Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/0A8FE256573D11F1913DAAF1CE1D38B0.roa
File: 0A8FE256573D11F1913DAAF1CE1D38B0.roa (raw, json)
Hash identifier: 0os0UMnlniscgkm/iowOvZLDoNGFQKF+o3BFrlauo6k=
Subject key identifier: 52:6A:60:9A:8B:A5:C9:E9:F5:41:D8:28:EF:02:53:96:42:65:CB:D3
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 18A3
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/0A8FE256573D11F1913DAAF1CE1D38B0.roa
Signing time: Sun 24 May 2026 06:51:51 +0000
ROA not before: Sun 24 May 2026 06:51:46 +0000
ROA not after: Sat 27 May 2028 06:51:46 +0000
asID: 198087
IP address blocks: 102.129.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 May 2026 00:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6307 (0x18a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: May 24 06:51:46 2026 GMT
Not After : May 27 06:51:46 2028 GMT
Subject: CN=6a12a007-9645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:71:f3:ee:b0:34:53:fc:a0:cb:ba:3b:bf:f5:
b3:38:99:9d:7a:ff:14:7c:9f:33:02:fc:94:b6:fa:
7e:4e:66:f9:fc:94:45:6b:61:2a:3e:e4:a8:16:dc:
3b:ee:18:0c:dc:96:82:9e:d0:67:42:1c:8e:b6:13:
ac:17:bc:6a:fc:ec:5d:df:ff:29:99:83:52:44:e5:
3d:db:27:78:44:88:00:48:cd:af:02:52:89:f9:d4:
8d:19:90:50:e8:a0:db:3f:e3:26:9c:4f:e0:88:86:
58:75:a0:c8:10:f1:ce:ec:bc:75:97:8d:d6:f6:52:
f1:51:03:19:6e:66:ef:5d:4a:e9:64:ee:37:64:db:
59:93:bf:33:f4:60:78:e9:cf:c1:05:83:1a:9f:ce:
4c:e6:19:cc:99:cb:4c:69:33:5c:a4:35:32:a8:99:
e0:c5:68:e3:39:29:e8:5f:e5:61:57:2d:5b:91:eb:
da:e8:df:c5:33:fe:b3:df:1d:02:03:6b:51:7b:fe:
8f:40:4f:ac:0c:91:21:d4:e6:04:15:38:5a:15:7b:
7e:cc:ee:5d:fd:77:8a:4f:76:62:46:64:fd:0e:aa:
15:13:fe:ac:6d:1d:82:fa:02:9f:6e:08:0d:fc:e5:
2d:6c:50:ac:c3:52:56:ba:8a:15:87:47:e4:c3:3e:
57:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:6A:60:9A:8B:A5:C9:E9:F5:41:D8:28:EF:02:53:96:42:65:CB:D3
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/0A8FE256573D11F1913DAAF1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.183.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:da:25:88:94:8e:94:e0:15:6c:7f:66:a5:14:25:8f:77:04:
64:23:48:34:12:68:f7:28:93:10:40:63:a9:6c:59:33:8b:b6:
d5:c1:7f:b6:35:8c:d7:50:1b:e1:51:02:5b:e7:37:ac:68:ee:
7f:83:23:b5:e8:f4:04:d1:c9:4c:c6:59:45:a2:b6:a0:5f:a4:
f8:17:ab:c6:46:5c:b5:73:b4:49:40:75:61:32:d5:2f:88:e8:
60:81:03:24:3d:b0:f0:27:b3:37:77:2f:19:9c:5f:37:46:49:
73:0d:28:16:4a:71:9e:76:f7:b2:06:33:11:39:21:be:1d:06:
b0:a1:38:63:0d:78:26:f2:96:fb:cd:04:5a:cb:e0:5e:5e:51:
e7:d9:36:91:ef:f4:aa:a4:58:a5:49:e7:c9:c6:e2:57:35:5a:
57:c9:b3:80:7a:b0:f5:1b:c7:8c:5c:db:e7:78:68:16:47:a1:
4f:bb:68:1f:90:fa:9e:4e:f8:c7:0d:42:6c:72:5f:17:fb:c9:
92:d4:9b:f9:a4:0a:8b:ea:ed:81:57:b6:0b:7e:fc:99:f1:a4:
41:36:29:e2:2d:9a:e4:4f:cc:2a:4c:f3:cd:54:b3:1f:f5:89:
c7:ca:93:fd:9f:b8:2b:c5:4d:4d:fa:1c:ed:ac:ef:64:9f:9b:
ee:41:e1:8a
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICGKMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yNjA1MjQwNjUxNDZaFw0yODA1MjcwNjUxNDZaMBgxFjAU
BgNVBAMTDTZhMTJhMDA3LTk2NDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCacfPusDRT/KDLuju/9bM4mZ16/xR8nzMC/JS2+n5OZvn8lEVrYSo+5KgW
3DvuGAzcloKe0GdCHI62E6wXvGr87F3f/ymZg1JE5T3bJ3hEiABIza8CUon51I0Z
kFDooNs/4yacT+CIhlh1oMgQ8c7svHWXjdb2UvFRAxluZu9dSulk7jdk21mTvzP0
YHjpz8EFgxqfzkzmGcyZy0xpM1ykNTKomeDFaOM5Kehf5WFXLVuR69ro38Uz/rPf
HQIDa1F7/o9AT6wMkSHU5gQVOFoVe37M7l39d4pPdmJGZP0OqhUT/qxtHYL6Ap9u
CA385S1sUKzDUla6ihWHR+TDPleTAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUUmpg
moulyen1Qdgo7wJTlkJly9MwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4LzBBOEZFMjU2NTczRDExRjE5MTNEQUFGMUNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgbcwDQYJKoZIhvcNAQEL
BQADggEBAMnaJYiUjpTgFWx/ZqUUJY93BGQjSDQSaPcokxBAY6lsWTOLttXBf7Y1
jNdQG+FRAlvnN6xo7n+DI7Xo9ATRyUzGWUWitqBfpPgXq8ZGXLVztElAdWEy1S+I
6GCBAyQ9sPAnszd3LxmcXzdGSXMNKBZKcZ5297IGMxE5Ib4dBrChOGMNeCbylvvN
BFrL4F5eUefZNpHv9KqkWKVJ58nG4lc1WlfJs4B6sPUbx4xc2+d4aBZHoU+7aB+Q
+p5O+McNQmxyXxf7yZLUm/mkCovq7YFXtgt+/JnxpEE2KeItmuRPzCpM881Usx/1
icfKk/2fuCvFTU36HO2s72Sfm+5B4Yo=
-----END CERTIFICATE-----
Generated at Sun May 24 22:20:36 2026 by rpki-client