Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/D3F7ECBE237711F1B5789F9EDAE4EC9C.roa
File: D3F7ECBE237711F1B5789F9EDAE4EC9C.roa (raw, json)
Hash identifier: m3i0l0lNUH6ltsGq6+F120+QsjNXJkq9PihsuoVPVvI=
Subject key identifier: ED:DF:F0:A8:A6:C9:AF:07:47:79:74:E4:07:34:76:FC:ED:69:99:B3
Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial: 0910
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/D3F7ECBE237711F1B5789F9EDAE4EC9C.roa
Signing time: Thu 19 Mar 2026 09:41:39 +0000
ROA not before: Thu 19 Mar 2026 09:41:35 +0000
ROA not after: Tue 28 Apr 2026 09:41:35 +0000
asID: 200113
IP address blocks: 102.177.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2320 (0x910)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DFA4AF, serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Validity
Not Before: Mar 19 09:41:35 2026 GMT
Not After : Apr 28 09:41:35 2026 GMT
Subject: CN=69bbc4d3-a459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:37:3a:4c:8f:7c:e2:ae:8d:a6:47:56:b7:07:
78:57:95:5c:f7:11:6f:3b:e4:e9:24:78:cc:4c:22:
74:6c:e0:91:23:f9:e4:b4:b5:85:4e:8f:b0:67:ef:
f8:21:42:03:63:e0:44:e6:f7:82:13:3b:3c:1f:86:
bf:c5:1a:18:75:43:47:75:18:bc:98:f0:56:a7:37:
96:79:88:9e:e6:b3:21:7c:59:8b:1c:73:57:52:d6:
9d:62:71:8a:90:ab:25:3c:38:ad:7b:68:9b:00:86:
2a:50:fb:4f:b3:89:ca:38:ef:ee:e6:98:5b:4a:98:
bd:e8:f1:86:d5:6a:69:e7:f9:e5:a8:7c:3e:7c:34:
96:10:2a:f3:8a:14:af:9e:b3:99:35:ed:ab:19:b6:
d7:fa:10:ac:14:2d:8a:fd:3d:52:9c:1b:a0:83:df:
79:14:1d:4a:74:cd:ec:d2:77:9b:38:9a:06:55:32:
52:79:b1:e9:30:59:39:e5:7e:9a:d5:f3:39:f6:3f:
1c:e3:82:0f:b8:c2:7f:65:22:70:b3:41:cd:a4:66:
20:bb:b3:cc:ce:b0:f1:f9:ae:f6:6c:25:1f:c4:96:
ab:71:3e:ee:04:82:14:ae:cf:b7:8e:1a:f4:d5:10:
7b:6b:ea:b4:7d:90:34:71:ae:29:fd:9e:c3:8e:68:
9e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:DF:F0:A8:A6:C9:AF:07:47:79:74:E4:07:34:76:FC:ED:69:99:B3
X509v3 Authority Key Identifier:
keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/D3F7ECBE237711F1B5789F9EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.184.0/24
Signature Algorithm: sha256WithRSAEncryption
88:ca:e9:c7:dd:d5:f3:4a:43:88:70:1d:35:2c:bb:89:cc:7f:
70:70:0a:4e:18:2c:d0:22:75:99:26:45:8a:e9:48:a4:29:fd:
39:46:85:85:6d:37:eb:ab:d6:01:6f:37:69:d2:9a:ce:0b:02:
79:0d:99:95:09:c9:db:60:40:a9:90:52:f9:f6:d9:f6:b8:60:
6e:ff:97:d9:34:90:64:65:7a:db:c0:d8:e8:a1:91:56:48:88:
a2:b5:a8:d2:e1:bb:9c:05:51:a9:c7:a1:cd:4b:bf:7e:2a:06:
76:e7:2d:7b:ba:33:13:d6:c7:8e:72:8e:33:16:22:80:dc:27:
15:a2:cf:f1:eb:ea:68:a2:9b:9d:fc:4d:6a:7d:4e:2c:05:9e:
ff:be:ec:c8:32:ce:90:83:99:47:d5:da:7f:2e:00:d6:b7:41:
7c:06:af:a7:3e:f2:c5:5f:d8:4c:84:f8:a4:82:9c:35:d7:89:
b3:93:1b:f1:f9:60:aa:d9:d2:f2:b6:39:f9:0d:63:b2:f4:31:
03:0c:01:fe:64:da:b8:3e:7e:ca:29:65:ad:c4:9d:cd:bb:45:
01:ed:82:85:03:1b:88:f6:15:89:8d:cc:8f:bd:24:75:30:c0:
f8:2c:d6:26:b5:b7:b9:fe:db:9f:0b:3b:da:1d:79:15:39:50:
41:57:19:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:12:51 2026 by rpki-client