kUI4bgIue
FDDrxm92f1ECs+r+v+vXsmGPQ40dIatP67cZJL1cS7tDQTKeYNb0m9pbrHnVH2Gu
snKL1txed7FxAOgxQna8JOo8G/fBbb+DtQnIJ6+ccBQ4Y3eQsiYiDe7iJxoW3SeW
9Jl92xu7j+Hy//UlDgRLH3R76ymttAlAEpLqCkC9DVFO5/SVHuKRl5DtrShIRoyr
EJG3HrB8shB7Lwz2CIUFCSnWZDPVAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUhsxM
t405aq1GP8u4stbZRFllk1wwHwYDVR0jBBgwFoAUU3XPTKFkOwjDQb2nnYvhBb3D
xIswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjk2RTVGLzNEQTNEMzIwMTg5NzExRUQ4QzkzNkJEMkYxMjIyNDY4L1UzWFBU
S0ZrT3dqRFFiMm5uWXZoQmIzRHhJcy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1UzWFBUS0ZrT3dqRFFiMm5uWXZoQmIzRHhJcy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjk2RTVGLzNEQTNEMzIwMTg5NzExRUQ4QzkzNkJEMkYx
MjIyNDY4Lzk5RTZFREIwNjNGODExRjFCMzBFQjZENENFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmsXUwDQYJKoZIhvcNAQEL
BQADggEBAFfoZU4si2eDfPJtXIPbtc5ZM1utdALfsXCCiFH+27sr1iMAeAZMdM1F
AHQ0OXCFAbf540DFJHg5wuQ0m/rLs1F7fEWGWom0jLT2D+G/hASBdRpVkt2tYo9U
Mru60ELaj0i+aZqiNiZpZ8da4+JdLsaTcTjAgZfLHZFV/hgpO516zO3MCWItnHPY
ET11r52UfcMG3m3xOmnrIyQPipg52y0HqeF+dnfgSLRV047EyTAaFv7wjzwjYWrw
nO6/8EC6M1gZJC9kGwMuVu9pmtjW0ts9BEXRZayGrwW0MNku7ZXLGrN1PZ7MqTPT
3x1FfQ/gCHyMMb2ImNCfxM0grLU5yFM=
-----END CERTIFICATE-----
Generated at Sat Jun 13 06:40:46 2026 by rpki-client