Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/61B607A667B711F1A8CAEB15CF1D38B0.roa
File: 61B607A667B711F1A8CAEB15CF1D38B0.roa (raw, json)
Hash identifier: FrBrTrenaaKQHNYun5z//wdl1Ztqvesg2ckt05ESSp0=
Subject key identifier: BB:01:FE:85:5A:8F:98:59:4F:D7:1B:91:19:1D:A8:52:68:F1:AC:49
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 18E1
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/61B607A667B711F1A8CAEB15CF1D38B0.roa
Signing time: Sun 14 Jun 2026 06:07:54 +0000
ROA not before: Sun 14 Jun 2026 06:07:50 +0000
ROA not after: Wed 14 Jun 2028 06:07:50 +0000
asID: 262287
IP address blocks: 102.129.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 16 Jun 2026 00:07:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6369 (0x18e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jun 14 06:07:50 2026 GMT
Not After : Jun 14 06:07:50 2028 GMT
Subject: CN=6a2e453a-5c17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6b:b1:06:a7:f3:92:61:0a:ff:8f:68:6a:0e:
76:f9:4e:07:ec:37:7d:2e:1d:50:87:42:74:74:43:
d6:da:14:36:8d:a2:3c:e0:28:51:cd:f9:65:2a:ab:
fc:aa:19:7d:e9:50:d7:3d:72:b7:42:dd:9c:9d:74:
52:c2:8c:3a:a3:45:b4:8e:d4:23:28:4c:2a:f7:c6:
f0:68:d4:22:b5:0e:c8:d8:8a:89:df:d1:ac:cc:f1:
8c:e2:0d:9e:f2:5f:d7:a6:cf:bc:5e:de:5d:32:af:
e4:b7:87:16:de:51:f3:6e:dd:85:08:2f:93:13:57:
80:d4:7d:fa:ba:7e:c9:c5:a4:24:03:70:5d:97:36:
41:57:d1:d3:7b:43:4c:02:fe:72:a5:71:55:3f:7f:
8f:09:45:bb:e0:36:52:18:d6:94:ed:75:26:59:3b:
60:87:17:9f:08:3f:bf:96:db:35:3f:0e:b6:9b:90:
0e:72:c5:e1:26:f4:2a:79:42:50:d8:6c:f1:37:a5:
c3:0e:9c:78:26:e0:b0:8a:0c:cc:1e:9d:f4:7e:5f:
42:56:30:bd:a8:8e:43:e3:00:53:45:a9:3b:fa:5c:
83:a3:ba:88:f6:2b:b8:8f:be:eb:37:0d:3e:4b:60:
d3:46:04:bc:13:99:42:dc:17:b8:bf:bf:f0:ad:82:
a4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:01:FE:85:5A:8F:98:59:4F:D7:1B:91:19:1D:A8:52:68:F1:AC:49
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/61B607A667B711F1A8CAEB15CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.192.0/24
Signature Algorithm: sha256WithRSAEncryption
34:2b:52:1d:e5:c9:1f:e3:6f:96:0e:9b:90:2e:ac:f8:5c:0a:
6f:41:7e:03:6f:62:ad:99:87:9c:51:a9:31:b1:c7:26:33:aa:
25:96:cc:8a:aa:82:4c:c7:6d:f8:04:2e:b5:7e:9e:4c:81:da:
a2:6d:a9:79:20:c4:db:cc:04:24:eb:72:97:2f:e8:43:93:18:
60:30:1d:07:9c:80:30:59:d0:09:80:09:c0:e8:9d:26:c0:37:
ae:d2:4d:86:3e:55:98:66:3d:31:90:f7:d6:67:63:02:cf:cd:
ae:b1:a5:42:81:61:f0:65:ab:ac:a2:9f:72:5b:78:4a:62:a4:
c6:90:21:09:bb:4c:2c:40:31:59:5a:b2:1e:b5:0a:b2:ce:9f:
dd:59:44:7a:30:14:54:0f:2b:80:c9:9e:b0:81:db:dc:22:f3:
b1:fd:db:80:ce:0e:3a:71:88:19:a2:38:84:04:fb:4f:23:dc:
63:4d:a2:0a:67:ec:77:e6:59:a2:69:a3:df:9d:b7:3b:3f:dd:
3c:c4:66:c5:f3:5e:99:97:e2:b4:c1:85:25:b1:49:60:8b:b0:
43:f9:8f:c9:52:11:7e:c6:1b:cd:88:43:f6:bd:b2:29:19:32:
c4:4a:4e:c9:0c:bf:de:91:71:96:d1:44:d6:88:e3:e5:ab:8d:
e1:eb:51:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 16:00:41 2026 by rpki-client