Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/45FCA3661C4A11F19A6BE2BADAE4EC9C.roa
File: 45FCA3661C4A11F19A6BE2BADAE4EC9C.roa (raw, json)
Hash identifier: D7eClnkMxIo+tmFKAm1YnnVvSfZ3x4NViW651wUff6o=
Subject key identifier: 7B:EE:02:08:1B:5D:F8:EB:A8:FD:43:9F:5A:E4:7C:00:78:84:37:AC
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 17A6
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/45FCA3661C4A11F19A6BE2BADAE4EC9C.roa
Signing time: Tue 10 Mar 2026 06:27:56 +0000
ROA not before: Tue 10 Mar 2026 06:27:50 +0000
ROA not after: Fri 10 Mar 2028 06:27:50 +0000
asID: 29802
IP address blocks: 102.129.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 18 Mar 2026 01:19:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6054 (0x17a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Mar 10 06:27:50 2026 GMT
Not After : Mar 10 06:27:50 2028 GMT
Subject: CN=69afb9ec-a240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:db:29:a1:81:b4:f7:62:02:cf:44:10:aa:6b:
0d:09:42:81:26:24:27:ed:df:c7:98:3b:05:cc:e9:
70:e1:f6:2b:ac:9a:11:5a:f7:a5:82:1c:b5:a7:30:
ae:b7:ba:79:fc:2e:c0:2c:a3:07:95:7e:88:84:cd:
bd:be:42:d9:78:b3:a9:b2:6a:d2:a3:6f:61:db:4d:
d0:99:96:37:92:76:41:20:d2:85:9c:72:e2:a2:ad:
b6:1e:8f:bc:17:8e:74:15:00:51:d1:4a:52:e0:f0:
db:b8:05:63:27:14:48:d3:1f:63:c5:d1:15:46:7f:
b5:08:03:24:e8:1c:33:7d:18:99:86:1f:3c:dc:67:
0b:c6:94:3d:3d:8b:cc:38:39:ff:c4:31:84:9c:f7:
d7:2e:ad:b1:56:df:08:00:ee:64:9d:cf:cc:a1:59:
60:85:e9:6a:e0:1b:8c:0f:13:0d:f4:9b:01:37:2a:
c8:e0:82:c4:e1:23:55:37:87:22:25:38:fd:3c:26:
a0:4e:16:18:61:45:8d:84:79:44:67:06:3c:ee:ce:
c8:a6:ea:43:17:77:40:e4:39:83:3a:bd:77:5d:fa:
26:69:ef:5a:d5:74:7b:c0:23:e7:ee:ee:cf:55:d9:
df:94:53:f9:75:66:28:76:58:89:54:64:27:a9:ab:
a1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:EE:02:08:1B:5D:F8:EB:A8:FD:43:9F:5A:E4:7C:00:78:84:37:AC
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/45FCA3661C4A11F19A6BE2BADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.224.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:d5:21:93:7c:59:90:91:32:a2:fe:4e:6c:21:d9:ce:b4:11:
7e:61:a6:98:57:21:52:ef:99:bd:ec:6f:d5:81:aa:c3:81:d9:
4f:a7:d7:8a:d5:14:73:b9:45:27:1f:7f:2f:ec:68:83:81:82:
31:39:1b:11:e2:13:82:a8:d7:46:f0:6a:19:77:52:62:13:e6:
8c:1f:d9:96:0a:ac:62:83:f7:c4:ce:bb:76:dc:5e:fe:d8:1d:
c1:86:af:48:9a:ec:a4:e6:12:7c:f1:41:7c:91:c3:78:22:1f:
b3:e4:9f:02:bb:87:1c:d2:5f:67:28:2d:bc:f2:0c:6d:05:07:
2a:85:54:29:75:63:10:8a:d9:c9:6f:c6:8c:04:54:c5:63:3d:
14:d0:33:89:1a:3e:4b:f8:e7:67:04:81:24:c0:30:ab:4c:00:
69:bd:8a:c0:e1:c6:00:81:46:89:ee:6a:55:fe:ee:a4:a3:0d:
26:5f:90:8d:db:14:f0:52:c5:89:a5:48:3e:47:b8:83:08:ef:
24:28:f3:79:f1:35:82:be:b0:1f:52:58:a7:bd:01:55:0f:ad:
31:4a:1c:5e:51:6b:42:68:4c:f7:87:92:36:6a:ba:75:1a:3e:
90:f3:0d:40:9a:80:d4:e0:fa:82:a5:15:5b:6b:2c:69:ce:29:
5b:26:67:f0
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICF6YwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yNjAzMTAwNjI3NTBaFw0yODAzMTAwNjI3NTBaMBgxFjAU
BgNVBAMTDTY5YWZiOWVjLWEyNDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDP2ymhgbT3YgLPRBCqaw0JQoEmJCft38eYOwXM6XDh9iusmhFa96WCHLWn
MK63unn8LsAsoweVfoiEzb2+Qtl4s6myatKjb2HbTdCZljeSdkEg0oWccuKirbYe
j7wXjnQVAFHRSlLg8Nu4BWMnFEjTH2PF0RVGf7UIAyToHDN9GJmGHzzcZwvGlD09
i8w4Of/EMYSc99curbFW3wgA7mSdz8yhWWCF6WrgG4wPEw30mwE3KsjggsThI1U3
hyIlOP08JqBOFhhhRY2EeURnBjzuzsim6kMXd0DkOYM6vXdd+iZp71rVdHvAI+fu
7s9V2d+UU/l1Zih2WIlUZCepq6HNAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUe+4C
CBtd+Ouo/UOfWuR8AHiEN6wwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4LzQ1RkNBMzY2MUM0QTExRjE5QTZCRTJCQURBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgeAwDQYJKoZIhvcNAQEL
BQADggEBABzVIZN8WZCRMqL+Tmwh2c60EX5hpphXIVLvmb3sb9WBqsOB2U+n14rV
FHO5RScffy/saIOBgjE5GxHiE4Ko10bwahl3UmIT5owf2ZYKrGKD98TOu3bcXv7Y
HcGGr0ia7KTmEnzxQXyRw3giH7PknwK7hxzSX2coLbzyDG0FByqFVCl1YxCK2clv
xowEVMVjPRTQM4kaPkv452cEgSTAMKtMAGm9isDhxgCBRonualX+7qSjDSZfkI3b
FPBSxYmlSD5HuIMI7yQo83nxNYK+sB9SWKe9AVUPrTFKHF5Ra0JoTPeHkjZqunUa
PpDzDUCagNTg+oKlFVtrLGnOKVsmZ/A=
-----END CERTIFICATE-----
Generated at Tue Mar 17 02:17:12 2026 by rpki-client