Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/513F8C5059BE11F1961DE5A7CE1D38B0.roa
File: 513F8C5059BE11F1961DE5A7CE1D38B0.roa (raw, json)
Hash identifier: wnwlHGFc/xjOTEoqWrQ1wh0bctZMaKA1qFDGQIffvzw=
Subject key identifier: A3:00:E0:92:59:DA:3D:F3:47:EA:70:35:80:56:25:30:8B:12:04:CA
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 18B3
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/513F8C5059BE11F1961DE5A7CE1D38B0.roa
Signing time: Wed 27 May 2026 11:22:17 +0000
ROA not before: Wed 27 May 2026 11:22:12 +0000
ROA not after: Sat 27 May 2028 11:22:12 +0000
asID: 214266
IP address blocks: 102.129.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 29 May 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6323 (0x18b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: May 27 11:22:12 2026 GMT
Not After : May 27 11:22:12 2028 GMT
Subject: CN=6a16d3e9-5577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b2:bb:bf:ba:fb:c6:64:8f:40:03:00:78:c1:
79:4a:e0:c7:cc:05:f5:26:1a:d9:c9:a9:90:05:85:
80:7b:13:08:d9:ee:42:fc:f6:0b:ef:26:f1:ea:0f:
1a:06:7b:16:db:d8:c7:1f:a6:fe:e8:20:2e:9e:f0:
5f:9f:97:73:3d:b6:ca:c3:65:f8:9a:a5:64:c3:2c:
24:9e:eb:ab:85:d3:8a:01:f3:d3:52:42:a8:e5:f3:
a5:02:7e:3e:ef:2b:bc:a2:32:40:5b:5b:85:9a:b9:
cb:f1:14:a1:04:b0:72:5d:3d:f7:04:fa:42:10:9e:
8f:28:61:a3:d4:c0:a6:ae:b8:d6:bd:9f:69:b3:d2:
dc:1a:cd:5f:ef:10:44:fc:72:fa:43:39:7b:3f:30:
b1:47:a0:78:f7:2e:70:d5:ee:c4:39:c6:50:67:6f:
80:25:3e:27:b6:df:9c:87:6b:98:9e:da:02:78:44:
6a:39:6f:51:76:37:48:1c:03:0d:a9:c0:2f:77:c3:
54:52:89:2b:86:8f:d8:e7:94:ab:f0:2a:ec:97:a6:
d2:99:f6:b0:17:75:1a:13:dc:6a:99:d8:3f:43:14:
b8:19:65:25:68:2d:cc:74:e0:a9:04:98:bb:6c:14:
d8:af:2f:39:12:7f:5a:09:4d:37:8d:25:1c:e9:87:
3b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:00:E0:92:59:DA:3D:F3:47:EA:70:35:80:56:25:30:8B:12:04:CA
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/513F8C5059BE11F1961DE5A7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.135.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:0f:16:d4:af:1c:c8:20:f9:1c:d7:6d:13:5d:7f:4d:30:0d:
83:59:1d:67:08:fe:ae:95:8a:49:4a:41:57:f5:4d:28:80:3d:
98:1f:97:a1:61:8a:43:4b:f5:76:e0:b0:8b:3a:45:76:2f:d2:
bf:55:2e:6d:02:59:ca:16:0a:5b:bb:e4:23:b5:d8:46:1c:c9:
63:d9:f5:79:44:07:f9:cd:8d:b5:e3:2a:29:4f:e1:5a:cd:cd:
f8:28:81:0f:a9:10:ae:ab:56:fc:13:30:0d:36:30:29:54:31:
62:f9:c8:03:60:2a:02:a8:20:d2:59:d4:0c:99:11:23:af:f3:
c5:0b:e9:8b:dd:7d:9c:29:a5:b5:4e:52:80:d5:3c:1f:39:36:
06:ee:50:14:f5:9e:2b:ee:76:37:6e:2b:87:02:de:32:86:f5:
bd:65:69:87:a3:0e:f3:4e:81:62:ac:69:50:c8:88:14:58:2b:
6a:e7:e0:41:78:6e:11:cb:4f:af:31:a3:ac:49:9a:1b:32:c1:
4e:3e:52:5e:03:46:38:0b:5f:75:d7:2d:6e:77:7a:8a:9d:6d:
60:18:a1:89:84:b0:c0:d0:08:9b:52:ef:53:4a:2b:1a:00:5d:
eb:9a:74:53:d7:bf:77:6d:89:00:31:5d:73:b6:6d:d7:15:1d:
68:10:07:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 27 17:19:09 2026 by rpki-client