Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/283244C8582A11F184B72C10CF1D38B0.roa
File: 283244C8582A11F184B72C10CF1D38B0.roa (raw, json)
Hash identifier: tpc+J8D9cm+hQ05umc0MjtGpAGA7nGcmzlgUInLECBs=
Subject key identifier: 3C:7D:71:93:DC:6C:65:65:C0:0A:9F:43:38:6B:B2:2C:5A:47:0C:E3
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 18A6
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/283244C8582A11F184B72C10CF1D38B0.roa
Signing time: Mon 25 May 2026 11:09:12 +0000
ROA not before: Mon 25 May 2026 11:09:07 +0000
ROA not after: Thu 25 May 2028 11:09:07 +0000
asID: 61317
IP address blocks: 102.129.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 27 May 2026 11:10:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6310 (0x18a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: May 25 11:09:07 2026 GMT
Not After : May 25 11:09:07 2028 GMT
Subject: CN=6a142dd8-e3ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2b:5c:23:92:22:fe:0e:f4:32:88:f6:63:71:
44:a6:db:87:27:ab:cf:ca:c1:2f:de:35:67:f5:bb:
7b:af:8d:e7:5a:2e:c1:0a:22:f5:e7:f1:ba:fb:c7:
35:7c:0d:fd:e3:28:8a:4d:0f:7b:aa:8f:83:2d:cd:
da:a3:6c:85:31:3e:ff:7c:0b:eb:82:3a:04:c7:28:
8a:39:f9:9d:0e:9a:db:35:b6:41:3d:3c:66:01:ce:
57:fe:c4:27:a9:29:7e:87:29:b1:58:b0:d9:5c:b0:
0a:f3:9b:dc:99:53:d2:c4:cb:08:41:db:af:76:25:
f6:2b:b7:c0:c9:2e:f6:1f:d0:75:a8:e9:96:56:13:
2b:6f:35:f1:a5:dd:68:c2:6d:28:3b:af:7e:7a:98:
10:54:e8:f7:f2:8c:79:97:57:4f:15:6b:7c:34:b3:
47:01:9b:14:9d:19:db:1c:b3:c6:44:9e:83:9b:45:
73:20:13:1b:8e:a7:ff:b3:91:15:3b:3f:16:57:3c:
48:38:79:02:52:ae:d7:32:27:7d:dd:55:ad:f9:c2:
65:43:bb:91:2b:df:60:56:1c:f3:09:6e:38:43:5f:
42:96:00:56:2e:49:3b:4e:69:e4:2f:d8:42:2e:30:
e7:62:5c:a9:ef:df:70:05:27:56:a9:69:2b:79:74:
c7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:7D:71:93:DC:6C:65:65:C0:0A:9F:43:38:6B:B2:2C:5A:47:0C:E3
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/283244C8582A11F184B72C10CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.134.0/24
Signature Algorithm: sha256WithRSAEncryption
db:3d:f5:e4:b5:de:69:5e:38:fe:4e:6e:e6:fa:f1:93:29:fd:
92:eb:4d:d9:75:4d:65:34:81:78:4e:7d:19:93:2d:d6:c6:17:
d8:d5:c3:9c:9e:98:29:c0:c9:b2:f4:70:54:25:12:b5:1c:cd:
12:36:d4:a3:f5:9f:47:ff:c0:26:76:46:54:12:01:13:6e:ea:
0a:48:ec:6f:b7:46:ad:82:50:a5:b1:be:b9:5d:41:54:f8:47:
03:86:50:fe:e6:f0:56:ae:0c:09:09:99:1b:0c:cd:9b:a2:50:
52:23:bc:ac:8d:2c:76:2a:f1:82:c3:f1:8f:19:b6:54:a3:cd:
c9:c9:f8:16:04:df:dd:5e:00:e0:a4:79:d5:22:5d:d6:10:54:
bf:95:88:0c:19:72:1a:d8:e5:59:3c:4e:c3:1c:94:fb:3c:6c:
e8:7e:1d:eb:d8:72:53:28:d7:62:95:ca:01:3a:fa:bf:b4:65:
7b:9d:c4:05:94:8f:47:1b:f5:b7:12:6c:17:0b:68:5d:4d:3f:
00:19:49:4f:b2:66:7e:0a:0c:64:7b:b4:eb:2f:7b:d4:ed:10:
90:3d:06:77:0e:62:a4:8f:f2:ad:95:ea:7f:3c:0c:ff:34:5c:
7a:a3:c7:89:c1:da:7d:da:dc:50:cc:27:8a:b7:c6:65:cd:74:
ba:06:41:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 25 18:59:28 2026 by rpki-client