Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/1E75DB081B7F11F196296B95DAE4EC9C.roa
File: 1E75DB081B7F11F196296B95DAE4EC9C.roa (raw, json)
Hash identifier: pu+sXOLm7gwocYokQXFg0pRHMtwUuaYWqfgK6ppV7VE=
Subject key identifier: B1:37:9E:80:65:43:C0:64:A0:F6:8B:82:1B:D6:D4:FF:96:0C:2E:75
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1793
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/1E75DB081B7F11F196296B95DAE4EC9C.roa
Signing time: Mon 09 Mar 2026 06:13:42 +0000
ROA not before: Mon 09 Mar 2026 06:13:37 +0000
ROA not after: Thu 09 Mar 2028 06:13:37 +0000
asID: 834
IP address blocks: 102.129.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 11 Mar 2026 06:13:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6035 (0x1793)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Mar 9 06:13:37 2026 GMT
Not After : Mar 9 06:13:37 2028 GMT
Subject: CN=69ae6515-b4e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:28:13:80:1e:b9:36:22:31:61:6d:38:ab:1d:
92:35:54:27:52:eb:2d:63:4b:a7:67:3a:e7:8c:23:
7b:8f:fe:e7:7d:5e:25:fd:9b:d0:22:29:ca:e7:69:
8a:80:9f:c6:05:49:ed:a1:e3:75:1d:34:67:a8:e3:
c8:d6:75:02:17:e4:d6:aa:21:65:b0:fe:27:81:63:
5a:4d:e4:bd:fe:45:98:b1:c2:7c:23:1a:50:5d:d5:
ec:b4:37:bc:27:e9:30:39:b4:ed:ec:3a:44:8c:3b:
6a:0d:a2:ae:9c:50:3b:9d:10:30:49:e4:08:61:00:
05:ff:0b:ee:0b:55:83:7a:fd:01:d5:31:48:10:0a:
75:da:e0:1e:65:42:08:e9:d5:b1:ea:5a:4c:07:07:
82:16:e0:7b:0e:06:64:d4:18:2d:9c:54:0a:d5:af:
13:3a:c6:aa:b3:79:b4:c7:6d:cc:63:5e:d9:62:4a:
be:63:9a:24:c9:33:2a:a5:3e:4c:fb:e8:fd:9e:b6:
36:75:f0:33:40:f2:81:fa:51:04:82:91:a6:0d:5e:
ec:7f:4e:16:08:a5:4c:51:c1:1d:58:02:91:c4:d9:
07:74:9c:ec:aa:b8:46:5b:08:71:33:15:3d:b3:01:
a7:77:5d:2d:89:a1:0c:18:f8:38:65:a4:cf:21:01:
70:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:37:9E:80:65:43:C0:64:A0:F6:8B:82:1B:D6:D4:FF:96:0C:2E:75
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/1E75DB081B7F11F196296B95DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.134.0/24
Signature Algorithm: sha256WithRSAEncryption
65:1b:6f:f0:0a:b4:fa:9d:7a:0d:2a:0e:6e:1f:e4:75:a0:8f:
31:63:e0:69:ed:46:08:c9:67:9c:e3:4c:e7:ab:e4:7a:70:24:
9d:8c:7c:5b:70:a4:75:36:87:e1:96:86:7a:18:34:cd:22:e2:
f2:a7:41:79:0e:bc:6f:09:3e:32:ca:78:1b:ca:d8:4a:90:cf:
81:63:80:39:97:50:af:d8:ab:35:c4:85:3d:be:8c:81:3d:16:
8f:44:a6:6f:58:2b:f5:bf:30:42:e4:9b:c2:a4:38:6b:7c:14:
1f:eb:4c:d4:0b:ba:50:13:c7:66:a4:96:bd:17:f1:a0:f1:28:
af:fe:7b:b7:0d:d5:aa:2e:5c:f7:ca:67:90:36:7d:38:d9:27:
ec:af:6c:f2:27:d4:11:e1:82:69:b2:67:34:55:36:78:72:8b:
a4:00:b0:5a:1c:c4:48:f5:2d:f6:cc:87:64:55:0b:bc:de:40:
25:ca:bc:4f:1f:aa:16:f9:dd:ef:07:33:57:7b:bf:46:2c:1c:
e7:02:31:5a:bb:2e:34:9e:4f:1d:5f:7d:02:9b:1b:17:f8:73:
ee:63:22:ae:ee:96:2e:6d:f9:5e:d9:f3:da:4a:0d:d0:7d:68:
2c:7c:5f:26:5f:0b:51:06:67:1c:d6:bb:11:7e:e2:e2:c7:0d:
eb:a0:6b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 10 02:25:15 2026 by rpki-client