Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/44F4EDA09BBD11F1913709B1CE1D38B0.roa
File: 44F4EDA09BBD11F1913709B1CE1D38B0.roa (raw, json)
Hash identifier: dgC1ObmgfiS8BK5JKbGlB5N/oybgG5rUbY0sI9n5u0E=
Subject key identifier: 5E:02:F9:00:E4:4C:38:25:59:8E:BF:0E:DE:57:DB:A3:87:A3:14:E5
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 19B3
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/44F4EDA09BBD11F1913709B1CE1D38B0.roa
Signing time: Wed 19 Aug 2026 11:01:04 +0000
ROA not before: Wed 19 Aug 2026 11:00:59 +0000
ROA not after: Sat 19 Aug 2028 11:00:59 +0000
asID: 834
IP address blocks: 102.129.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 21 Aug 2026 09:44:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6579 (0x19b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Aug 19 11:00:59 2026 GMT
Not After : Aug 19 11:00:59 2028 GMT
Subject: CN=6a858cef-3dc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0c:7c:85:e9:b2:2f:2e:f0:4b:f9:d8:b6:99:
80:11:7f:af:12:8c:cb:47:b2:31:44:c7:20:96:e4:
fc:ad:a0:f6:9b:21:1c:ac:31:97:41:74:84:87:a3:
21:b7:fc:67:42:b7:6e:5f:0a:b9:60:c1:ee:63:cb:
51:fd:64:6d:57:94:b0:80:9d:40:85:9c:96:c9:d4:
3e:dc:0e:a4:87:59:c2:a9:6b:6a:3b:e6:ce:b9:11:
3e:49:97:38:23:b0:d6:45:40:90:4a:a6:e1:ce:97:
2f:40:69:98:29:02:c2:52:94:bd:4d:35:7a:42:4f:
cc:de:84:be:fb:a9:a6:41:65:71:56:17:71:17:68:
6a:53:bb:d3:86:b9:b0:af:5a:8e:44:e7:f4:78:c2:
9e:c2:d2:dd:b4:7c:f8:cb:cd:02:8e:13:44:36:72:
7a:9d:38:57:31:e5:8e:9c:19:7e:47:df:13:75:bb:
b5:1b:b5:2c:0b:ac:ce:66:7f:6e:da:68:c1:46:70:
d8:b7:0c:86:13:8c:bc:b5:70:43:9d:4e:1e:2d:82:
a7:63:c0:77:17:40:0b:ed:fc:4a:26:bc:69:c8:55:
d8:ee:f5:8d:eb:72:17:73:11:ee:c0:ef:59:7c:e3:
43:63:db:7c:37:6e:f8:96:31:07:26:b7:6b:85:fc:
94:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:02:F9:00:E4:4C:38:25:59:8E:BF:0E:DE:57:DB:A3:87:A3:14:E5
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/44F4EDA09BBD11F1913709B1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.194.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:28:ea:68:43:55:75:af:e4:66:26:ae:61:50:c5:3f:bf:dd:
92:15:9a:20:40:d0:62:cf:55:1d:ce:98:7d:ee:71:e2:c3:45:
05:44:4c:47:22:20:d5:bb:2c:e1:a7:67:81:14:61:cf:cb:94:
13:ee:54:38:1d:eb:e0:48:6c:5f:7f:0d:bd:de:2d:e5:b4:1f:
10:9c:5f:8b:c0:b6:bb:1d:33:62:b8:3e:8e:23:60:22:95:87:
5a:d3:b6:96:18:1c:bd:83:97:b2:d8:d8:18:a3:99:a7:2f:60:
ab:48:69:c1:81:d9:da:53:1c:df:ae:2c:70:19:5c:f1:09:ce:
53:3b:23:3c:d7:4d:76:ca:64:77:55:7d:ba:8f:60:8c:25:fe:
d6:5f:b7:69:72:43:19:bf:66:ea:99:33:e2:1d:6e:bd:52:ea:
6f:f9:a0:22:77:d5:37:d1:89:ae:ce:ba:2f:5c:76:d1:53:c0:
a0:b4:2e:9a:29:db:02:69:ee:02:95:e9:fc:5b:f7:4c:86:d2:
83:e7:48:2b:6c:2a:0a:0a:3a:55:4f:7f:27:16:36:65:8e:8a:
e8:21:ac:1e:53:d1:65:37:72:b6:ef:df:1a:b8:dc:8c:6d:00:
24:b5:35:0c:bd:22:71:df:06:b6:64:46:80:97:54:9a:f9:d0:
ed:06:61:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 23:38:08 2026 by rpki-client