Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/73097C9E7A9111F1AE5E3BF4CE1D38B0.roa
File: 73097C9E7A9111F1AE5E3BF4CE1D38B0.roa (raw, json)
Hash identifier: hP5cxkkCNhgpXLM2zF8zaKMXUUWo4jbKrcZ1x4h+KZs=
Subject key identifier: EC:1D:25:F6:32:50:42:C5:38:68:C3:A6:F2:7E:A4:5F:A4:C3:97:F5
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1942
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/73097C9E7A9111F1AE5E3BF4CE1D38B0.roa
Signing time: Wed 08 Jul 2026 05:54:15 +0000
ROA not before: Wed 08 Jul 2026 05:54:10 +0000
ROA not after: Sat 08 Jul 2028 05:54:10 +0000
asID: 29802
IP address blocks: 102.129.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 10 Jul 2026 00:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6466 (0x1942)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jul 8 05:54:10 2026 GMT
Not After : Jul 8 05:54:10 2028 GMT
Subject: CN=6a4de607-1021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3e:c7:12:b6:37:ef:56:f5:a8:0f:31:4d:b4:
b9:b5:10:eb:36:79:0a:bb:d3:58:af:da:56:ea:41:
75:55:e4:e1:de:4e:7f:49:ea:07:77:bc:b2:d9:16:
66:5e:7f:b9:00:85:c8:4e:98:6c:e2:8c:99:ab:4a:
45:42:e0:7b:d7:03:18:3d:51:b5:c6:28:5c:15:18:
ee:4e:04:ee:6e:df:a9:13:56:d2:47:ff:21:5e:0e:
4f:e3:0e:3a:ba:a5:8d:3f:ab:ea:68:6f:46:42:7f:
86:ca:95:13:5d:ca:80:a8:71:15:a0:48:3b:71:c2:
e9:26:ea:74:37:87:9d:2a:c4:0a:f6:f0:03:69:39:
75:08:6d:36:83:e4:ee:6c:da:5b:92:07:cd:6c:5a:
1f:fa:00:a8:08:0c:93:4b:57:19:6c:ea:53:1f:f4:
02:43:4b:bb:cf:6a:10:97:d5:6d:05:79:cb:4c:54:
1b:2e:32:fb:0f:bc:08:47:52:4a:cb:c0:44:fa:8c:
ac:c8:05:33:2f:a1:c4:99:3d:83:72:c7:8d:5f:92:
a2:00:59:8e:b3:06:76:02:05:08:0c:3c:5c:21:7f:
a9:3b:88:87:85:20:b7:07:86:af:d3:5d:ff:87:7e:
be:64:26:76:78:e0:a6:47:4c:28:b5:81:53:37:92:
cb:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:1D:25:F6:32:50:42:C5:38:68:C3:A6:F2:7E:A4:5F:A4:C3:97:F5
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/73097C9E7A9111F1AE5E3BF4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.221.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:16:1b:1b:94:35:aa:05:eb:bb:70:76:e4:55:31:6c:1a:33:
5a:8b:0a:6c:a5:6d:c7:3a:73:b7:63:65:e6:61:73:68:11:c8:
e5:69:18:71:6f:f7:14:bb:d1:09:5e:0e:ae:04:9e:33:f7:69:
0f:ee:7b:46:23:de:c6:17:81:da:a9:6a:50:aa:d7:12:e2:f1:
a5:bc:f8:68:e7:5a:5e:5c:62:0f:a1:60:b4:c6:4b:44:65:cb:
ac:20:e2:6f:bb:ed:0a:2f:ef:ec:c2:9c:a1:f4:32:95:a1:6d:
89:69:09:1c:fb:54:61:f0:da:84:5f:7f:03:fa:ec:9a:74:e8:
ed:7d:d3:2d:5b:5e:f8:66:ff:64:a0:d8:7e:e5:9f:00:b8:61:
78:34:ac:42:aa:6a:ff:c4:cb:1b:d4:d9:86:ea:90:23:64:20:
7f:7b:d2:51:52:a8:84:d8:46:b0:cc:c5:f1:e1:bc:14:5e:8c:
9f:75:40:9b:c3:96:e3:04:97:89:bc:fe:2c:49:c7:2f:e9:0c:
ed:f9:57:76:df:c0:a8:3b:21:09:31:e3:cf:73:72:89:e7:47:
2c:9c:0d:53:c7:e4:82:16:09:6a:36:ed:a7:be:41:9c:b7:0c:
59:18:3a:0f:6d:e3:8b:e8:cc:e8:86:8c:20:8e:68:1f:af:09:
7d:92:78:ee
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICGUIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yNjA3MDgwNTU0MTBaFw0yODA3MDgwNTU0MTBaMBgxFjAU
BgNVBAMTDTZhNGRlNjA3LTEwMjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCcPscStjfvVvWoDzFNtLm1EOs2eQq701iv2lbqQXVV5OHeTn9J6gd3vLLZ
FmZef7kAhchOmGzijJmrSkVC4HvXAxg9UbXGKFwVGO5OBO5u36kTVtJH/yFeDk/j
Djq6pY0/q+pob0ZCf4bKlRNdyoCocRWgSDtxwukm6nQ3h50qxAr28ANpOXUIbTaD
5O5s2luSB81sWh/6AKgIDJNLVxls6lMf9AJDS7vPahCX1W0FectMVBsuMvsPvAhH
UkrLwET6jKzIBTMvocSZPYNyx41fkqIAWY6zBnYCBQgMPFwhf6k7iIeFILcHhq/T
Xf+Hfr5kJnZ44KZHTCi1gVM3ksstAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU7B0l
9jJQQsU4aMOm8n6kX6TDl/UwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4LzczMDk3QzlFN0E5MTExRjFBRTVFM0JGNENFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgd0wDQYJKoZIhvcNAQEL
BQADggEBAB8WGxuUNaoF67twduRVMWwaM1qLCmylbcc6c7djZeZhc2gRyOVpGHFv
9xS70QleDq4EnjP3aQ/ue0Yj3sYXgdqpalCq1xLi8aW8+GjnWl5cYg+hYLTGS0Rl
y6wg4m+77Qov7+zCnKH0MpWhbYlpCRz7VGHw2oRffwP67Jp06O190y1bXvhm/2Sg
2H7lnwC4YXg0rEKqav/EyxvU2YbqkCNkIH970lFSqITYRrDMxfHhvBRejJ91QJvD
luMEl4m8/ixJxy/pDO35V3bfwKg7IQkx489zconnRyycDVPH5IIWCWo27ae+QZy3
DFkYOg9t44vozOiGjCCOaB+vCX2SeO4=
-----END CERTIFICATE-----
Generated at Wed Jul 8 10:35:42 2026 by rpki-client