Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/80DA4C867AA011F185943BD0CE1D38B0.roa
File: 80DA4C867AA011F185943BD0CE1D38B0.roa (raw, json)
Hash identifier: XVrx8sQU6JhzcRVJytxMOhZ9jkjn3dEYP2OQ18q3LtA=
Subject key identifier: 83:DF:02:F5:44:55:2E:A8:C7:D9:6D:20:15:25:23:E5:6E:C4:87:69
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1948
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/80DA4C867AA011F185943BD0CE1D38B0.roa
Signing time: Wed 08 Jul 2026 07:42:00 +0000
ROA not before: Wed 08 Jul 2026 07:41:56 +0000
ROA not after: Sat 08 Jul 2028 07:41:56 +0000
asID: 29802
IP address blocks: 102.129.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 10 Jul 2026 00:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6472 (0x1948)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jul 8 07:41:56 2026 GMT
Not After : Jul 8 07:41:56 2028 GMT
Subject: CN=6a4dff48-2465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:64:44:6e:bd:7f:62:1b:f4:6d:ba:53:44:96:
91:aa:df:ae:6e:2f:03:04:77:ad:bf:0b:dc:08:90:
6c:30:52:e8:f5:a4:cd:f5:c8:c7:15:a4:25:71:01:
86:31:63:32:18:44:6e:60:f5:83:9f:9e:0d:9b:e5:
2e:b2:95:e3:b3:c0:4e:3e:b8:c4:6d:39:e3:16:ba:
0c:6b:b9:1d:18:0d:ad:6f:50:e4:6f:53:9d:e9:18:
93:54:4e:90:89:54:15:e8:23:2e:25:1e:df:c2:20:
97:36:a9:96:be:e6:74:d7:1a:5c:1f:df:db:1d:15:
91:c7:f8:ea:df:6e:8d:5d:4e:76:8b:67:0c:48:e2:
6d:bb:8a:6e:90:e3:01:fd:57:95:06:0e:1b:45:4a:
c4:2b:93:81:b0:76:3b:d5:c4:fc:f6:be:0f:a7:9e:
a5:45:fc:6f:5d:13:46:db:36:44:b4:a1:9c:2c:34:
c4:ab:9c:b8:38:7c:4c:23:04:34:a7:e6:3f:c4:f4:
87:e1:ee:88:89:8d:94:34:54:43:30:30:77:82:4e:
3e:de:bd:73:1d:fc:cb:8b:01:ba:ed:cb:df:7e:09:
b9:ca:bf:00:8f:57:4e:74:11:e7:34:98:96:4a:8d:
4e:a9:19:91:7f:59:c3:8d:f2:5f:4d:3f:ee:fd:a3:
4b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:DF:02:F5:44:55:2E:A8:C7:D9:6D:20:15:25:23:E5:6E:C4:87:69
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/80DA4C867AA011F185943BD0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.189.0/24
Signature Algorithm: sha256WithRSAEncryption
45:ea:cb:b4:8d:86:76:c3:44:31:fd:85:75:5b:97:9e:c5:84:
44:82:22:f7:97:8b:dd:8b:e4:57:2b:d2:f9:ad:7a:82:6a:15:
0e:1a:06:e2:60:9c:c1:71:1c:77:f4:85:20:7b:7c:b1:bd:2a:
db:32:de:34:49:a3:95:b1:60:d0:bf:2f:aa:e1:76:a0:49:11:
d9:70:4c:35:80:b1:58:53:90:ca:77:d1:33:fd:94:5c:bc:71:
62:12:23:1e:65:b9:55:3e:66:ae:b1:67:56:9c:0b:69:4a:9c:
26:03:51:df:75:e7:86:bd:9f:03:c7:d1:d1:58:b3:ec:40:fc:
e4:b5:4c:c7:99:b8:76:d5:7c:7e:56:79:43:9c:77:e0:39:6a:
ad:eb:8e:23:15:9d:7e:9a:ce:89:9d:b2:7c:77:da:cb:03:22:
2e:d3:d2:f9:15:ea:84:12:c1:e1:b4:51:bf:f8:7b:17:aa:f8:
82:52:67:fa:75:2a:0a:e3:d1:06:eb:04:3e:9e:07:bc:cc:43:
98:8b:31:e9:fb:d5:c1:df:b1:6a:53:9e:e2:3d:49:69:a9:d8:
31:92:33:bc:40:a8:4f:7e:a9:21:91:57:43:f6:a4:e3:b0:d4:
00:bf:96:cf:85:96:39:9c:91:a9:79:af:ca:57:b0:4f:d3:1f:
14:d7:bf:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 10:31:06 2026 by rpki-client