Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/7DD027C63A8211F1A43F5CC6CE1D38B0.roa
File: 7DD027C63A8211F1A43F5CC6CE1D38B0.roa (raw, json)
Hash identifier: M8oe6iY91VvJJSy2EUigBNF/2tIaUfZeOZeayDF3alk=
Subject key identifier: 36:CC:A4:68:31:08:9F:0E:85:A4:1B:60:4F:13:BD:76:B8:B1:F9:77
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 181D
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/7DD027C63A8211F1A43F5CC6CE1D38B0.roa
Signing time: Fri 17 Apr 2026 17:25:56 +0000
ROA not before: Fri 17 Apr 2026 17:25:51 +0000
ROA not after: Sat 15 Apr 2028 17:25:51 +0000
asID: 395470
IP address blocks: 102.129.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Apr 2026 01:19:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6173 (0x181d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Apr 17 17:25:51 2026 GMT
Not After : Apr 15 17:25:51 2028 GMT
Subject: CN=69e26d24-43b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6d:79:dd:47:5f:f4:61:b5:22:1b:6a:04:2c:
2a:95:7d:6b:2a:08:30:9f:ec:3d:0f:de:ce:23:f5:
40:e8:11:c2:5b:b0:09:6e:bb:fb:da:45:f6:df:8c:
34:86:c3:c0:39:1f:fb:a3:ff:4a:fe:45:31:65:1c:
0b:7c:bb:8c:29:da:ce:f4:8a:7b:dc:3f:70:4a:0c:
4e:9a:53:ce:1e:79:65:a3:5e:84:1f:54:5e:70:5c:
53:11:63:8b:97:bc:cf:62:df:a3:91:2c:6f:82:7a:
66:ba:8b:5a:07:5f:0b:5b:27:1d:60:ac:d3:25:27:
33:73:2b:4d:e8:a8:02:ec:c0:59:bd:0b:3b:2d:10:
73:66:84:14:49:e2:d5:73:ec:67:7c:85:16:bb:77:
4a:cf:b0:a9:3d:33:2b:fb:a5:38:43:2b:65:4b:18:
19:c6:55:b2:3d:f6:6b:f8:c6:3e:da:75:43:08:d1:
ad:2e:3a:39:8c:12:11:77:1a:f5:d1:7e:02:77:1a:
55:b0:b5:71:2a:df:96:4d:a4:de:bb:d5:9d:1a:a1:
ef:6f:1d:88:6c:27:e2:3f:37:20:3f:65:cb:26:68:
09:88:f6:20:28:6a:c6:09:42:90:f8:e1:2f:c1:29:
5a:b6:df:e2:8e:96:b4:50:f6:b3:e6:53:99:b3:36:
8a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:CC:A4:68:31:08:9F:0E:85:A4:1B:60:4F:13:BD:76:B8:B1:F9:77
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/7DD027C63A8211F1A43F5CC6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.139.0/24
Signature Algorithm: sha256WithRSAEncryption
61:48:77:4e:15:07:b1:e3:6f:ed:1e:3e:6f:f9:4f:f6:17:4b:
47:85:2b:e3:f8:4a:81:a8:33:80:a1:7a:75:6b:c8:9d:b2:1b:
96:4a:ca:24:09:66:41:0f:23:f0:d5:2b:a3:bf:b7:93:49:86:
1a:c4:24:5e:dc:1d:2a:3b:36:53:7c:5e:ac:72:fc:63:0f:0e:
78:d3:6d:3d:56:23:20:d1:be:9e:f9:d6:f7:52:01:a9:91:04:
48:f2:a1:48:91:df:d4:6e:61:f8:3b:8a:c4:97:27:e9:2c:eb:
87:a3:e6:d3:e5:70:59:9f:c6:46:cb:a5:77:dd:97:e6:16:ed:
d6:ad:96:f5:27:e6:b2:52:25:a0:43:b3:83:f9:6c:1b:b8:9a:
4f:43:e5:7a:25:35:da:ae:56:1b:b1:11:c7:0f:7b:86:7c:fc:
d8:8d:cf:76:ab:7b:76:4f:2c:ea:76:8d:65:fd:40:d3:e0:e1:
1b:5c:e8:17:3d:87:af:8e:a3:ce:10:ea:34:3a:68:36:96:31:
7b:fd:43:83:18:ef:36:91:01:24:45:4e:43:94:84:f7:7c:fa:
90:63:b6:28:64:ed:ae:a3:e2:82:b4:a6:80:e3:1a:ed:c9:b1:
90:91:25:bb:a7:c4:a9:f3:52:b5:a7:5c:51:e8:09:3f:f4:01:
8a:71:6e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 17:34:14 2026 by rpki-client