Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/7653CF308D7E11F1A44E18D2CE1D38B0.roa
File: 7653CF308D7E11F1A44E18D2CE1D38B0.roa (raw, json)
Hash identifier: zDaCD2NvrLzNNh9fkshjKD2m1ZqjFUehS/CJ0zjlpxY=
Subject key identifier: A4:6A:5F:08:DE:70:60:18:36:19:5C:22:F3:78:3B:0D:82:96:58:68
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1975
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/7653CF308D7E11F1A44E18D2CE1D38B0.roa
Signing time: Sat 01 Aug 2026 07:56:12 +0000
ROA not before: Sat 01 Aug 2026 07:56:08 +0000
ROA not after: Tue 01 Aug 2028 07:56:08 +0000
asID: 834
IP address blocks: 102.129.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 03 Aug 2026 00:07:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6517 (0x1975)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Aug 1 07:56:08 2026 GMT
Not After : Aug 1 07:56:08 2028 GMT
Subject: CN=6a6da69c-03cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:43:3e:ac:e5:17:7b:fa:a5:2f:6a:15:70:33:
a1:ab:ba:e8:72:01:79:00:ea:a6:d6:a8:bb:ff:a9:
93:ac:31:a8:50:79:8a:ca:c7:87:d9:27:ed:5c:a7:
c3:bf:63:4a:1b:9e:71:9e:a8:ba:75:db:91:7d:86:
b7:8b:b5:7f:7c:b5:bc:d4:d6:68:d5:7f:11:9c:fa:
89:a0:ea:ec:d9:24:41:25:e4:38:2f:ff:86:d2:a2:
12:e1:43:b3:42:5c:3a:2f:31:33:fd:06:9c:74:c4:
f3:ba:76:85:a1:17:1e:da:f3:6e:a6:24:c0:7d:d5:
c9:09:3b:d9:86:0c:73:41:35:89:df:24:6e:82:36:
50:19:9e:3a:1a:2e:70:a0:19:fa:a5:66:7a:dd:9f:
20:af:7f:57:89:37:56:10:12:77:2f:81:02:c6:0d:
b8:a2:0c:0d:7d:c6:7a:24:9b:83:6d:0f:32:b7:f9:
eb:85:07:0b:d4:e4:7e:e5:e5:42:10:71:4c:56:34:
31:3d:34:99:9a:14:c7:bf:8b:af:26:bc:21:6d:62:
ad:84:77:3a:5c:ed:05:ed:43:1b:4a:20:71:f4:f8:
4f:68:f1:15:97:c2:45:b4:fe:96:37:e1:99:92:f3:
58:0d:46:d3:f4:7a:f8:ad:05:0b:d3:87:55:ba:fb:
0b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:6A:5F:08:DE:70:60:18:36:19:5C:22:F3:78:3B:0D:82:96:58:68
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/7653CF308D7E11F1A44E18D2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.232.0/24
Signature Algorithm: sha256WithRSAEncryption
02:d1:1b:5f:b7:aa:20:0e:8d:83:2e:37:5d:e8:47:17:54:4c:
87:79:76:28:4f:9a:c5:a2:97:50:fb:b5:31:fc:a9:47:38:92:
b1:82:10:38:38:6a:bd:6c:91:9d:2e:4d:94:48:95:5c:52:5c:
71:d1:68:52:42:3c:a3:27:c9:2b:88:34:8d:aa:7c:f2:b7:3d:
37:f6:4b:2e:fe:27:61:93:39:46:b0:b1:b4:a2:31:38:f7:1a:
9b:df:c1:b2:66:74:76:8f:c3:e2:d3:f4:65:7a:35:f1:1e:e1:
2a:5e:07:8b:d2:27:ec:97:57:f2:76:09:29:1f:6c:d4:48:1f:
e2:73:28:c8:fe:c3:c4:df:6f:6b:94:78:a0:f6:12:13:0b:0d:
e5:50:b9:86:d9:f5:e8:10:5f:76:d4:73:49:21:df:46:11:39:
94:a3:f4:1f:e1:07:c4:91:2e:ae:c7:dc:6d:dd:84:03:74:15:
da:e9:03:a7:c0:58:16:6e:29:d7:dc:ed:f9:7e:a0:51:b2:3a:
c8:2b:52:e2:97:2b:a8:47:11:b7:6d:7e:32:76:10:75:49:e4:
f4:7e:a1:5b:e9:95:6f:d8:84:9f:76:9c:a9:8a:8a:fd:ed:fa:
50:b4:79:fe:18:5f:3e:87:71:98:ca:e3:3d:4b:4c:6c:7a:d5:
03:db:3e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 1 13:22:08 2026 by rpki-client