Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/E5FC56AE7A4B11F1BC8C2CB9CE1D38B0.roa
File: E5FC56AE7A4B11F1BC8C2CB9CE1D38B0.roa (raw, json)
Hash identifier: jmNdoCzHH4N8uxZsV5Tvcp3NjH/UbPjaffDXeuKhMzI=
Subject key identifier: 1D:06:5E:00:F3:E6:0B:A0:CB:FF:C3:F0:33:40:82:1A:39:D8:A8:BA
Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial: 09C7
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/E5FC56AE7A4B11F1BC8C2CB9CE1D38B0.roa
Signing time: Tue 07 Jul 2026 21:36:23 +0000
ROA not before: Tue 07 Jul 2026 21:36:17 +0000
ROA not after: Thu 13 Aug 2026 21:36:17 +0000
asID: 209242
IP address blocks: 102.177.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 02:04:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2503 (0x9c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DFA4AF, serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Validity
Not Before: Jul 7 21:36:17 2026 GMT
Not After : Aug 13 21:36:17 2026 GMT
Subject: CN=6a4d7157-8ea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c8:67:a0:e7:95:2b:cc:b3:b3:12:cf:9f:36:
fb:60:0d:c0:5d:b5:b9:e3:cc:ac:9c:ab:6c:cf:c6:
e7:01:f3:fe:2a:88:cd:ec:84:c9:72:6e:40:aa:8d:
80:94:28:64:59:aa:35:21:cf:89:da:43:a5:84:06:
3f:41:f3:55:21:1e:c6:55:39:bb:a1:cf:d9:92:93:
b7:4c:c6:b7:76:7a:74:a2:8c:34:e5:d2:0b:a5:48:
00:5b:4c:6d:7e:6c:20:e0:5e:34:9d:67:eb:54:8a:
3b:18:4a:4a:e8:6c:14:13:1a:5b:9d:ba:bf:ab:ca:
06:5e:ae:4f:86:5c:d4:f0:13:1b:95:9a:e6:5c:3e:
34:44:60:e0:87:0e:fa:6b:0d:df:6c:3c:55:d0:68:
08:68:8d:26:57:23:0f:8d:a3:7a:6f:81:1e:df:43:
73:d8:a1:90:86:82:79:9a:e6:2d:08:7e:0f:e3:5b:
30:db:18:1c:df:e6:b3:ee:ab:cc:aa:52:ba:ad:80:
6c:fb:42:36:9e:20:c1:ce:ea:9c:0f:2d:33:80:a0:
1f:b1:e0:d0:4f:f2:3c:c9:56:dd:a8:2c:23:5b:6e:
0b:1c:95:63:4c:f4:2c:48:5e:43:7d:6c:f9:bc:43:
f5:be:9e:a4:32:69:cc:b6:23:8f:c0:7b:66:2e:c7:
06:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:06:5E:00:F3:E6:0B:A0:CB:FF:C3:F0:33:40:82:1A:39:D8:A8:BA
X509v3 Authority Key Identifier:
keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/E5FC56AE7A4B11F1BC8C2CB9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.176.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:e3:c8:db:ea:7f:5f:45:37:56:68:a1:b1:53:65:1b:59:fe:
4c:16:c1:be:80:3f:46:c2:c0:36:87:1b:6a:7b:cf:90:74:06:
ef:1c:e4:a9:1a:6a:16:9f:fb:cc:c2:d6:44:cf:7a:69:8b:c1:
6d:0f:71:07:45:f2:bd:23:8c:c6:2e:01:a1:84:0c:12:bb:78:
8e:be:09:87:65:62:d4:16:28:5c:99:f9:4a:d3:0a:12:bf:13:
cf:b2:6a:6a:48:a9:1a:cd:12:a2:01:c4:8b:4e:bc:b0:44:11:
96:68:9a:4e:4e:fd:51:30:a4:91:f5:57:a6:b9:60:c4:65:29:
fc:ce:62:99:01:ae:49:94:3c:1e:c3:c5:d2:42:af:df:ff:4a:
95:e8:03:01:be:05:e4:f8:27:f1:b5:57:6d:7a:75:e2:5f:50:
b0:50:42:9d:f4:97:8e:d0:0c:d7:85:1f:61:e5:34:c7:78:bb:
83:69:07:a4:65:e8:4f:e1:25:2e:64:3e:9f:4c:5d:07:dc:65:
b5:21:97:3d:15:03:44:a7:09:31:88:19:4c:48:ac:45:8a:d7:
63:f6:df:14:59:18:cc:00:0a:cb:16:ac:65:92:47:f3:c5:ca:
2b:ce:4b:88:71:2c:55:e4:8c:a7:15:70:a8:95:ac:35:a4:80:
3f:34:9f:a1
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCccwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
N0RGQTRBRjExMC8GA1UEBRMoOTdDOTBFMjUyMTJEODg3Q0Y5RTFERTZGRERGNTUx
QkE4MTJGQTEzOTAeFw0yNjA3MDcyMTM2MTdaFw0yNjA4MTMyMTM2MTdaMBgxFjAU
BgNVBAMTDTZhNGQ3MTU3LThlYTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDByGeg55UrzLOzEs+fNvtgDcBdtbnjzKycq2zPxucB8/4qiM3shMlybkCq
jYCUKGRZqjUhz4naQ6WEBj9B81UhHsZVObuhz9mSk7dMxrd2enSijDTl0gulSABb
TG1+bCDgXjSdZ+tUijsYSkrobBQTGludur+rygZerk+GXNTwExuVmuZcPjREYOCH
DvprDd9sPFXQaAhojSZXIw+No3pvgR7fQ3PYoZCGgnma5i0Ifg/jWzDbGBzf5rPu
q8yqUrqtgGz7QjaeIMHO6pwPLTOAoB+x4NBP8jzJVt2oLCNbbgsclWNM9CxIXkN9
bPm8Q/W+nqQyacy2I4/Ae2YuxwZfAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUHQZe
APPmC6DL/8PwM0CCGjnYqLowHwYDVR0jBBgwFoAUl8kOJSEtiHz54d5v3fVRuoEv
oTkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdERkE0LzA4QjhEODIwOTNBQzExRUJCMUQyQTgzMkY4QUVBMjI4L2w4a09K
U0V0aUh6NTRkNXYzZlZSdW9Fdm9Uay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2w4a09KU0V0aUh6NTRkNXYzZlZSdW9Fdm9Uay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjdERkE0LzA4QjhEODIwOTNBQzExRUJCMUQyQTgzMkY4
QUVBMjI4L0U1RkM1NkFFN0E0QjExRjFCQzhDMkNCOUNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmsbAwDQYJKoZIhvcNAQEL
BQADggEBAAzjyNvqf19FN1ZoobFTZRtZ/kwWwb6AP0bCwDaHG2p7z5B0Bu8c5Kka
ahaf+8zC1kTPemmLwW0PcQdF8r0jjMYuAaGEDBK7eI6+CYdlYtQWKFyZ+UrTChK/
E8+yampIqRrNEqIBxItOvLBEEZZomk5O/VEwpJH1V6a5YMRlKfzOYpkBrkmUPB7D
xdJCr9//SpXoAwG+BeT4J/G1V216deJfULBQQp30l47QDNeFH2HlNMd4u4NpB6Rl
6E/hJS5kPp9MXQfcZbUhlz0VA0SnCTGIGUxIrEWK12P23xRZGMwACssWrGWSR/PF
yivOS4hxLFXkjKcVcKiVrDWkgD80n6E=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:29:22 2026 by rpki-client