Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/1F9DFDFA1C6D11F1848E1C84DAE4EC9C.roa
File: 1F9DFDFA1C6D11F1848E1C84DAE4EC9C.roa (raw, json)
Hash identifier: WqXSXBZKo0jC8a78JnQCZdgaR2iWvYu1IGG4roqyUiI=
Subject key identifier: 01:86:D4:67:06:F1:BC:AA:F5:FD:19:D5:17:B7:92:12:D2:35:8B:45
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 17C5
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/1F9DFDFA1C6D11F1848E1C84DAE4EC9C.roa
Signing time: Tue 10 Mar 2026 10:37:24 +0000
ROA not before: Tue 10 Mar 2026 10:37:19 +0000
ROA not after: Fri 10 Mar 2028 10:37:19 +0000
asID: 63199
IP address blocks: 102.129.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 01:25:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6085 (0x17c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Mar 10 10:37:19 2026 GMT
Not After : Mar 10 10:37:19 2028 GMT
Subject: CN=69aff464-faf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:35:8a:6d:8a:04:2e:ac:a8:34:b9:9a:1c:03:
d3:34:2d:8a:bb:4e:57:64:14:c7:d5:09:1d:60:67:
19:73:6b:90:16:94:30:0e:6a:fa:e1:43:3f:60:55:
80:0a:19:de:8a:36:13:32:96:21:8e:c9:d9:db:38:
18:13:4d:3a:dd:2d:b7:56:c7:8c:5f:7c:5b:50:14:
21:be:5a:f4:7b:82:34:53:92:44:27:a1:1d:0c:3e:
98:04:16:58:10:ea:a1:26:3a:51:11:a3:65:e4:0b:
82:17:d2:b4:ae:79:36:18:9d:2c:37:75:f1:63:6b:
da:2b:05:60:3d:9a:f0:cd:be:68:1f:8c:40:3a:af:
60:20:b6:94:a5:bb:3e:a4:26:af:cc:a3:0e:78:97:
79:58:6d:99:bd:2c:f1:60:10:9d:68:9a:98:23:af:
95:45:66:69:7b:68:26:40:d9:6f:a1:59:1e:87:87:
94:37:70:6c:80:66:0c:39:10:c4:fa:d0:b0:00:9e:
84:e1:57:27:c0:bc:39:e9:a8:cd:33:82:9e:37:df:
8f:25:ba:62:89:6c:8a:fa:fe:90:87:9f:91:26:68:
19:f1:eb:81:af:8f:cc:80:2a:5f:98:59:70:1a:4a:
dd:03:3c:42:d5:55:d4:74:cb:22:b7:24:72:b0:1d:
13:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:86:D4:67:06:F1:BC:AA:F5:FD:19:D5:17:B7:92:12:D2:35:8B:45
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/1F9DFDFA1C6D11F1848E1C84DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.189.0/24
Signature Algorithm: sha256WithRSAEncryption
95:11:c5:d3:69:c3:9f:27:e9:2f:da:d8:c0:a5:00:31:f7:76:
66:08:c8:ef:2e:2b:87:8b:63:0e:ef:2b:87:b8:ad:ff:4d:de:
0c:26:b7:c8:2e:c0:6f:f5:81:a9:a8:87:23:0c:a4:f0:e9:89:
a6:5e:fc:21:73:b2:94:03:f3:75:46:a7:cc:96:7e:ee:7d:ad:
1d:c3:84:db:78:88:e0:06:21:8a:e9:bf:7e:dc:28:60:fe:b2:
eb:af:9c:b8:d5:09:35:3c:03:ee:44:4f:85:3f:93:7b:b1:1d:
a2:83:17:41:43:a7:e4:ed:8b:3e:cb:4b:3b:05:0a:6f:d3:4e:
6f:22:2b:02:5b:f3:9f:37:81:f9:d2:37:55:6e:98:68:7b:55:
0a:6b:f9:f7:a5:41:ab:c4:e4:a9:66:d0:5d:d2:95:fc:f5:6d:
9f:39:44:a0:db:91:23:2d:5e:46:93:2a:67:ba:9d:a2:2c:89:
3d:12:cc:38:c2:cb:69:cf:03:b8:6e:14:c1:e3:52:5e:e9:b2:
0f:85:66:b3:f4:db:a0:8d:78:14:6e:1a:39:36:96:2d:b7:79:
22:cd:5e:d8:49:0a:1e:00:f1:3a:5e:ab:d7:11:88:98:18:f8:
07:11:9f:ef:fe:bf:d1:fc:76:b5:dd:53:9e:d5:00:d3:85:80:
d0:ed:62:0f
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICF8UwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yNjAzMTAxMDM3MTlaFw0yODAzMTAxMDM3MTlaMBgxFjAU
BgNVBAMTDTY5YWZmNDY0LWZhZjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDDNYptigQurKg0uZocA9M0LYq7TldkFMfVCR1gZxlza5AWlDAOavrhQz9g
VYAKGd6KNhMyliGOydnbOBgTTTrdLbdWx4xffFtQFCG+WvR7gjRTkkQnoR0MPpgE
FlgQ6qEmOlERo2XkC4IX0rSueTYYnSw3dfFja9orBWA9mvDNvmgfjEA6r2AgtpSl
uz6kJq/Mow54l3lYbZm9LPFgEJ1ompgjr5VFZml7aCZA2W+hWR6Hh5Q3cGyAZgw5
EMT60LAAnoThVyfAvDnpqM0zgp43348lumKJbIr6/pCHn5EmaBnx64Gvj8yAKl+Y
WXAaSt0DPELVVdR0yyK3JHKwHRNHAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUAYbU
ZwbxvKr1/RnVF7eSEtI1i0UwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4LzFGOURGREZBMUM2RDExRjE4NDhFMUM4NERBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgb0wDQYJKoZIhvcNAQEL
BQADggEBAJURxdNpw58n6S/a2MClADH3dmYIyO8uK4eLYw7vK4e4rf9N3gwmt8gu
wG/1gamohyMMpPDpiaZe/CFzspQD83VGp8yWfu59rR3DhNt4iOAGIYrpv37cKGD+
suuvnLjVCTU8A+5ET4U/k3uxHaKDF0FDp+Ttiz7LSzsFCm/TTm8iKwJb8583gfnS
N1VumGh7VQpr+felQavE5Klm0F3Slfz1bZ85RKDbkSMtXkaTKme6naIsiT0SzDjC
y2nPA7huFMHjUl7psg+FZrP026CNeBRuGjk2li23eSLNXthJCh4A8Tpeq9cRiJgY
+AcRn+/+v9H8drXdU57VANOFgNDtYg8=
-----END CERTIFICATE-----
Generated at Tue Mar 24 10:22:43 2026 by rpki-client