Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/57AC905C8C9E11F198540BFBCE1D38B0.roa
File: 57AC905C8C9E11F198540BFBCE1D38B0.roa (raw, json)
Hash identifier: IYy/x/Y4dovfEzajb9hqe179pYqvU2MKWMMq3lWkIaU=
Subject key identifier: 8F:A8:32:F3:5B:76:17:2B:F8:61:16:2B:B9:7A:7C:2C:24:84:45:5B
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1971
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/57AC905C8C9E11F198540BFBCE1D38B0.roa
Signing time: Fri 31 Jul 2026 05:11:53 +0000
ROA not before: Fri 31 Jul 2026 05:11:49 +0000
ROA not after: Mon 31 Jul 2028 05:11:49 +0000
asID: 219105
IP address blocks: 102.129.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 02 Aug 2026 00:07:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6513 (0x1971)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jul 31 05:11:49 2026 GMT
Not After : Jul 31 05:11:49 2028 GMT
Subject: CN=6a6c2e99-388d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:4f:f2:20:2b:29:ae:39:a7:8e:df:ab:a3:8e:
41:a9:7f:c1:b6:52:29:25:61:44:e2:75:14:e7:7a:
c8:1d:5a:29:1c:10:82:92:29:0d:6d:76:bd:4c:2a:
44:6b:94:c6:e7:24:1e:2c:7b:8b:bc:f5:cf:de:70:
dd:01:ca:90:c1:4a:4c:28:a9:26:52:8f:0e:2d:fb:
0e:ef:30:79:d4:93:54:94:0c:ba:73:1a:63:e8:ac:
05:68:6c:93:47:0d:dc:e7:e0:ef:88:24:73:ba:8c:
7e:6c:aa:5d:28:fa:12:eb:1b:12:1f:c2:97:37:78:
f7:2c:46:16:c1:5e:2a:7b:ea:a6:0e:28:64:c7:e1:
d3:76:fa:ec:ca:68:9e:3d:84:fc:1d:a7:28:9a:77:
a1:31:f6:de:6c:43:fd:4b:1a:f8:4b:c7:d2:12:6a:
50:7d:3a:74:27:6d:a3:3c:7b:25:fb:72:99:98:f5:
25:0e:c8:c6:95:31:09:10:a0:d6:f1:0f:34:21:6b:
96:59:3a:6e:96:2c:68:cb:0d:8c:5f:ef:a4:86:e6:
f8:09:f1:e1:c7:b2:60:04:14:d9:e6:11:b3:20:54:
0c:35:ea:cc:ed:5b:ae:6b:39:6b:e0:56:38:00:84:
31:34:94:5f:26:2b:93:22:f7:90:80:50:fa:1b:1b:
09:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:A8:32:F3:5B:76:17:2B:F8:61:16:2B:B9:7A:7C:2C:24:84:45:5B
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/57AC905C8C9E11F198540BFBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.183.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:9c:81:b7:6c:aa:85:25:8c:1d:29:70:84:e1:7d:0f:63:aa:
ce:af:aa:5b:51:e8:82:ca:10:5f:d8:ae:cd:31:5a:9e:8a:35:
f7:c4:24:fc:02:e7:dc:5f:97:22:28:f2:85:a5:2d:31:ea:d8:
56:f2:e6:6a:d7:d1:9e:1f:28:a4:4e:45:b6:15:36:38:50:49:
89:1f:33:75:2c:d6:96:94:d1:2d:f9:7b:42:dc:74:3a:67:02:
b5:46:5e:4c:1b:5a:1c:ed:b0:01:31:f9:88:26:b0:cd:47:74:
6b:c4:5c:c7:62:03:d8:ce:f3:fc:d6:5d:6d:68:61:b9:2c:c1:
87:e8:48:43:6c:40:59:f5:f7:bf:9c:29:43:d6:c6:f4:76:27:
db:54:74:02:07:09:ce:dd:45:0d:b8:39:be:6d:dd:aa:4b:88:
9c:58:da:d3:94:5c:3a:8d:e4:1e:d9:4d:a0:76:df:b7:71:5a:
3e:ac:d1:54:59:85:cd:0e:6b:a6:36:a3:a5:e3:89:58:45:89:
4d:17:06:ef:aa:e4:2b:8a:3d:58:ea:71:d5:17:8f:35:15:37:
c6:39:f5:a2:90:62:05:f3:ce:cc:2e:2c:aa:93:fc:93:55:38:
52:e5:bb:83:84:4b:99:b6:05:ca:f0:de:a6:88:8a:4d:bf:49:
e2:7f:ba:52
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICGXEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yNjA3MzEwNTExNDlaFw0yODA3MzEwNTExNDlaMBgxFjAU
BgNVBAMTDTZhNmMyZTk5LTM4OGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDeT/IgKymuOaeO36ujjkGpf8G2UiklYUTidRTnesgdWikcEIKSKQ1tdr1M
KkRrlMbnJB4se4u89c/ecN0BypDBSkwoqSZSjw4t+w7vMHnUk1SUDLpzGmPorAVo
bJNHDdzn4O+IJHO6jH5sql0o+hLrGxIfwpc3ePcsRhbBXip76qYOKGTH4dN2+uzK
aJ49hPwdpyiad6Ex9t5sQ/1LGvhLx9ISalB9OnQnbaM8eyX7cpmY9SUOyMaVMQkQ
oNbxDzQha5ZZOm6WLGjLDYxf76SG5vgJ8eHHsmAEFNnmEbMgVAw16sztW65rOWvg
VjgAhDE0lF8mK5Mi95CAUPobGwnxAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUj6gy
81t2Fyv4YRYruXp8LCSERVswHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4LzU3QUM5MDVDOEM5RTExRjE5ODU0MEJGQkNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgbcwDQYJKoZIhvcNAQEL
BQADggEBAMScgbdsqoUljB0pcIThfQ9jqs6vqltR6ILKEF/Yrs0xWp6KNffEJPwC
59xflyIo8oWlLTHq2Fby5mrX0Z4fKKRORbYVNjhQSYkfM3Us1paU0S35e0LcdDpn
ArVGXkwbWhztsAEx+YgmsM1HdGvEXMdiA9jO8/zWXW1oYbkswYfoSENsQFn197+c
KUPWxvR2J9tUdAIHCc7dRQ24Ob5t3apLiJxY2tOUXDqN5B7ZTaB237dxWj6s0VRZ
hc0Oa6Y2o6XjiVhFiU0XBu+q5CuKPVjqcdUXjzUVN8Y59aKQYgXzzswuLKqT/JNV
OFLlu4OES5m2Bcrw3qaIik2/SeJ/ulI=
-----END CERTIFICATE-----
Generated at Fri Jul 31 11:51:43 2026 by rpki-client