Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/2AEAFB7E109011F1B726E8E2DAE4EC9C.roa
File: 2AEAFB7E109011F1B726E8E2DAE4EC9C.roa (raw, json)
Hash identifier: VXIcF4P22gSUPwgZfmfhi0VnBk46TJmMRaObbJrVPpU=
Subject key identifier: FC:4F:E2:9C:3E:EF:04:98:55:2F:D6:6E:BC:57:3B:F9:D7:57:6D:07
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1775
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/2AEAFB7E109011F1B726E8E2DAE4EC9C.roa
Signing time: Mon 23 Feb 2026 08:18:01 +0000
ROA not before: Mon 23 Feb 2026 08:17:57 +0000
ROA not after: Wed 23 Feb 2028 08:17:57 +0000
asID: 17497
IP address blocks: 102.129.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 25 Feb 2026 08:18:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6005 (0x1775)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Feb 23 08:17:57 2026 GMT
Not After : Feb 23 08:17:57 2028 GMT
Subject: CN=699c0d39-a34a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:59:1b:8a:fa:e7:8a:07:f7:20:28:b2:f9:48:
a3:4b:2c:5d:96:41:89:78:57:7c:ce:76:23:cd:c8:
23:8c:11:b5:55:b7:ce:c2:97:fa:15:3f:1f:a5:25:
f3:f6:fb:17:14:58:81:cc:51:8d:fb:8f:2f:a9:3a:
09:6c:ed:87:ce:dd:51:a8:86:1d:d4:fa:b7:57:b0:
a9:e4:a8:1f:d2:c5:ba:16:b8:80:87:75:f0:0d:a9:
ae:6a:51:da:88:a4:cd:23:37:1e:ac:9b:8f:2f:e7:
82:3d:74:21:1b:29:81:72:b2:8f:9d:20:6b:ff:5d:
2d:2c:b3:ab:b7:55:ca:f2:2f:92:aa:cf:6c:1b:2b:
dd:8b:4f:c4:e5:83:ab:e6:b5:cb:3f:3c:5a:a8:0a:
87:01:bd:d2:e3:2f:1c:f6:c4:4b:91:1d:46:07:27:
63:dc:38:d1:10:1b:b1:b4:4a:95:e9:3e:f7:cb:20:
4f:53:c2:35:4e:77:2d:34:65:e8:a4:48:82:f0:f7:
3e:2f:b4:82:c3:29:4a:ba:bd:55:ee:ea:f4:3d:1b:
bd:6a:a6:fb:28:cf:d3:b1:df:94:f8:5e:70:b5:64:
bb:bb:15:8e:f7:d8:7c:02:fd:f2:21:c6:d9:15:3e:
3c:ac:0b:50:3e:04:95:5d:06:cd:b6:cc:52:bd:26:
a6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:4F:E2:9C:3E:EF:04:98:55:2F:D6:6E:BC:57:3B:F9:D7:57:6D:07
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/2AEAFB7E109011F1B726E8E2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.217.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:69:f8:8c:c1:e0:d9:c0:3e:a0:49:f0:87:03:d0:23:ca:1e:
cc:41:f7:5a:32:6e:0e:d5:73:7f:9f:75:60:cc:3e:6c:c0:ee:
0f:ff:7a:a6:f2:33:9a:ad:c4:b4:b2:53:4d:39:90:8b:c3:f7:
41:25:b5:8a:de:12:85:b1:3e:f9:e3:db:90:2f:ff:f7:55:f7:
1e:a9:02:00:25:8a:d4:35:aa:0a:fa:e9:a9:98:c7:65:aa:f0:
78:5a:20:60:56:1d:a3:6b:66:63:81:e1:15:2c:38:6f:87:5b:
5e:95:0f:a7:a6:12:30:3b:7a:1d:9d:a2:e6:93:6e:46:5c:6d:
8a:0a:83:45:80:9f:e4:55:ae:26:69:74:60:e7:48:ad:0e:97:
bc:5f:fc:6a:aa:d2:04:13:67:01:2f:1e:63:02:a8:47:b3:90:
7f:3f:77:d3:22:ff:41:cb:a3:b2:5c:ab:d2:be:9d:8f:9d:aa:
ce:34:6a:93:08:43:bb:f9:f4:ac:3d:8a:fd:89:c4:d1:01:8c:
ec:ef:1b:02:e9:cc:76:73:bb:c6:b2:fb:a9:b2:0c:ac:72:76:
ba:c9:9d:f9:67:6d:c2:6e:eb:77:bf:62:47:23:cb:0f:ed:79:
7e:93:31:41:88:36:fe:e1:bf:b8:f2:f4:e0:c1:3e:ad:50:8b:
c8:1e:fd:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 21:01:43 2026 by rpki-client