Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/2FC6961C6BB211F1A07044C5CE1D38B0.roa
File: 2FC6961C6BB211F1A07044C5CE1D38B0.roa (raw, json)
Hash identifier: kMBxwDjAP98Objn63NnC7M3g2mOL2Qy8s+tJX63hZrU=
Subject key identifier: D9:0C:96:22:61:61:A8:BD:48:B5:ED:41:E7:69:8F:F3:B2:47:9D:C5
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 18FC
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/2FC6961C6BB211F1A07044C5CE1D38B0.roa
Signing time: Fri 19 Jun 2026 07:40:48 +0000
ROA not before: Fri 19 Jun 2026 07:40:43 +0000
ROA not after: Mon 19 Jun 2028 07:40:43 +0000
asID: 834
IP address blocks: 102.129.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 21 Jun 2026 00:07:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6396 (0x18fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jun 19 07:40:43 2026 GMT
Not After : Jun 19 07:40:43 2028 GMT
Subject: CN=6a34f280-2a5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ba:7a:25:84:9b:57:58:ea:4b:f7:cc:ac:57:
cb:db:56:31:68:9a:e7:22:dd:c2:0c:3d:4e:4d:24:
5d:c8:dc:b1:76:40:38:58:e4:85:62:8b:8b:5c:ca:
ff:4b:01:0c:91:02:c0:a5:60:28:cd:99:cf:88:97:
72:f8:91:7e:8e:78:18:dd:3a:2f:00:02:3a:41:75:
44:24:cb:3b:f3:2b:6f:ff:8c:b8:f0:6a:34:1b:6c:
cb:a3:7d:65:51:4f:d8:86:fc:fc:a5:13:83:66:f7:
e4:29:5e:0e:70:85:c9:27:63:3a:8c:78:7e:c5:76:
79:ff:04:92:7e:45:d4:f2:fb:f0:6a:ff:71:e8:6a:
4e:a1:dd:c6:ae:76:24:e1:eb:bc:31:e8:8e:4f:59:
39:7e:2a:dc:ae:a0:51:13:28:34:12:a1:c4:ce:12:
be:e7:7f:42:5c:03:64:bc:15:71:c5:bf:be:dd:19:
b7:50:f7:96:c7:0f:42:bd:68:68:40:37:71:5f:28:
14:4d:58:eb:ec:68:2a:b1:6c:c1:ac:60:49:c8:70:
e8:56:d7:64:4a:55:4f:05:be:b2:c4:cb:4c:54:19:
1e:c9:7a:6d:df:94:5a:20:b0:d3:d3:e4:7d:29:9d:
5c:e7:89:16:b7:93:f5:58:30:68:78:b2:0d:26:1a:
93:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:0C:96:22:61:61:A8:BD:48:B5:ED:41:E7:69:8F:F3:B2:47:9D:C5
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/2FC6961C6BB211F1A07044C5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.194.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:1d:ba:e4:cc:65:ae:40:5e:22:40:d5:67:b1:72:44:09:0f:
10:c6:49:68:17:06:3f:a6:c3:13:44:cc:36:81:d2:db:38:fc:
97:ce:0c:8b:33:b7:ce:d2:f7:0a:66:06:e8:bc:1b:b4:d3:b2:
86:e2:52:05:51:69:c7:b5:98:17:a1:6d:60:da:9b:d8:63:42:
57:78:99:6b:b4:cf:3f:b7:9d:5b:c3:fe:40:5a:a4:56:b0:fd:
c4:61:27:40:00:30:95:bb:7a:e9:84:92:8f:39:65:cd:cb:91:
72:9c:79:95:bd:18:d7:48:8b:f8:3d:f5:d7:97:19:8d:1e:6d:
e4:2f:90:d7:cf:64:a6:ad:3a:e7:17:7b:79:c5:d0:b4:16:24:
c5:3a:d9:df:18:5d:ea:1e:80:08:58:de:85:cc:41:92:1c:b0:
02:11:8d:59:a5:01:8a:49:e2:7a:12:8b:03:57:29:e1:10:8a:
8d:b5:bf:6e:a2:bc:70:c3:de:17:af:da:6d:69:0c:7d:b2:e1:
eb:fa:c9:58:6c:4e:e5:0d:7f:2d:76:8e:08:b3:9b:13:fc:42:
c4:58:44:f7:29:24:a1:1c:c7:e5:33:c1:80:63:9d:0a:ce:e8:
65:2b:55:eb:30:8a:6b:29:b5:0a:f4:6d:74:22:2e:e3:dc:86:
11:4b:07:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 19 20:08:06 2026 by rpki-client