Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/77A2F7623EF511F1A218601ECF1D38B0.roa
File: 77A2F7623EF511F1A218601ECF1D38B0.roa (raw, json)
Hash identifier: 1XUkht0/T4H1XDj8aFAMzNzvDdvXMrjBA4WBbqls8r4=
Subject key identifier: 3A:98:4E:28:3C:5D:51:A0:C9:BD:F5:EE:91:BA:32:A4:4D:91:1F:E7
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 182B
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/77A2F7623EF511F1A218601ECF1D38B0.roa
Signing time: Thu 23 Apr 2026 09:19:02 +0000
ROA not before: Thu 23 Apr 2026 09:18:58 +0000
ROA not after: Sun 23 Apr 2028 09:18:58 +0000
asID: 199030
IP address blocks: 102.129.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Apr 2026 09:29:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6187 (0x182b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Apr 23 09:18:58 2026 GMT
Not After : Apr 23 09:18:58 2028 GMT
Subject: CN=69e9e406-8d4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9f:5b:31:75:a3:88:c2:b1:b2:d4:23:fd:04:
90:ef:c3:57:f3:b0:e1:da:ce:8d:ae:f7:e5:bc:0b:
ce:89:4d:6a:c1:4c:94:bb:14:95:d3:9e:ab:26:d5:
ad:4d:2a:bc:fd:8c:7f:4d:84:bd:63:16:7d:31:25:
ae:17:a7:04:cb:e2:e4:e3:96:03:47:71:b2:f9:d5:
93:50:33:2a:36:b4:b1:db:c9:8c:2d:8d:df:60:70:
25:91:f3:0f:fd:62:80:bc:84:eb:cb:ba:1f:78:d3:
ea:be:e8:78:c3:0a:6d:a5:90:7b:b0:6b:45:26:97:
ec:de:65:f4:c2:17:8c:6e:df:66:7c:0f:5b:00:2b:
50:2c:0b:ee:4b:0d:39:1d:0e:ad:fa:6f:8f:d6:18:
2b:f2:b7:13:88:5c:78:97:59:50:70:5d:83:23:8d:
63:5b:44:03:23:d3:de:ee:74:eb:48:d7:0a:0e:49:
5e:53:fd:57:72:fb:87:d8:15:ff:f3:92:ba:8b:ab:
57:6e:3e:c0:6f:2a:5d:11:8f:67:bd:3e:4a:6a:d9:
e4:fb:38:47:5e:74:8b:bd:7b:46:87:be:f7:4d:52:
42:f7:bc:50:3b:ac:fe:33:48:54:da:b9:58:70:0f:
d5:34:4e:0a:c6:7f:a6:aa:79:2b:20:85:c6:77:6c:
7b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:98:4E:28:3C:5D:51:A0:C9:BD:F5:EE:91:BA:32:A4:4D:91:1F:E7
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/77A2F7623EF511F1A218601ECF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.225.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:8f:58:fd:04:5b:ce:8e:5f:c2:0e:fe:13:2f:a8:4f:8e:22:
aa:15:a8:50:4c:27:4c:f7:ae:21:96:fe:a3:3b:f9:68:46:a8:
31:36:51:57:03:bf:3d:1b:0d:07:e6:0e:dd:d6:58:05:f0:1c:
c1:5e:44:e6:40:8a:8f:1b:71:b3:5c:9b:a4:7e:ed:82:43:d1:
ef:81:1e:0d:c8:6c:70:e3:fc:32:8d:ed:48:c0:75:72:24:e8:
93:5c:c1:c3:38:dd:f4:42:96:19:11:d6:be:f2:30:fc:23:08:
ab:44:a1:a5:fd:b5:42:ed:b3:6c:6a:15:26:c5:e0:a4:e3:d5:
55:8b:b5:ee:ed:f0:9e:a7:21:65:df:d4:85:7b:5f:fd:53:d9:
f3:6f:a1:35:46:00:bd:c0:96:c6:24:7a:29:ec:9b:bc:13:18:
4b:7e:40:61:a4:cd:49:96:df:4e:a3:4b:79:ae:b0:4c:98:2f:
19:12:c5:27:3b:f6:f2:cf:bf:7d:e0:85:84:a3:c7:59:ce:a4:
9c:66:6f:5a:09:68:fa:85:16:cc:91:8a:68:9a:85:a2:29:5e:
5e:f4:25:e2:27:d7:b2:34:a0:30:56:f1:f9:d4:a4:de:a1:f9:
6e:22:2a:24:12:90:18:37:65:2a:52:c9:b7:3a:d9:ef:ae:5a:
45:3d:e4:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 23 18:31:14 2026 by rpki-client