Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/30FF3FA49BAD11F1B51BEED0CE1D38B0.roa
File: 30FF3FA49BAD11F1B51BEED0CE1D38B0.roa (raw, json)
Hash identifier: 1815bg4qusc0LaarI0DJbAXLq++jEM219Bw67b+oiUw=
Subject key identifier: 2A:41:14:8B:BB:8C:9F:9F:42:D3:1B:BD:EF:10:9C:7C:89:D8:6F:F9
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 19AE
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/30FF3FA49BAD11F1B51BEED0CE1D38B0.roa
Signing time: Wed 19 Aug 2026 09:05:58 +0000
ROA not before: Wed 19 Aug 2026 09:05:54 +0000
ROA not after: Sat 19 Aug 2028 09:05:54 +0000
asID: 137962
IP address blocks: 102.129.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 21 Aug 2026 09:44:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6574 (0x19ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Aug 19 09:05:54 2026 GMT
Not After : Aug 19 09:05:54 2028 GMT
Subject: CN=6a8571f6-4ef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e8:2a:12:d4:de:9c:70:c9:1d:e9:2e:67:29:
dc:29:3e:93:a2:2b:a7:0a:1f:b4:0c:2e:7b:f3:2b:
8d:84:79:bc:b0:4d:79:22:1f:24:e2:30:db:12:90:
21:62:7f:21:e0:83:66:ff:03:2e:21:cd:79:3e:de:
c5:27:e0:62:f3:9f:7c:88:c0:f4:16:66:46:cf:4e:
b5:67:42:d8:eb:63:25:2d:0d:a5:a1:32:80:7d:9c:
69:96:ea:8c:d0:84:bb:86:a0:3a:5c:8e:7f:61:eb:
33:bd:2d:7e:92:0d:da:af:b8:ca:4e:3b:ac:72:73:
9f:ad:33:50:4c:27:bd:9e:2d:e1:03:19:57:c3:dd:
21:b7:cd:7b:44:92:51:6c:fb:a2:cf:12:4d:0c:57:
01:54:f0:ea:be:6a:eb:87:0c:e1:df:92:f6:bf:b2:
9e:99:ef:6c:b9:3b:15:46:cc:6d:60:f9:d5:a7:ec:
90:dd:46:75:e7:b1:82:ae:5e:06:d8:7c:0c:97:fa:
aa:3a:ae:4c:c7:fd:2a:58:2b:e5:71:b2:90:26:5e:
99:b4:e6:36:89:27:9c:06:6c:a0:4b:5c:44:b1:21:
9d:33:94:3c:2d:34:30:00:21:5a:ad:a8:23:49:99:
e0:62:29:b9:67:58:75:28:8c:87:44:4a:70:22:6c:
67:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:41:14:8B:BB:8C:9F:9F:42:D3:1B:BD:EF:10:9C:7C:89:D8:6F:F9
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/30FF3FA49BAD11F1B51BEED0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.188.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:7b:06:cc:32:20:42:b6:b2:d2:a6:7f:0c:d4:56:11:4d:d1:
2c:ae:92:1b:62:5d:8a:78:79:5d:ce:70:43:3c:9b:f5:b0:5f:
53:9e:84:42:59:33:a1:d1:71:3a:6c:77:67:5c:14:ab:da:be:
73:8d:02:22:ed:f3:4e:39:7a:17:cc:92:c8:55:e3:80:88:29:
50:f9:9d:26:22:71:78:2f:48:1a:34:b4:59:c5:77:64:44:70:
91:a8:d5:1d:40:16:a8:c3:35:ba:ec:80:c0:4e:be:a0:86:53:
9b:47:af:2d:d9:41:76:06:d3:00:f9:09:58:14:0f:22:c4:c6:
9b:84:c6:79:69:3a:a7:ce:55:d7:93:c2:f0:0b:b4:98:12:10:
f4:03:56:ea:15:1f:e7:35:a6:f3:f5:8f:5d:7f:3d:10:11:ec:
18:97:6a:f4:bb:45:ed:78:56:84:6a:e1:ac:8f:cf:89:5d:67:
40:b5:da:17:1d:69:5a:52:c5:59:55:2c:dd:20:5c:c7:fa:37:
e0:25:1a:a1:7e:78:4b:e7:e4:80:93:ad:e1:36:6a:6e:fb:d3:
ec:d2:96:66:4e:f4:9d:28:80:42:5b:d8:1a:fb:ca:ce:2c:a6:
a1:16:07:50:e8:7e:cd:43:07:a0:57:6e:81:24:69:2b:00:12:
95:13:d5:26
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICGa4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yNjA4MTkwOTA1NTRaFw0yODA4MTkwOTA1NTRaMBgxFjAU
BgNVBAMTDTZhODU3MWY2LTRlZjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCr6CoS1N6ccMkd6S5nKdwpPpOiK6cKH7QMLnvzK42EebywTXkiHyTiMNsS
kCFifyHgg2b/Ay4hzXk+3sUn4GLzn3yIwPQWZkbPTrVnQtjrYyUtDaWhMoB9nGmW
6ozQhLuGoDpcjn9h6zO9LX6SDdqvuMpOO6xyc5+tM1BMJ72eLeEDGVfD3SG3zXtE
klFs+6LPEk0MVwFU8Oq+auuHDOHfkva/sp6Z72y5OxVGzG1g+dWn7JDdRnXnsYKu
XgbYfAyX+qo6rkzH/SpYK+VxspAmXpm05jaJJ5wGbKBLXESxIZ0zlDwtNDAAIVqt
qCNJmeBiKblnWHUojIdESnAibGfXAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUKkEU
i7uMn59C0xu97xCcfInYb/kwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4LzMwRkYzRkE0OUJBRDExRjFCNTFCRUVEMENFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgbwwDQYJKoZIhvcNAQEL
BQADggEBANJ7BswyIEK2stKmfwzUVhFN0SyukhtiXYp4eV3OcEM8m/WwX1OehEJZ
M6HRcTpsd2dcFKvavnONAiLt8045ehfMkshV44CIKVD5nSYicXgvSBo0tFnFd2RE
cJGo1R1AFqjDNbrsgMBOvqCGU5tHry3ZQXYG0wD5CVgUDyLExpuExnlpOqfOVdeT
wvALtJgSEPQDVuoVH+c1pvP1j11/PRAR7BiXavS7Re14VoRq4ayPz4ldZ0C12hcd
aVpSxVlVLN0gXMf6N+AlGqF+eEvn5ICTreE2am770+zSlmZO9J0ogEJb2Br7ys4s
pqEWB1Dofs1DB6BXboEkaSsAEpUT1SY=
-----END CERTIFICATE-----
Generated at Wed Aug 19 23:37:07 2026 by rpki-client