Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/11B97A5297B011F18A791AA8CE1D38B0.roa
File: 11B97A5297B011F18A791AA8CE1D38B0.roa (raw, json)
Hash identifier: zXJ7Oqmo8h/dzHLUzGnyUAcl6hquyNUyl0Wi55QfWlo=
Subject key identifier: 3C:13:3C:FC:1A:73:7B:E1:A2:42:A4:39:07:9E:BE:BA:E8:73:51:1B
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 19A3
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/11B97A5297B011F18A791AA8CE1D38B0.roa
Signing time: Fri 14 Aug 2026 07:16:29 +0000
ROA not before: Fri 14 Aug 2026 07:16:26 +0000
ROA not after: Mon 14 Aug 2028 07:16:26 +0000
asID: 152698
IP address blocks: 102.129.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 16 Aug 2026 10:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6563 (0x19a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Aug 14 07:16:26 2026 GMT
Not After : Aug 14 07:16:26 2028 GMT
Subject: CN=6a7ec0cd-6c25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c0:de:ab:f0:6c:5c:ab:9d:91:5f:aa:5b:d9:
63:d1:76:60:d4:fe:46:e9:74:37:93:e6:17:9d:89:
20:d3:d2:dd:8a:f0:e1:56:95:8e:f3:ee:51:cc:ca:
a1:58:9c:11:ca:59:f2:d3:54:90:c8:c2:55:6b:97:
d2:a6:ff:b7:91:66:a8:2a:a4:01:de:d6:de:5a:cc:
3f:04:44:ef:66:46:d0:e6:99:6e:3c:b9:60:be:ec:
38:d2:2b:ae:46:c1:53:81:64:62:c7:52:1e:9d:d2:
d2:a9:d4:18:13:dc:ac:b3:9b:51:4c:a8:0e:2b:cd:
1a:90:32:dd:5a:6e:c1:14:40:53:ac:d2:7d:18:bb:
b4:d7:30:85:fa:4b:75:10:07:d5:44:e4:89:20:44:
9c:57:3c:04:f0:b5:8c:78:e9:cf:59:ec:b5:6d:0e:
91:b8:4e:e2:33:f6:11:b9:29:2a:84:07:53:f2:e4:
65:c7:49:4f:dc:18:7a:10:b8:0a:a3:27:7c:76:e3:
f4:6b:86:76:a1:d0:0f:b9:e3:bd:41:ae:47:96:75:
32:78:e9:fb:4c:6d:eb:32:4d:d6:83:5c:bf:0b:31:
cb:eb:c9:b9:00:1f:9e:8f:1b:d3:af:71:e0:3c:c4:
c6:97:70:b8:12:3d:23:e7:fc:d2:57:50:42:fe:1d:
24:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:13:3C:FC:1A:73:7B:E1:A2:42:A4:39:07:9E:BE:BA:E8:73:51:1B
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/11B97A5297B011F18A791AA8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.232.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:99:dd:82:ed:34:b5:93:d4:ba:8b:70:a5:6f:8f:0e:02:6c:
5e:66:0b:22:73:4b:f1:f0:11:0d:3e:84:9e:79:c5:63:32:04:
ef:76:e6:58:fa:65:03:74:55:e5:3b:bc:44:33:40:bd:d9:26:
94:39:03:63:e8:55:f7:bf:77:88:8c:37:90:cb:a3:c9:a2:eb:
3b:00:b6:3a:08:61:17:10:dc:44:65:d5:ce:06:85:8b:73:04:
fc:01:10:8b:f1:15:e0:41:ad:07:0d:9e:de:99:41:24:43:33:
ad:49:a7:a4:c8:29:f2:bd:c2:ba:e5:63:94:3b:3d:90:57:7d:
03:7a:e0:5c:98:46:2c:53:ab:bb:4e:d0:1c:05:39:23:c1:3f:
c2:e1:70:db:93:9f:ed:20:e9:67:de:56:de:6b:df:f7:a8:5f:
9e:ef:97:99:83:ea:83:88:6b:77:f5:77:c8:00:2f:f3:65:42:
b5:31:84:31:e0:97:22:6f:c7:06:0c:18:98:1d:d7:39:2f:88:
68:e1:c5:da:ac:28:d6:81:b9:1a:17:15:62:ac:1f:b9:69:bd:
33:c2:df:41:06:0a:a6:ad:51:fd:16:8d:47:cb:65:d5:af:fe:
bf:55:79:25:35:12:ca:b0:41:2a:ae:44:17:da:cb:fc:5e:12:
32:4b:d2:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 19:14:37 2026 by rpki-client