Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/423D05284F9811F18C73E0DCCE1D38B0.roa
File: 423D05284F9811F18C73E0DCCE1D38B0.roa (raw, json)
Hash identifier: PW+rbCr4V+dj27DK91DcBx677j2q4AyiWRdkvN6z2Jc=
Subject key identifier: 58:27:C3:24:CC:4D:48:45:9F:D1:58:7A:DC:56:D8:E4:2A:09:67:D1
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1869
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/423D05284F9811F18C73E0DCCE1D38B0.roa
Signing time: Thu 14 May 2026 13:24:39 +0000
ROA not before: Thu 14 May 2026 13:24:35 +0000
ROA not after: Sun 14 May 2028 13:24:35 +0000
asID: 9009
IP address blocks: 102.129.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 16 May 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6249 (0x1869)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: May 14 13:24:35 2026 GMT
Not After : May 14 13:24:35 2028 GMT
Subject: CN=6a05cd17-7895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5c:3a:b7:12:7c:dd:a6:e4:a7:5f:e0:81:49:
c1:ce:d3:cb:c8:42:bd:f5:5c:18:1b:8b:9a:88:04:
4a:5d:61:fb:37:9c:46:cf:08:97:77:20:3d:21:0f:
b9:2d:fd:85:12:3a:b5:8d:41:71:9e:a8:48:28:a1:
c8:22:39:10:da:fa:19:27:6f:d5:8d:e5:6e:cd:d6:
90:e4:b0:a1:0b:25:7c:eb:80:67:40:5f:58:3c:ac:
8d:2e:e9:53:8f:b4:7b:13:a5:46:0a:34:57:aa:4d:
c4:a8:66:c9:e9:e3:74:35:d1:2a:fe:79:23:ac:57:
29:b5:87:1b:36:51:a5:40:25:13:60:85:5b:a6:b2:
f9:36:37:87:71:7d:d8:f6:54:4b:d8:87:31:c4:92:
54:e7:b3:3b:47:de:f0:8b:11:92:cd:d7:12:32:54:
e1:a1:59:9e:b7:68:79:b8:a7:0b:bb:8f:8a:22:98:
79:9b:eb:2c:74:9b:76:08:51:51:d0:bb:28:5b:0f:
10:4e:0f:de:0b:45:32:3c:71:af:55:36:4b:13:33:
f1:0c:91:80:8b:99:3f:86:14:07:b6:fe:c8:99:c5:
68:29:80:92:55:98:82:6d:07:a3:7c:ec:41:90:0c:
cd:e5:cd:64:d7:e8:b8:cd:70:05:63:9d:38:06:1e:
c7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:27:C3:24:CC:4D:48:45:9F:D1:58:7A:DC:56:D8:E4:2A:09:67:D1
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/423D05284F9811F18C73E0DCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.205.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:f4:31:b7:00:5c:a7:57:1c:d5:1a:0c:d1:13:b8:d1:1b:34:
fb:24:f0:5c:21:9c:cc:4b:2f:42:b0:96:12:59:1e:4f:bd:12:
7c:32:fc:94:fa:06:cd:13:48:c8:40:1e:65:14:f5:0f:a0:b7:
81:f3:49:1a:8e:5a:4f:d5:3e:fd:c4:09:ea:82:be:de:59:94:
10:09:2a:cd:46:f8:45:17:68:ef:8e:6e:36:c3:3b:f0:cc:b3:
d6:25:a5:90:42:6b:ed:0d:ab:c6:7d:2b:b1:f2:96:a4:0f:49:
04:99:5d:31:fb:e3:d5:5f:a6:3b:16:fe:4b:b7:99:5a:99:71:
ce:8d:1c:a6:49:47:fa:4e:26:a1:9c:fe:68:b9:f3:b9:35:89:
d6:75:9a:ec:85:45:15:5d:f3:48:31:a5:a8:af:3a:c1:88:f3:
1e:a4:20:87:d4:a5:68:d4:ed:6d:9a:30:33:e1:80:55:ae:cc:
5e:02:10:ec:1c:90:ac:1f:45:7f:e2:fd:a7:27:fb:75:a4:af:
a1:d4:44:09:bc:09:3a:6a:e0:dc:2d:ca:a8:e4:43:b4:a9:bd:
2b:f2:82:fc:59:17:0e:c8:34:28:d4:93:92:83:32:e4:31:88:
d2:2b:a2:2b:70:47:bd:19:24:b9:67:a7:84:76:97:e8:de:d8:
ed:19:47:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 14 19:20:41 2026 by rpki-client