Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/47597D768FFC11F193CDE2EDCE1D38B0.roa
File: 47597D768FFC11F193CDE2EDCE1D38B0.roa (raw, json)
Hash identifier: cWg+SxExaklg69kJ4NFaeE1yOt41mpjxVCCFEfAyiZ8=
Subject key identifier: 77:6A:10:78:F9:F1:F4:BD:F0:37:81:95:F3:90:CD:C4:48:30:64:FA
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1984
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/47597D768FFC11F193CDE2EDCE1D38B0.roa
Signing time: Tue 04 Aug 2026 12:01:52 +0000
ROA not before: Tue 04 Aug 2026 12:01:48 +0000
ROA not after: Fri 04 Aug 2028 12:01:48 +0000
asID: 174
IP address blocks: 102.129.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Aug 2026 00:07:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6532 (0x1984)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Aug 4 12:01:48 2026 GMT
Not After : Aug 4 12:01:48 2028 GMT
Subject: CN=6a71d4b0-e517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3f:58:b6:1d:b1:37:f1:7d:5a:ca:44:63:92:
b2:61:00:62:c9:f4:61:57:69:e1:10:5d:76:ac:1a:
d3:ed:0d:ef:fd:ec:77:02:8a:09:dd:9e:22:aa:06:
0e:f8:3d:a3:11:46:cd:65:ab:b8:73:ce:53:f2:d6:
dd:45:9a:35:ea:d3:43:58:c6:a9:fe:c0:e5:a5:22:
11:f9:6e:30:1c:ce:b8:8c:3c:d6:77:94:8a:6f:c4:
ad:51:5b:d0:75:1f:aa:67:5f:28:04:34:d3:7f:96:
59:1c:5a:80:93:73:d6:89:75:d2:6b:66:a3:1c:cd:
c0:c4:dc:5f:92:bd:2a:6b:34:5c:76:6d:8f:be:dd:
09:64:3d:50:3d:7b:47:70:23:d4:03:e7:df:42:32:
52:ca:8a:29:95:bd:d7:db:76:51:3b:b4:2d:02:1f:
0c:04:26:25:01:6b:59:da:0b:71:ad:20:28:1b:9f:
ed:93:13:4b:1f:53:7a:d5:d4:b1:93:9f:1a:d5:cd:
f0:88:79:35:46:38:fb:ea:6f:b2:06:07:36:62:1e:
8d:81:94:01:8c:28:71:de:96:e2:3f:10:0d:6a:72:
d4:44:2b:4c:f1:08:ea:16:7c:c8:6a:2a:24:c9:a4:
af:c8:36:d5:d8:c7:fa:e9:9a:30:48:e4:ea:e6:47:
6a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:6A:10:78:F9:F1:F4:BD:F0:37:81:95:F3:90:CD:C4:48:30:64:FA
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/47597D768FFC11F193CDE2EDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.235.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:98:be:54:ee:88:98:17:1a:3a:f5:b5:73:68:99:2c:5d:e8:
8c:16:f1:4e:9e:b7:9d:6e:f2:2f:fa:37:6c:73:68:d6:a5:f5:
a4:e5:ae:5b:ae:e5:ba:f9:0a:0e:04:f5:77:bf:b7:92:54:22:
84:e6:8e:d8:20:54:7a:71:2a:48:d9:7d:c0:01:d6:b3:5a:ff:
c9:dd:25:66:8a:cf:e9:29:22:ce:86:4f:f2:15:db:40:91:61:
d4:64:21:e1:75:14:fd:97:d7:5d:e7:e7:d3:bd:8e:63:8a:d6:
25:9b:ea:5d:d4:d6:b7:c4:b3:75:bc:d6:fb:3a:21:48:5e:7a:
99:92:cb:ff:75:05:d4:8e:25:0f:0a:81:8d:33:e2:3f:ed:92:
55:79:b9:36:78:17:3b:17:3b:7c:46:63:0d:46:08:c9:45:8a:
32:73:ef:fb:0b:89:de:c1:d6:10:7f:3a:db:45:ef:c2:78:64:
b9:48:80:30:ed:54:64:a6:dd:38:c9:0b:d1:25:da:f6:b4:b0:
2e:69:1c:af:de:ea:cf:c0:dd:1d:20:d9:e9:a8:9e:99:e2:a3:
2a:9e:61:20:a0:5f:70:17:af:a1:6d:fe:5a:25:92:34:5d:21:
e1:1d:ed:94:97:68:a6:40:09:13:5b:ec:d5:ee:8e:b3:26:47:
fe:60:a3:d4
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICGYQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yNjA4MDQxMjAxNDhaFw0yODA4MDQxMjAxNDhaMBgxFjAU
BgNVBAMTDTZhNzFkNGIwLWU1MTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC7P1i2HbE38X1aykRjkrJhAGLJ9GFXaeEQXXasGtPtDe/97HcCigndniKq
Bg74PaMRRs1lq7hzzlPy1t1FmjXq00NYxqn+wOWlIhH5bjAczriMPNZ3lIpvxK1R
W9B1H6pnXygENNN/llkcWoCTc9aJddJrZqMczcDE3F+SvSprNFx2bY++3QlkPVA9
e0dwI9QD599CMlLKiimVvdfbdlE7tC0CHwwEJiUBa1naC3GtICgbn+2TE0sfU3rV
1LGTnxrVzfCIeTVGOPvqb7IGBzZiHo2BlAGMKHHeluI/EA1qctREK0zxCOoWfMhq
KiTJpK/INtXYx/rpmjBI5OrmR2r/AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUd2oQ
ePnx9L3wN4GV85DNxEgwZPowHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4LzQ3NTk3RDc2OEZGQzExRjE5M0NERTJFRENFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgeswDQYJKoZIhvcNAQEL
BQADggEBANaYvlTuiJgXGjr1tXNomSxd6IwW8U6et51u8i/6N2xzaNal9aTlrluu
5br5Cg4E9Xe/t5JUIoTmjtggVHpxKkjZfcAB1rNa/8ndJWaKz+kpIs6GT/IV20CR
YdRkIeF1FP2X113n59O9jmOK1iWb6l3U1rfEs3W81vs6IUheepmSy/91BdSOJQ8K
gY0z4j/tklV5uTZ4FzsXO3xGYw1GCMlFijJz7/sLid7B1hB/OttF78J4ZLlIgDDt
VGSm3TjJC9El2va0sC5pHK/e6s/A3R0g2emonpnioyqeYSCgX3AXr6Ft/lolkjRd
IeEd7ZSXaKZACRNb7NXujrMmR/5go9Q=
-----END CERTIFICATE-----
Generated at Tue Aug 4 15:36:30 2026 by rpki-client