Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/401649027E9C11F1B89E83C6CE1D38B0.roa
File: 401649027E9C11F1B89E83C6CE1D38B0.roa (raw, json)
Hash identifier: JoR5dn6OAwUDjO/7pXNb03TM0/uDefFPRPC+AREvE6I=
Subject key identifier: 8A:98:6C:3B:D1:5E:A2:CD:E9:96:5A:26:DF:53:E8:2C:B4:30:1E:6E
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 194F
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/401649027E9C11F1B89E83C6CE1D38B0.roa
Signing time: Mon 13 Jul 2026 09:21:38 +0000
ROA not before: Mon 13 Jul 2026 09:21:33 +0000
ROA not after: Thu 13 Jul 2028 09:21:33 +0000
asID: 40244
IP address blocks: 102.129.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 15 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6479 (0x194f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jul 13 09:21:33 2026 GMT
Not After : Jul 13 09:21:33 2028 GMT
Subject: CN=6a54ae22-79f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:70:ef:a8:bf:e3:ef:38:6f:eb:60:03:c9:8c:
70:c9:aa:9e:65:5c:5b:9e:6f:2c:2d:f9:00:85:98:
48:33:67:b1:fd:8b:e0:de:e7:91:23:4b:f2:65:d7:
95:4c:18:e6:ec:2f:56:7c:19:53:c7:ff:1e:f0:e8:
2e:81:ed:e6:1f:77:88:49:ba:71:df:0f:26:30:0c:
23:da:3a:68:d6:98:f1:61:98:bf:00:15:e0:79:b1:
51:8c:86:9e:0b:91:1c:d2:a7:8b:4a:50:d6:bb:f7:
12:8a:61:02:c9:33:ca:f3:e5:dd:ec:c0:c7:db:4e:
ea:b3:8a:0d:27:71:68:ff:c2:68:e7:09:83:66:8c:
ba:89:0a:55:62:44:f6:8b:7f:b4:f8:94:c5:17:f2:
86:38:31:9f:89:9d:15:81:df:e3:f7:3f:56:54:45:
56:61:0f:8e:b4:f9:73:a9:ad:3f:8b:36:52:43:14:
e5:bf:0e:fc:3e:88:81:8f:c0:b5:a3:89:88:69:9c:
a5:42:55:74:51:2e:8d:03:41:cf:4c:c0:e1:09:d6:
a2:02:e3:b1:52:6a:b8:89:57:c7:33:af:79:fc:70:
98:57:85:0a:58:74:a5:f4:0b:85:3c:15:93:77:54:
55:55:58:e5:02:8b:9f:87:63:14:93:cf:d2:3d:71:
58:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:98:6C:3B:D1:5E:A2:CD:E9:96:5A:26:DF:53:E8:2C:B4:30:1E:6E
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/401649027E9C11F1B89E83C6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.189.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:5b:68:d0:e3:1e:fc:5f:42:cb:76:8a:b2:5f:4b:82:b1:32:
64:aa:a8:ec:d0:52:04:6f:fc:70:10:e3:fa:7e:d8:6e:87:85:
59:b6:8c:1e:c1:c1:42:06:43:4c:16:f3:99:31:5e:6c:ae:92:
22:4f:bb:36:e2:bc:56:02:c5:50:71:93:fd:09:9b:dc:a3:31:
71:ab:c4:eb:23:7c:96:88:9d:55:67:cc:fb:d2:0b:ce:fe:25:
65:f6:e4:6d:45:5e:df:1d:9a:fd:dc:66:35:2e:45:b4:96:4b:
18:af:d3:76:b8:7b:c7:34:63:12:24:de:01:bc:03:1e:78:58:
57:55:d1:0e:1c:cc:74:a7:97:55:ca:40:c2:88:c9:bb:2b:eb:
da:33:92:bf:85:e6:8f:7c:1b:35:bd:6a:86:bd:cf:cc:24:44:
f1:59:e4:64:b3:37:d2:48:c6:ea:44:e3:4f:ce:53:41:c1:4f:
dc:a7:3c:55:15:72:01:0d:ce:f0:e1:30:38:70:02:c9:9a:18:
4e:a3:3e:36:c9:aa:73:24:7b:4d:a3:f1:53:9b:cd:b1:e8:f2:
2d:64:ca:1c:93:ec:e4:52:cb:b2:a8:ff:a5:72:9e:15:ce:c5:
4a:76:d2:7a:69:1d:6a:a6:fe:1e:3e:88:79:c2:e7:25:bc:d2:
06:47:95:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 13:47:23 2026 by rpki-client