Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/2346BCF25A6C11F1B4F17ACBCE1D38B0.roa
File: 2346BCF25A6C11F1B4F17ACBCE1D38B0.roa (raw, json)
Hash identifier: +OHfXjH8iAY7dGe1b3FSLCryMdlhH+r8F22dn3b88rA=
Subject key identifier: 4D:5B:31:70:CE:26:21:1A:12:1A:E6:68:72:D8:82:E1:98:F5:21:6E
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 18B8
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/2346BCF25A6C11F1B4F17ACBCE1D38B0.roa
Signing time: Thu 28 May 2026 08:06:32 +0000
ROA not before: Thu 28 May 2026 08:06:27 +0000
ROA not after: Sun 28 May 2028 08:06:27 +0000
asID: 214266
IP address blocks: 102.129.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 30 May 2026 00:07:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6328 (0x18b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: May 28 08:06:27 2026 GMT
Not After : May 28 08:06:27 2028 GMT
Subject: CN=6a17f788-bed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e5:cb:f1:56:63:7f:79:ee:b8:c4:ce:99:db:
ed:13:f6:77:a0:3b:c1:f5:0a:db:9f:43:b8:b9:cd:
46:e2:a2:a0:49:47:62:8f:b8:f0:1a:f5:b9:6a:6d:
1b:ba:12:73:08:ad:90:cb:b8:b6:17:ae:29:26:2d:
c6:f2:89:d9:d6:99:94:3d:56:3e:02:8e:ab:a6:06:
5b:9b:cf:b1:c1:b5:42:dc:93:12:d6:1f:e5:91:0f:
43:b0:3a:4f:45:da:d9:a1:5b:b9:33:f5:87:73:41:
02:91:7f:08:7a:b8:15:4e:f4:f4:f4:f9:49:63:5f:
af:cb:b2:de:28:98:bb:dd:9d:ac:c3:e8:86:65:86:
59:31:48:f7:94:9c:aa:48:38:af:0b:0f:6c:39:0f:
fe:f3:e7:13:e5:5c:9a:c7:30:aa:22:ae:9a:73:41:
65:b3:cd:0d:28:14:c7:17:c4:63:9a:23:82:74:a8:
f2:ad:80:d7:84:67:70:c5:97:40:06:05:9b:e4:13:
27:59:d4:08:0e:0b:c3:23:08:f9:61:ae:4d:f5:8b:
9d:25:fd:a4:ba:e4:62:8c:70:37:ef:c1:e5:cc:59:
2e:28:92:7a:34:35:52:9b:e0:36:1f:40:2d:d7:39:
e1:d2:11:86:6b:3c:90:2f:a9:92:28:80:7c:8e:1e:
0a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:5B:31:70:CE:26:21:1A:12:1A:E6:68:72:D8:82:E1:98:F5:21:6E
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/2346BCF25A6C11F1B4F17ACBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.209.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:f4:90:90:97:1f:72:68:73:94:15:21:6b:eb:90:9b:18:4f:
c7:85:44:37:74:69:0d:17:23:dc:54:90:5a:8b:c2:6f:f4:38:
13:e7:43:19:91:5b:5e:16:ef:af:fc:8e:01:1d:11:c3:69:52:
9d:43:24:48:9b:76:23:1a:bd:df:8c:8a:82:0a:e4:cb:f9:d0:
ae:65:1b:88:ad:80:db:ee:43:7a:3a:b0:8c:2c:80:51:6d:d6:
27:0d:11:93:26:f8:b3:32:dc:f9:16:c0:d1:d6:a5:68:d7:43:
82:ab:98:e3:be:a2:9a:47:5a:03:d6:37:82:07:1d:27:9c:34:
a8:6d:24:34:b5:59:bb:2b:75:bd:1d:c8:64:a0:30:6d:15:0e:
a2:6e:ce:76:b3:2e:89:55:b6:13:80:fd:62:a2:e9:c2:55:fd:
05:1b:03:76:b6:d4:6a:61:fb:d2:e0:72:96:bb:07:b3:8f:b7:
4c:68:45:3c:e0:c2:97:65:cb:37:1c:02:7d:cb:f4:68:24:0e:
03:48:a9:1a:5f:80:a3:4a:c7:1c:f4:0b:82:f3:12:0b:5a:b3:
e0:2a:9e:a5:58:87:46:23:3a:37:88:71:16:2d:e7:f6:34:22:
4d:17:f3:63:ae:05:7b:27:60:d6:c7:8e:56:f4:b9:15:3d:6d:
a1:ac:19:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 20:58:54 2026 by rpki-client