Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A0CB0/182F4984C21811EB994E4271F8AEA228/AC177DA47B0B11F1A3B216CBCE1D38B0.roa
File: AC177DA47B0B11F1A3B216CBCE1D38B0.roa (raw, json)
Hash identifier: bMth0AusCvgLj6XLpToN0qnzNfQVf/3FW6vcNFU0/ec=
Subject key identifier: 26:A0:D0:7D:B2:3C:B8:BA:87:42:C1:3E:B4:A4:B0:97:FA:E0:9C:FF
Certificate issuer: /CN=F36A0CB0AF/serialNumber=E10522573457FAD9CB5A6F5C19D68CCE6D6E9C23
Certificate serial: 0795
Authority key identifier: E1:05:22:57:34:57:FA:D9:CB:5A:6F:5C:19:D6:8C:CE:6D:6E:9C:23
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/4QUiVzRX-tnLWm9cGdaMzm1unCM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A0CB0/182F4984C21811EB994E4271F8AEA228/AC177DA47B0B11F1A3B216CBCE1D38B0.roa
Signing time: Wed 08 Jul 2026 20:29:09 +0000
ROA not before: Wed 08 Jul 2026 20:29:05 +0000
ROA not after: Wed 31 Dec 2036 20:29:05 +0000
asID: 327750
IP address blocks: 102.209.176.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A0CB0/182F4984C21811EB994E4271F8AEA228/4QUiVzRX-tnLWm9cGdaMzm1unCM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A0CB0/182F4984C21811EB994E4271F8AEA228/4QUiVzRX-tnLWm9cGdaMzm1unCM.mft
rsync://rpki.afrinic.net/repository/afrinic/4QUiVzRX-tnLWm9cGdaMzm1unCM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1941 (0x795)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A0CB0AF, serialNumber=E10522573457FAD9CB5A6F5C19D68CCE6D6E9C23
Validity
Not Before: Jul 8 20:29:05 2026 GMT
Not After : Dec 31 20:29:05 2036 GMT
Subject: CN=6a4eb315-cd27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f7:f5:2a:f2:b8:58:74:fa:a0:db:e2:8c:2a:
a7:4b:51:5a:10:92:08:7c:cc:79:0a:27:c2:13:74:
e2:a7:77:ae:a7:76:3b:80:7a:85:87:2c:8c:25:ce:
7a:34:8b:7f:77:f0:55:0a:24:de:e0:1c:71:d8:3e:
78:cc:7e:0d:d8:cd:50:9c:de:db:2e:fd:db:55:7f:
03:ad:eb:37:cc:39:c8:93:46:80:bc:20:0a:02:36:
ff:5c:88:e8:94:d7:11:da:91:83:68:e2:9a:33:ff:
ef:b0:fd:b5:71:18:c7:23:5b:75:a4:0c:a2:f0:3a:
89:de:39:48:e3:78:cc:9b:78:9b:09:29:cc:e8:ef:
9b:32:29:77:99:23:28:9a:96:d7:c9:91:65:3e:07:
23:36:09:71:6e:6d:07:c0:04:7e:a8:49:98:27:64:
ff:29:a1:bc:0c:e4:78:20:94:37:48:07:c0:9a:89:
a9:f1:b8:17:1d:c6:42:aa:d5:1f:d5:69:3a:49:7d:
30:e7:7b:ca:1f:d6:ef:9f:b3:58:1d:e2:14:e4:3b:
e8:56:76:99:6c:87:68:a5:94:0b:9d:8e:2f:0b:9b:
25:66:08:fa:fd:21:d2:28:38:5c:a0:3f:0f:5a:aa:
89:a6:81:91:fc:52:bf:12:36:85:e6:6e:32:86:16:
a2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:A0:D0:7D:B2:3C:B8:BA:87:42:C1:3E:B4:A4:B0:97:FA:E0:9C:FF
X509v3 Authority Key Identifier:
keyid:E1:05:22:57:34:57:FA:D9:CB:5A:6F:5C:19:D6:8C:CE:6D:6E:9C:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A0CB0/182F4984C21811EB994E4271F8AEA228/4QUiVzRX-tnLWm9cGdaMzm1unCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4QUiVzRX-tnLWm9cGdaMzm1unCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A0CB0/182F4984C21811EB994E4271F8AEA228/AC177DA47B0B11F1A3B216CBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.209.176.0/22
Signature Algorithm: sha256WithRSAEncryption
47:4e:e3:ae:ca:4c:44:f2:ce:89:47:92:86:09:74:6f:db:3f:
e1:e5:b9:57:90:94:7f:1a:f0:c3:34:87:7c:1c:5c:c1:12:88:
b4:91:0e:2e:3a:a1:1f:da:6c:6f:dc:bf:10:74:f6:44:ce:9c:
a6:17:92:4a:41:26:3c:e7:9b:b7:b5:a2:44:08:5c:14:82:c3:
15:4a:31:31:d7:fa:84:1d:77:e6:d9:22:34:fe:3c:80:a3:45:
a5:91:11:1d:94:27:cb:3f:ef:ac:f4:b6:4a:1b:8a:23:37:4d:
06:87:58:71:ed:a1:f8:f4:cc:b2:a0:3c:ca:45:32:52:35:68:
fa:17:bf:e2:bb:4c:e4:c1:ac:4e:6f:58:2b:bc:94:80:0c:ec:
e6:47:1f:2c:04:59:7d:36:e9:61:cd:b3:90:39:a6:ab:09:0f:
d3:3f:f8:a0:d9:39:1b:67:13:34:6d:b2:60:99:f5:92:9d:83:
85:6b:8a:dd:26:50:84:b9:cd:4e:31:54:31:a4:d4:a3:c2:f5:
58:55:6e:4e:ea:68:05:f7:b2:05:a8:ac:99:ed:1e:3c:06:44:
c5:2e:15:71:67:ec:e3:78:73:f7:5e:c1:f1:b0:ee:9b:6a:3f:
5b:b8:17:fe:ce:c9:0e:bc:00:78:72:ca:c1:a5:26:8a:52:f7:
74:36:ee:e1
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICB5UwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTBDQjBBRjExMC8GA1UEBRMoRTEwNTIyNTczNDU3RkFEOUNCNUE2RjVDMTlENjhD
Q0U2RDZFOUMyMzAeFw0yNjA3MDgyMDI5MDVaFw0zNjEyMzEyMDI5MDVaMBgxFjAU
BgNVBAMTDTZhNGViMzE1LWNkMjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDA9/Uq8rhYdPqg2+KMKqdLUVoQkgh8zHkKJ8ITdOKnd66ndjuAeoWHLIwl
zno0i3938FUKJN7gHHHYPnjMfg3YzVCc3tsu/dtVfwOt6zfMOciTRoC8IAoCNv9c
iOiU1xHakYNo4poz/++w/bVxGMcjW3WkDKLwOoneOUjjeMybeJsJKczo75syKXeZ
IyialtfJkWU+ByM2CXFubQfABH6oSZgnZP8pobwM5HgglDdIB8CaianxuBcdxkKq
1R/VaTpJfTDne8of1u+fs1gd4hTkO+hWdplsh2illAudji8LmyVmCPr9IdIoOFyg
Pw9aqommgZH8Ur8SNoXmbjKGFqJ3AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUJqDQ
fbI8uLqHQsE+tKSwl/rgnP8wHwYDVR0jBBgwFoAU4QUiVzRX+tnLWm9cGdaMzm1u
nCMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkEwQ0IwLzE4MkY0OTg0QzIxODExRUI5OTRFNDI3MUY4QUVBMjI4LzRRVWlW
elJYLXRuTFdtOWNHZGFNem0xdW5DTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzRRVWlWelJYLXRuTFdtOWNHZGFNem0xdW5DTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkEwQ0IwLzE4MkY0OTg0QzIxODExRUI5OTRFNDI3MUY4
QUVBMjI4L0FDMTc3REE0N0IwQjExRjFBM0IyMTZDQkNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJm0bAwDQYJKoZIhvcNAQEL
BQADggEBAEdO467KTETyzolHkoYJdG/bP+HluVeQlH8a8MM0h3wcXMESiLSRDi46
oR/abG/cvxB09kTOnKYXkkpBJjznm7e1okQIXBSCwxVKMTHX+oQdd+bZIjT+PICj
RaWRER2UJ8s/76z0tkobiiM3TQaHWHHtofj0zLKgPMpFMlI1aPoXv+K7TOTBrE5v
WCu8lIAM7OZHHywEWX026WHNs5A5pqsJD9M/+KDZORtnEzRtsmCZ9ZKdg4Vrit0m
UIS5zU4xVDGk1KPC9VhVbk7qaAX3sgWorJntHjwGRMUuFXFn7ON4c/dewfGw7ptq
P1u4F/7OyQ68AHhyysGlJopS93Q27uE=
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:20:14 2026 by rpki-client