Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/0D46AF0451F011F1B7E0841ACF1D38B0.roa
File: 0D46AF0451F011F1B7E0841ACF1D38B0.roa (raw, json)
Hash identifier: Z+3bLa/JWGOVrsQLMWUiiZdBLl62YOfmKUJs0ov2DYY=
Subject key identifier: 11:84:44:A7:5B:36:D2:91:F1:2D:B9:99:F2:43:EA:86:11:BA:9C:4E
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1881
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/0D46AF0451F011F1B7E0841ACF1D38B0.roa
Signing time: Sun 17 May 2026 12:58:09 +0000
ROA not before: Sun 17 May 2026 12:58:03 +0000
ROA not after: Thu 17 May 2029 12:58:03 +0000
asID: 834
IP address blocks: 102.129.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 19 May 2026 00:07:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6273 (0x1881)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: May 17 12:58:03 2026 GMT
Not After : May 17 12:58:03 2029 GMT
Subject: CN=6a09bb61-9155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:01:d7:4c:de:c8:91:79:eb:8e:79:9b:e1:19:
b8:ac:ee:53:cf:cc:45:f7:a7:eb:3c:a2:23:3e:08:
ab:df:61:f1:55:5c:b3:c7:5b:ee:e4:8a:11:60:68:
b9:a9:a1:1a:62:b5:e1:48:a5:bf:fd:fc:a1:cb:35:
56:68:90:83:49:82:4e:61:f1:04:44:82:b4:3d:45:
6d:2e:bf:45:56:cf:2c:64:bb:a5:56:12:59:3c:66:
fc:f6:ff:3f:be:38:c9:82:1e:d4:e4:07:6a:30:5a:
be:1a:58:64:a1:f5:64:1a:7e:fc:da:71:7c:42:f3:
3e:1b:8f:e4:7a:16:2a:e7:a5:05:7a:33:9f:cd:40:
3a:78:7c:ad:6d:38:5f:9f:a7:ae:f4:e0:bf:c1:92:
a2:15:f9:0f:94:3b:32:83:0a:64:81:06:a9:98:36:
a3:db:63:9f:3f:e9:f4:19:e1:84:ff:3b:c9:ec:6c:
37:30:9d:7c:04:b5:f3:6c:f5:b9:08:85:de:76:0c:
ed:c9:11:e7:34:cd:69:91:fe:72:f7:d9:e3:66:65:
c1:da:e4:00:63:8c:c5:78:e4:ed:7b:05:c3:7b:a2:
5f:25:ac:66:6d:fb:ff:da:ca:2b:26:6c:88:92:63:
a5:2e:3d:c5:81:f0:f0:86:36:39:12:85:a6:0b:a7:
5e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:84:44:A7:5B:36:D2:91:F1:2D:B9:99:F2:43:EA:86:11:BA:9C:4E
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/0D46AF0451F011F1B7E0841ACF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.128.0/24
Signature Algorithm: sha256WithRSAEncryption
62:2e:b9:b8:0d:af:d5:a3:29:f6:ff:54:fc:dc:15:48:b8:05:
b4:23:33:de:63:c7:d7:9a:98:6c:19:b0:5f:fb:9b:54:c9:b2:
0a:54:af:32:8d:6a:3a:0d:2d:ad:3d:bf:b5:7a:61:7a:11:7e:
53:71:f8:18:84:72:5a:4a:22:6b:9c:43:45:38:5e:64:cf:ce:
bd:f8:31:ec:c2:4c:7c:0f:f1:2a:c4:d2:61:94:24:af:50:fe:
2a:3c:c3:a9:4f:dc:ab:85:e8:e1:8f:5d:e5:f0:0f:7b:71:55:
f4:85:a4:a9:57:6f:70:d7:09:4c:ba:e5:20:e1:b3:45:da:82:
f1:bb:fa:d8:0a:f5:03:68:79:a0:d1:8a:3f:9d:2c:24:29:99:
74:a6:c5:6b:a1:7f:d9:65:3d:f8:eb:5a:26:4f:ed:9c:0f:61:
3b:d6:f4:d1:4b:89:3f:a8:9c:b9:87:d5:a5:7d:c5:d8:d4:d3:
39:89:d3:7c:c3:8a:ea:10:6d:b6:31:03:36:df:23:38:f9:f2:
1f:be:66:62:44:9e:91:13:04:84:84:c9:27:44:2e:7a:08:e7:
6a:ad:ee:b2:ff:f0:70:0a:01:30:c6:e0:16:18:b3:8e:e2:63:
d5:23:d0:ca:1b:4b:7c:c1:f0:46:8d:92:74:b9:23:45:fe:b6:
f3:89:d6:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 20:44:54 2026 by rpki-client