Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/38F08AEE67B711F1ACC31E14CF1D38B0.roa
File: 38F08AEE67B711F1ACC31E14CF1D38B0.roa (raw, json)
Hash identifier: WULePX+PIr3LAnu/AXkqIB25jx6TPL4rxogHnTdQ/pw=
Subject key identifier: A0:D1:29:1F:F0:93:0F:98:96:7A:2B:8A:9A:46:E3:9E:CE:A9:03:9C
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 18DF
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/38F08AEE67B711F1ACC31E14CF1D38B0.roa
Signing time: Sun 14 Jun 2026 06:06:46 +0000
ROA not before: Sun 14 Jun 2026 06:06:41 +0000
ROA not after: Wed 14 Jun 2028 06:06:41 +0000
asID: 212238
IP address blocks: 102.129.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 16 Jun 2026 00:07:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6367 (0x18df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jun 14 06:06:41 2026 GMT
Not After : Jun 14 06:06:41 2028 GMT
Subject: CN=6a2e44f6-b84a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:53:16:37:d1:5e:89:a1:a5:4c:bc:f4:93:12:
1d:ac:2b:3d:76:25:b2:21:4d:2d:d1:eb:b6:22:05:
5c:5c:42:20:e5:9c:65:46:a9:1e:ee:9b:88:24:d0:
54:b6:8b:e8:83:04:fa:07:2b:57:bc:7d:5e:9c:cf:
8c:cc:ce:a0:61:6f:b5:ae:9b:51:fe:6f:b9:09:33:
11:a6:d1:9d:5e:bc:2c:3e:ce:08:20:63:ad:c3:62:
51:a2:27:6a:8b:b9:39:dd:71:ae:63:0b:07:65:15:
4d:a8:a2:e6:ca:2e:87:91:d6:a7:c6:cb:f2:f5:bf:
97:52:07:5c:cf:67:ca:cb:e7:f2:ac:0a:b5:fc:13:
c1:ca:ac:cd:40:09:4e:9a:07:8a:9f:ab:ff:13:75:
67:96:a4:11:52:0a:37:21:5d:2a:5d:ad:8d:03:91:
d0:e3:a2:80:ce:98:be:fb:60:ce:df:50:af:84:28:
ea:4d:87:04:e0:07:2c:22:9f:39:e0:0d:6c:ec:f7:
a4:a8:51:cc:31:ea:44:04:08:2b:16:20:59:27:a8:
c9:b3:11:75:4b:e9:6f:78:51:0c:bd:ff:91:18:40:
69:d7:67:e0:6a:6d:e8:ed:9a:99:53:41:7a:2c:9c:
82:e6:38:45:a8:b6:9c:29:a2:24:28:ac:88:2e:45:
47:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:D1:29:1F:F0:93:0F:98:96:7A:2B:8A:9A:46:E3:9E:CE:A9:03:9C
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/38F08AEE67B711F1ACC31E14CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.158.0/24
Signature Algorithm: sha256WithRSAEncryption
50:aa:76:c7:44:a3:77:1d:50:21:13:54:15:3f:56:e3:74:ce:
69:45:ea:17:d8:8b:76:22:57:55:fb:d4:88:50:da:69:7c:13:
24:fe:e5:46:72:97:09:27:aa:2a:af:51:3b:15:da:55:14:39:
79:59:09:5f:00:61:6b:52:15:b1:82:79:70:ea:d6:7b:b9:ee:
52:35:66:79:20:5d:58:3b:04:26:ad:4e:b0:b8:d6:93:c7:9f:
94:af:a3:a4:a8:c9:dd:de:d6:ca:82:78:32:a9:39:a6:74:f2:
1b:c3:a1:bb:de:73:53:dd:6a:71:61:fd:a5:c0:a6:84:41:37:
02:47:69:00:9d:ec:11:fd:af:71:c9:f0:35:d5:8b:80:fb:c4:
c0:54:1b:0c:11:04:22:03:75:44:b1:e3:a2:f7:67:e2:2d:04:
9a:53:cb:54:16:b9:ec:98:67:36:ae:cb:1e:7d:f2:b0:7e:33:
c4:fa:92:36:9f:3e:fc:c1:94:bb:ef:32:e6:cf:30:5a:81:58:
52:f3:ea:db:24:df:8d:ac:a1:14:de:e5:c7:21:6e:23:6a:a9:
5d:6a:42:36:67:47:fa:59:88:2a:2c:d6:a9:2b:dc:da:38:87:
02:9b:4b:1d:73:6b:cd:c8:a0:d8:fd:ea:1b:94:b2:bf:48:de:
bb:91:fb:21
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICGN8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yNjA2MTQwNjA2NDFaFw0yODA2MTQwNjA2NDFaMBgxFjAU
BgNVBAMTDTZhMmU0NGY2LWI4NGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDzUxY30V6JoaVMvPSTEh2sKz12JbIhTS3R67YiBVxcQiDlnGVGqR7um4gk
0FS2i+iDBPoHK1e8fV6cz4zMzqBhb7Wum1H+b7kJMxGm0Z1evCw+zgggY63DYlGi
J2qLuTndca5jCwdlFU2ooubKLoeR1qfGy/L1v5dSB1zPZ8rL5/KsCrX8E8HKrM1A
CU6aB4qfq/8TdWeWpBFSCjchXSpdrY0DkdDjooDOmL77YM7fUK+EKOpNhwTgBywi
nzngDWzs96SoUcwx6kQECCsWIFknqMmzEXVL6W94UQy9/5EYQGnXZ+BqbejtmplT
QXosnILmOEWotpwpoiQorIguRUe3AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUoNEp
H/CTD5iWeiuKmkbjns6pA5wwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4LzM4RjA4QUVFNjdCNzExRjFBQ0MzMUUxNENGMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgZ4wDQYJKoZIhvcNAQEL
BQADggEBAFCqdsdEo3cdUCETVBU/VuN0zmlF6hfYi3YiV1X71IhQ2ml8EyT+5UZy
lwknqiqvUTsV2lUUOXlZCV8AYWtSFbGCeXDq1nu57lI1ZnkgXVg7BCatTrC41pPH
n5Svo6Soyd3e1sqCeDKpOaZ08hvDobvec1PdanFh/aXApoRBNwJHaQCd7BH9r3HJ
8DXVi4D7xMBUGwwRBCIDdUSx46L3Z+ItBJpTy1QWueyYZzauyx598rB+M8T6kjaf
PvzBlLvvMubPMFqBWFLz6tsk342soRTe5cchbiNqqV1qQjZnR/pZiCos1qkr3No4
hwKbSx1za83IoNj96huUsr9I3ruR+yE=
-----END CERTIFICATE-----
Generated at Sun Jun 14 16:00:15 2026 by rpki-client