Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/368FE4B46EF311F190B702D1CE1D38B0.roa
File: 368FE4B46EF311F190B702D1CE1D38B0.roa (raw, json)
Hash identifier: HyBqkuM8ylLJj6G7496/zUlcFTLiiDunX7SjtDwOoFc=
Subject key identifier: E9:3A:FF:6D:4F:E0:86:BC:3D:7F:A8:99:D8:47:AB:D0:40:B4:15:F3
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1914
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/368FE4B46EF311F190B702D1CE1D38B0.roa
Signing time: Tue 23 Jun 2026 11:03:50 +0000
ROA not before: Tue 23 Jun 2026 11:03:45 +0000
ROA not after: Fri 23 Jun 2028 11:03:45 +0000
asID: 200017
IP address blocks: 102.129.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 11:21:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6420 (0x1914)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jun 23 11:03:45 2026 GMT
Not After : Jun 23 11:03:45 2028 GMT
Subject: CN=6a3a6816-d992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2b:bd:ce:4c:d4:51:13:c1:27:a3:8d:20:ee:
36:b7:f7:d0:50:24:0b:f5:eb:43:24:48:28:74:d0:
46:70:8f:79:fa:35:4d:0f:50:29:3b:9d:6e:4b:af:
7f:78:fa:b5:87:db:9f:ce:b2:21:57:37:52:2c:36:
f0:4f:15:82:1c:79:1c:11:bc:58:cc:cc:6a:1b:72:
1d:de:d8:22:cb:44:80:b5:e2:31:66:f7:35:43:6c:
b8:38:3c:a5:22:ee:0c:53:a2:d2:97:e7:52:08:9f:
8f:ef:9b:6c:8e:ed:cb:96:15:26:4f:42:d5:61:80:
39:d5:ab:83:8f:10:d4:8f:17:ae:6a:3d:7e:20:89:
57:d6:2a:20:a2:a7:a6:db:51:41:99:ce:28:33:38:
1b:17:1b:a7:41:b0:1c:de:e4:85:6b:46:20:f7:41:
8d:37:8b:3a:8b:06:c1:56:3e:12:d7:e3:13:6d:7f:
af:00:40:e7:83:29:07:d4:82:a5:6a:74:bd:13:74:
c6:55:f3:4a:ac:a2:e1:7e:05:8f:ab:7a:f4:77:46:
24:54:c9:76:b0:26:8b:48:6e:18:48:37:43:9d:39:
ee:a5:63:c6:17:dc:41:9c:25:a8:ea:80:ff:ad:18:
30:ca:18:c5:71:eb:01:49:7f:0e:39:ed:eb:9b:96:
48:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:3A:FF:6D:4F:E0:86:BC:3D:7F:A8:99:D8:47:AB:D0:40:B4:15:F3
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/368FE4B46EF311F190B702D1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.210.0/24
Signature Algorithm: sha256WithRSAEncryption
02:c2:30:46:ad:68:da:f8:93:2d:f3:7d:ad:5c:fa:75:c6:5e:
17:48:12:0c:18:03:35:1a:4e:23:e9:23:72:4a:2a:dd:b0:69:
2c:3e:26:8c:58:c5:65:08:6b:7b:02:25:6c:a1:ae:e3:c2:a7:
93:57:4f:44:d4:b7:95:59:01:6e:c2:e7:26:cd:0c:6d:a5:08:
d0:ea:ae:e5:3a:25:8f:a9:96:d7:10:88:a1:be:10:c3:aa:0c:
18:54:ba:68:db:14:f4:2f:2f:f6:7b:7a:31:7e:3b:ee:3e:46:
24:39:22:5e:88:74:6e:b7:a2:be:75:c4:bf:62:38:81:8b:ca:
0d:73:a7:40:c4:3b:73:49:74:10:ac:23:78:df:dd:a9:cc:6b:
bb:93:29:00:6d:ed:e0:9a:b6:38:d3:ec:87:3b:5c:a6:a5:6e:
07:7a:c7:64:2d:1a:d5:dc:67:c1:08:a3:a2:03:47:90:e1:49:
22:78:71:aa:84:2b:83:ab:6e:65:95:a3:4a:ef:8d:6f:7f:71:
91:fc:c8:23:1b:66:08:f0:6a:a2:06:dc:0f:ab:b3:23:54:16:
2c:de:24:85:2c:d2:4d:6c:e9:73:9c:b2:da:8d:29:9e:58:c9:
9c:10:a0:40:ac:77:81:d3:cf:10:8b:13:11:0d:97:6b:b6:39:
5e:b6:6b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 01:07:12 2026 by rpki-client