Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/9B4F12C84ADE11F1A3C8A6A4CE1D38B0.roa
File: 9B4F12C84ADE11F1A3C8A6A4CE1D38B0.roa (raw, json)
Hash identifier: Qfmbd9lkXvnR73bNeW6ju69GFurUWy01aiFDotj1jaU=
Subject key identifier: 66:4D:60:05:05:72:A2:75:C8:C8:FE:1E:C1:BD:51:F4:D0:34:1F:98
Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial: 0969
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/9B4F12C84ADE11F1A3C8A6A4CE1D38B0.roa
Signing time: Fri 08 May 2026 13:05:38 +0000
ROA not before: Fri 08 May 2026 13:05:33 +0000
ROA not after: Sat 30 May 2026 13:05:33 +0000
asID: 22724
IP address blocks: 102.177.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 02:03:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2409 (0x969)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DFA4AF, serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Validity
Not Before: May 8 13:05:33 2026 GMT
Not After : May 30 13:05:33 2026 GMT
Subject: CN=69fddfa2-88f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:78:b2:7f:56:0d:59:93:e7:3f:7d:af:aa:71:
91:54:11:6c:58:42:f3:7d:6f:9a:b2:ae:c9:1d:f8:
f7:cd:b4:94:b5:52:ec:cd:8a:15:e7:c1:9c:1e:2a:
b8:c6:c6:6a:8e:70:c6:db:c8:76:69:88:ad:8f:c7:
a8:e5:32:01:5d:45:0e:d3:82:2a:0a:1d:48:e6:53:
2b:de:07:64:76:9c:4f:65:0b:13:95:e4:39:b5:90:
51:db:da:6e:91:06:cb:31:8a:cd:ff:e3:c3:9f:f1:
cb:3c:57:29:04:08:1c:0d:13:46:5d:60:eb:93:0c:
e0:9a:da:be:98:f6:d1:c9:e3:a4:21:24:d9:67:aa:
ab:ee:92:84:46:3e:bb:1a:00:98:32:23:64:a0:f0:
23:46:46:9b:ea:9b:b3:a3:f2:af:f7:ba:4d:58:3d:
e7:68:4b:1e:b3:cb:14:cc:36:5b:9e:98:d4:7a:d2:
d4:a7:80:eb:74:4e:f7:f8:9a:31:26:ce:bf:e6:56:
f5:fc:18:c5:75:f2:e8:20:ae:4e:0c:c7:28:1a:b7:
a8:f6:38:d2:ee:53:26:3c:f5:45:2c:c8:c6:3b:9a:
02:e9:2d:fa:4a:9c:87:b5:ba:08:15:00:d3:c6:ab:
eb:62:8f:a7:7c:d5:70:c5:20:f5:ed:91:2a:51:d9:
fd:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:4D:60:05:05:72:A2:75:C8:C8:FE:1E:C1:BD:51:F4:D0:34:1F:98
X509v3 Authority Key Identifier:
keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/9B4F12C84ADE11F1A3C8A6A4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.168.0/24
Signature Algorithm: sha256WithRSAEncryption
53:10:d1:00:23:cd:8b:dc:22:38:c2:c3:52:50:f3:f7:a6:85:
25:79:63:3e:70:23:17:02:d7:6b:eb:64:0e:30:34:26:72:e4:
94:50:ee:fe:a0:47:aa:00:d3:ca:de:7e:7c:2e:e3:e0:e3:21:
38:b3:77:c9:81:bd:df:87:9f:dc:03:f3:54:73:08:d4:00:90:
0c:6b:5e:bb:e8:f1:4e:28:25:6b:1b:a3:60:14:47:c9:aa:69:
5f:f8:e4:93:39:49:46:63:56:5d:53:50:5a:54:f5:96:2d:27:
d6:3d:00:41:39:47:45:4c:86:16:15:85:7c:01:8e:fa:1c:d0:
78:1c:f6:c5:22:b5:9c:2b:c0:8d:6d:2d:5a:41:69:4c:9b:69:
22:78:a0:5f:0c:16:e9:f2:99:46:cf:81:5b:3d:5f:ae:c8:54:
f0:91:56:cd:c3:ea:d7:14:69:86:e4:38:26:d2:ba:5c:aa:8c:
ce:a4:24:1c:cf:0d:01:fe:f1:0a:cf:92:6d:04:63:36:fb:5b:
f6:e5:b6:ef:eb:f4:15:3b:b2:db:bf:4b:91:3a:54:70:7b:cb:
05:2f:3f:76:f5:73:9b:5f:66:e6:08:64:37:38:c7:48:b6:3d:
cb:7f:9b:5d:61:1f:ee:68:f1:b2:79:c5:e6:2c:28:c8:72:e2:
d0:1e:8b:ab
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCWkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
N0RGQTRBRjExMC8GA1UEBRMoOTdDOTBFMjUyMTJEODg3Q0Y5RTFERTZGRERGNTUx
QkE4MTJGQTEzOTAeFw0yNjA1MDgxMzA1MzNaFw0yNjA1MzAxMzA1MzNaMBgxFjAU
BgNVBAMTDTY5ZmRkZmEyLTg4ZjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC1eLJ/Vg1Zk+c/fa+qcZFUEWxYQvN9b5qyrskd+PfNtJS1UuzNihXnwZwe
KrjGxmqOcMbbyHZpiK2Px6jlMgFdRQ7TgioKHUjmUyveB2R2nE9lCxOV5Dm1kFHb
2m6RBssxis3/48Of8cs8VykECBwNE0ZdYOuTDOCa2r6Y9tHJ46QhJNlnqqvukoRG
PrsaAJgyI2Sg8CNGRpvqm7Oj8q/3uk1YPedoSx6zyxTMNluemNR60tSngOt0Tvf4
mjEmzr/mVvX8GMV18uggrk4Mxygat6j2ONLuUyY89UUsyMY7mgLpLfpKnIe1uggV
ANPGq+tij6d81XDFIPXtkSpR2f31AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUZk1g
BQVyonXIyP4ewb1R9NA0H5gwHwYDVR0jBBgwFoAUl8kOJSEtiHz54d5v3fVRuoEv
oTkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdERkE0LzA4QjhEODIwOTNBQzExRUJCMUQyQTgzMkY4QUVBMjI4L2w4a09K
U0V0aUh6NTRkNXYzZlZSdW9Fdm9Uay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2w4a09KU0V0aUh6NTRkNXYzZlZSdW9Fdm9Uay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjdERkE0LzA4QjhEODIwOTNBQzExRUJCMUQyQTgzMkY4
QUVBMjI4LzlCNEYxMkM4NEFERTExRjFBM0M4QTZBNENFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmsagwDQYJKoZIhvcNAQEL
BQADggEBAFMQ0QAjzYvcIjjCw1JQ8/emhSV5Yz5wIxcC12vrZA4wNCZy5JRQ7v6g
R6oA08refnwu4+DjITizd8mBvd+Hn9wD81RzCNQAkAxrXrvo8U4oJWsbo2AUR8mq
aV/45JM5SUZjVl1TUFpU9ZYtJ9Y9AEE5R0VMhhYVhXwBjvoc0Hgc9sUitZwrwI1t
LVpBaUybaSJ4oF8MFunymUbPgVs9X67IVPCRVs3D6tcUaYbkOCbSulyqjM6kJBzP
DQH+8QrPkm0EYzb7W/bltu/r9BU7stu/S5E6VHB7ywUvP3b1c5tfZuYIZDc4x0i2
Pct/m11hH+5o8bJ5xeYsKMhy4tAei6s=
-----END CERTIFICATE-----
Generated at Wed May 13 12:40:27 2026 by rpki-client