Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/7A905B2C18BC11F185CE718CDAE4EC9C.roa
File: 7A905B2C18BC11F185CE718CDAE4EC9C.roa (raw, json)
Hash identifier: JZMWq97NIKWWd5QrsyrwfU9732WkAiDbqzRLMv2ZA+U=
Subject key identifier: FB:AE:0E:B6:60:14:61:1D:35:42:5E:38:0D:5E:13:21:12:84:4A:28
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1789
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/7A905B2C18BC11F185CE718CDAE4EC9C.roa
Signing time: Thu 05 Mar 2026 17:55:22 +0000
ROA not before: Thu 05 Mar 2026 17:55:17 +0000
ROA not after: Sun 05 Mar 2028 17:55:17 +0000
asID: 212238
IP address blocks: 102.129.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 11 Mar 2026 06:13:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6025 (0x1789)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Mar 5 17:55:17 2026 GMT
Not After : Mar 5 17:55:17 2028 GMT
Subject: CN=69a9c38a-7541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:20:8d:61:f1:02:57:50:cf:a8:31:6a:3f:4c:
c7:41:22:9b:4d:83:46:d1:60:a8:22:7b:8d:e9:64:
93:75:47:2c:1c:da:e8:7f:e6:ff:cc:da:de:84:cf:
30:1c:25:d3:ba:0d:89:73:70:33:22:8c:b6:09:56:
f5:79:25:d8:67:d4:f9:40:69:89:69:06:6f:5e:8a:
0a:5d:e8:14:2c:33:46:b2:a5:01:ba:83:06:a4:66:
5d:fe:7c:c0:da:fa:06:60:71:65:78:98:d9:be:46:
f2:1a:ba:b7:3c:26:09:fd:37:c4:ec:5f:28:fe:ac:
31:ef:5f:89:3a:2b:a1:3f:1b:3f:41:58:5a:12:ab:
d2:1a:89:53:74:b4:b2:22:09:26:78:2c:6b:5e:38:
f0:c2:db:77:b5:1a:e6:50:e7:69:de:48:67:07:32:
ea:fa:c0:fa:8f:3e:f8:1f:39:4e:e0:be:d8:eb:a1:
59:fc:ed:27:df:70:8c:28:49:66:5e:02:a1:69:87:
42:99:bc:e5:40:73:28:7c:7a:20:fe:3b:cc:88:12:
83:85:43:5a:4e:2c:0b:39:72:56:bf:20:26:e2:b5:
01:24:34:5c:86:18:8e:41:d5:83:7c:2b:3f:44:6a:
2e:19:08:0d:42:b9:11:e9:74:1d:b2:94:ec:3f:61:
fa:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:AE:0E:B6:60:14:61:1D:35:42:5E:38:0D:5E:13:21:12:84:4A:28
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/7A905B2C18BC11F185CE718CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.223.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:c3:7c:30:09:fe:df:43:be:fe:7e:48:b5:d9:b9:44:e1:13:
ac:bc:b0:17:19:17:2e:ca:ad:e8:93:3d:5f:32:a8:3b:58:29:
11:49:1c:0a:b0:e9:6e:fa:6e:c0:60:2c:d9:a4:e7:00:7c:8e:
8a:23:72:29:38:40:65:f8:05:2b:cf:82:09:72:20:1f:a2:77:
66:2a:99:c9:33:48:35:4a:eb:b6:ff:98:92:49:db:32:44:48:
8b:2e:a4:25:c8:bd:26:bc:97:23:56:ac:f2:95:66:9e:d4:e9:
0e:4d:04:06:c5:15:48:9e:d2:10:28:eb:d8:c4:69:75:b6:78:
92:b1:a3:e7:9d:59:57:a5:f1:90:1d:32:c0:5e:3c:24:3e:3d:
d3:27:b6:de:e8:6d:23:f5:99:03:ab:5d:67:67:ef:e2:8a:e2:
2b:38:f5:9d:ab:f3:20:3e:34:5e:ae:f5:ba:96:01:45:6c:cf:
ee:6a:dd:e7:bc:c2:3d:19:2f:a1:1b:fa:48:bb:c2:1d:21:ab:
4b:24:c8:60:99:33:1d:0a:cb:de:c2:5b:dd:fa:81:27:06:26:
a1:80:b6:7f:9f:30:d4:4c:0f:1b:e3:dd:80:b7:f0:fb:2c:ae:
c5:f8:5c:ed:04:23:cc:03:1a:10:a1:8f:aa:12:5f:dc:eb:ee:
ed:f3:a3:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 10 02:25:15 2026 by rpki-client