
Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/FB7CF2F64ADD11F18486DD1ECF1D38B0.roa
File: FB7CF2F64ADD11F18486DD1ECF1D38B0.roa (raw, json)
Hash identifier: 6fN3u3ah5rOO+tByL1KmT52742oHmYmIOzjSF5T4kO4=
Subject key identifier: EE:BF:04:B1:F2:F7:66:02:1E:B7:70:2C:00:B5:7F:3A:53:9F:D2:25
Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial: 0963
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/FB7CF2F64ADD11F18486DD1ECF1D38B0.roa
Signing time: Fri 08 May 2026 13:01:10 +0000
ROA not before: Fri 08 May 2026 13:01:05 +0000
ROA not after: Sat 30 May 2026 13:01:05 +0000
asID: 22724
IP address blocks: 102.177.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 02:03:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2403 (0x963)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DFA4AF, serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Validity
Not Before: May 8 13:01:05 2026 GMT
Not After : May 30 13:01:05 2026 GMT
Subject: CN=69fdde95-cb25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c2:6f:87:4b:e3:bd:a6:0e:f3:99:1a:89:33:
de:c6:7a:3a:31:48:e8:95:db:d9:10:99:0a:c8:f0:
95:b1:7a:33:b2:f4:97:c1:bb:54:6e:c3:bd:d3:51:
12:d1:d5:56:bf:f2:01:90:d6:ff:af:f3:bf:86:8a:
be:60:ff:e1:b4:21:6b:fb:97:82:9c:50:c2:a4:f0:
21:1f:a5:72:c6:35:e4:8d:37:64:91:6f:0f:b4:4f:
2f:1e:e1:75:2b:44:64:74:04:4e:b7:a6:25:03:b5:
21:74:d0:cb:50:3f:73:c5:f7:27:23:ec:5d:d1:29:
64:e0:87:94:b4:b8:82:9d:61:61:46:e1:a2:ef:91:
69:25:eb:5b:d3:d9:bd:ef:2c:f7:ef:0e:45:76:ec:
4b:17:44:6e:58:c6:89:41:ad:bf:e7:cc:c0:43:77:
69:51:c7:eb:12:c6:41:0c:f6:b8:97:c9:cd:9b:87:
02:a0:bd:42:69:b2:d6:99:e8:60:ae:3e:ff:63:ee:
96:6b:5d:f6:37:c4:59:b3:9d:f1:98:0f:79:ad:fd:
83:45:d2:08:ab:6b:2a:4c:1d:3d:9a:91:ca:c6:26:
a7:8f:8a:2b:27:2c:34:4b:2b:27:f4:ee:78:da:4d:
cc:14:30:40:fd:ba:b0:61:38:3b:2e:e2:77:13:35:
2c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:BF:04:B1:F2:F7:66:02:1E:B7:70:2C:00:B5:7F:3A:53:9F:D2:25
X509v3 Authority Key Identifier:
keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/FB7CF2F64ADD11F18486DD1ECF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.171.0/24
Signature Algorithm: sha256WithRSAEncryption
19:ee:6d:70:f1:a7:89:4a:c2:87:6d:e3:86:01:bd:e5:85:fb:
ca:2e:cf:67:5d:92:68:7a:b5:7a:57:38:88:2f:44:21:2b:10:
19:62:a9:c1:f3:64:ec:2c:97:3f:5c:c7:ab:a1:0a:d1:4b:95:
0e:a0:cc:5d:b9:76:2b:06:62:b2:5f:be:81:f3:27:0a:9d:c9:
ab:2e:67:71:c5:3c:16:8e:21:6b:78:f6:a3:50:e6:34:68:d6:
41:bb:8a:f9:01:a9:22:5b:83:c1:ae:f9:28:01:9b:9a:3c:cb:
6e:90:a3:49:62:cb:26:4a:c0:b4:f3:35:b7:ab:83:9b:05:af:
5b:8d:e5:54:ad:36:2c:1b:b8:54:b2:5f:bd:5f:eb:46:92:10:
66:52:d7:b3:04:f9:3a:b2:33:1d:1b:b1:cc:3d:63:97:eb:88:
14:2b:95:ce:15:20:0a:68:6c:cf:c5:9a:06:fb:ac:30:3e:44:
f5:f8:67:56:45:d3:f0:d5:8c:80:09:a5:f9:fa:92:b3:a6:3b:
3c:8e:26:c5:c1:87:25:5a:62:0b:1d:16:2d:22:e7:c6:2e:e4:
a1:a8:4e:56:6d:c7:5a:10:69:c7:f6:c2:ab:8c:79:e7:31:c1:
ea:12:d3:1c:b7:03:a6:2f:c2:11:73:70:b6:78:6e:c2:4a:19:
2f:ae:71:ff
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCWMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
N0RGQTRBRjExMC8GA1UEBRMoOTdDOTBFMjUyMTJEODg3Q0Y5RTFERTZGRERGNTUx
QkE4MTJGQTEzOTAeFw0yNjA1MDgxMzAxMDVaFw0yNjA1MzAxMzAxMDVaMBgxFjAU
BgNVBAMTDTY5ZmRkZTk1LWNiMjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDYwm+HS+O9pg7zmRqJM97GejoxSOiV29kQmQrI8JWxejOy9JfBu1Ruw73T
URLR1Va/8gGQ1v+v87+Gir5g/+G0IWv7l4KcUMKk8CEfpXLGNeSNN2SRbw+0Ty8e
4XUrRGR0BE63piUDtSF00MtQP3PF9ycj7F3RKWTgh5S0uIKdYWFG4aLvkWkl61vT
2b3vLPfvDkV27EsXRG5YxolBrb/nzMBDd2lRx+sSxkEM9riXyc2bhwKgvUJpstaZ
6GCuPv9j7pZrXfY3xFmznfGYD3mt/YNF0giraypMHT2akcrGJqePiisnLDRLKyf0
7njaTcwUMED9urBhODsu4ncTNSwvAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU7r8E
sfL3ZgIet3AsALV/OlOf0iUwHwYDVR0jBBgwFoAUl8kOJSEtiHz54d5v3fVRuoEv
oTkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdERkE0LzA4QjhEODIwOTNBQzExRUJCMUQyQTgzMkY4QUVBMjI4L2w4a09K
U0V0aUh6NTRkNXYzZlZSdW9Fdm9Uay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2w4a09KU0V0aUh6NTRkNXYzZlZSdW9Fdm9Uay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjdERkE0LzA4QjhEODIwOTNBQzExRUJCMUQyQTgzMkY4
QUVBMjI4L0ZCN0NGMkY2NEFERDExRjE4NDg2REQxRUNGMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmsaswDQYJKoZIhvcNAQEL
BQADggEBABnubXDxp4lKwodt44YBveWF+8ouz2ddkmh6tXpXOIgvRCErEBliqcHz
ZOwslz9cx6uhCtFLlQ6gzF25disGYrJfvoHzJwqdyasuZ3HFPBaOIWt49qNQ5jRo
1kG7ivkBqSJbg8Gu+SgBm5o8y26Qo0liyyZKwLTzNberg5sFr1uN5VStNiwbuFSy
X71f60aSEGZS17ME+TqyMx0bscw9Y5friBQrlc4VIApobM/Fmgb7rDA+RPX4Z1ZF
0/DVjIAJpfn6krOmOzyOJsXBhyVaYgsdFi0i58Yu5KGoTlZtx1oQacf2wquMeecx
weoS0xy3A6YvwhFzcLZ4bsJKGS+ucf8=
-----END CERTIFICATE-----
Generated at Wed May 13 12:40:29 2026 by rpki-client