Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/17AE62CA0D5D11F1B5ED43B5DAE4EC9C.roa
File: 17AE62CA0D5D11F1B5ED43B5DAE4EC9C.roa (raw, json)
Hash identifier: DknhkySVR16uiv0ooRG07ODN0Y5is7dTnWud/PYTEcg=
Subject key identifier: 2F:92:8D:91:DA:CF:BA:5C:5F:4C:70:A9:F2:15:69:7D:45:2C:11:E7
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 176B
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/17AE62CA0D5D11F1B5ED43B5DAE4EC9C.roa
Signing time: Thu 19 Feb 2026 06:34:51 +0000
ROA not before: Thu 19 Feb 2026 06:34:46 +0000
ROA not after: Sat 19 Feb 2028 06:34:46 +0000
asID: 208949
IP address blocks: 102.129.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 21 Feb 2026 00:07:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5995 (0x176b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Feb 19 06:34:46 2026 GMT
Not After : Feb 19 06:34:46 2028 GMT
Subject: CN=6996af0b-c3a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a8:01:71:51:05:2f:0b:a1:85:d1:79:b3:81:
21:ae:4a:83:cc:dd:df:20:7d:be:9c:4e:04:d0:6c:
31:b4:34:ae:03:e5:78:d2:12:cd:65:14:25:59:5b:
fe:79:20:ae:92:67:0f:f2:eb:76:1d:0d:97:17:48:
5f:e2:21:72:72:68:c9:bc:18:4a:93:81:97:bc:36:
3a:14:f3:f1:9a:fb:dd:34:b0:b4:7d:b5:06:08:ab:
98:e5:a8:3b:f9:15:86:10:64:b4:b5:84:3f:3b:76:
94:a2:ae:8f:56:ff:58:34:fc:2e:1a:7a:4d:2e:e6:
93:6b:9c:fc:d4:ba:2a:fa:e8:27:5c:39:03:29:88:
55:64:97:e9:fe:97:55:e0:31:6e:65:54:8f:aa:e1:
85:06:a1:93:c4:0f:50:1f:25:f9:d8:5b:17:90:c5:
63:e9:21:28:ee:c5:99:95:1a:98:91:42:eb:06:5e:
7b:01:2b:2f:69:41:34:27:24:a8:ef:10:f0:4a:69:
4a:f0:a0:0a:6f:0c:28:ca:66:34:ef:c6:5c:66:b8:
86:52:69:39:22:45:c1:b9:81:43:81:db:9d:79:5c:
2a:7d:49:80:03:8b:c1:5a:98:75:c7:18:91:60:43:
cc:00:56:f9:02:78:b4:6a:39:b3:90:1c:65:5b:bb:
47:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:92:8D:91:DA:CF:BA:5C:5F:4C:70:A9:F2:15:69:7D:45:2C:11:E7
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/17AE62CA0D5D11F1B5ED43B5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.200.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:21:6e:a6:01:cf:06:a2:6d:9c:f8:e6:dd:b7:d3:1e:a6:f2:
a1:81:2f:4d:45:91:2c:a0:42:88:32:fd:1b:f2:ea:c7:94:3a:
aa:a9:86:86:db:9c:ce:08:ea:6a:f0:37:c5:d2:a9:d6:37:21:
ab:ec:3d:1c:0d:0e:2c:5c:7b:eb:6a:9f:d5:d2:b5:d5:4b:1a:
dc:48:29:71:74:df:0d:e0:20:86:ad:a2:dc:a0:8b:eb:60:2c:
fa:5c:c7:4c:3d:2f:bc:eb:3c:8d:1a:fd:68:4a:58:6d:b6:ef:
b9:27:ac:4a:54:32:0a:7f:7a:45:dd:8e:70:64:02:32:bb:64:
2d:88:ae:e1:88:a9:cb:f7:ea:e4:30:00:d3:39:2e:e7:9c:62:
cc:90:c8:c6:84:4f:19:38:7a:21:49:da:72:4c:46:95:e0:f6:
ce:53:03:ea:df:26:56:86:0d:a1:06:aa:32:90:80:4c:fe:2f:
90:f4:99:9c:36:00:e2:ea:88:6d:3c:ea:4a:5e:3b:42:17:cc:
8c:48:b9:15:f0:7a:59:b4:99:1e:5b:83:2e:ed:e5:81:8d:db:
62:f7:fe:19:3e:0b:09:4c:12:b9:99:4b:4f:b8:a2:3d:e4:c6:
49:36:cb:c6:ed:5d:95:8f:f6:ec:52:ac:54:49:bc:d3:ac:72:
8e:1b:74:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:42:04 2026 by rpki-client