Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/88FFB8344F6611F1BCB23CB7CE1D38B0.roa
File: 88FFB8344F6611F1BCB23CB7CE1D38B0.roa (raw, json)
Hash identifier: 5F4ySqElwc2YHFfLnYZcBi+Ol7cTD89U21rOO8yGXLQ=
Subject key identifier: DD:3D:81:93:98:CC:C0:9C:C2:C2:57:DE:C0:15:EC:A7:10:46:B6:B8
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1866
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/88FFB8344F6611F1BCB23CB7CE1D38B0.roa
Signing time: Thu 14 May 2026 07:28:43 +0000
ROA not before: Thu 14 May 2026 07:28:39 +0000
ROA not after: Sun 14 May 2028 07:28:39 +0000
asID: 396356
IP address blocks: 102.129.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 16 May 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6246 (0x1866)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: May 14 07:28:39 2026 GMT
Not After : May 14 07:28:39 2028 GMT
Subject: CN=6a0579ab-8a96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:fd:8f:ce:d9:3a:5f:16:61:5a:29:eb:7a:ac:
51:d1:53:f9:37:06:2f:8b:d6:05:c8:ed:36:2a:00:
86:88:df:9b:6f:dd:86:6d:8f:51:f3:9f:5e:42:e2:
c4:d4:d7:60:cd:99:e6:69:6a:9d:7a:a1:1e:54:ea:
e0:5a:96:73:d1:e0:8e:12:10:4c:73:da:fe:00:3f:
55:45:a2:a8:d0:f9:86:01:09:42:bb:bd:e9:25:64:
13:d9:4a:0b:07:cf:88:d0:de:20:68:54:5d:73:72:
16:ec:eb:a1:f5:7e:09:ab:b7:f3:d1:34:a3:8b:ee:
77:11:b2:95:0e:50:78:51:2e:c1:0e:c3:73:30:69:
f1:73:8e:b1:ca:68:9e:80:b9:49:c0:8c:54:e4:c1:
e3:18:5d:da:b2:d7:15:cc:c4:b5:e3:f1:05:fb:66:
bc:61:ed:ae:28:5f:37:4a:13:1f:f0:64:c0:66:d3:
34:32:1f:59:67:24:ca:1b:4f:97:e9:e1:ac:c2:cc:
93:93:41:16:9a:0f:fd:19:db:6c:88:cb:3a:16:d3:
17:11:46:72:42:a4:80:61:c0:06:8a:9c:af:90:db:
f0:7c:46:80:69:b9:6a:a0:81:ee:06:74:c0:8c:d1:
7d:cd:18:b8:a5:52:af:76:4e:6a:5a:64:d1:16:4c:
61:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:3D:81:93:98:CC:C0:9C:C2:C2:57:DE:C0:15:EC:A7:10:46:B6:B8
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/88FFB8344F6611F1BCB23CB7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.242.0/24
Signature Algorithm: sha256WithRSAEncryption
10:ba:f8:40:31:4a:24:c0:57:28:a5:d3:6d:3d:f1:09:59:84:
90:09:1d:4f:bb:35:de:60:27:a2:5f:ad:bd:74:c2:91:81:e8:
89:49:0a:97:00:bb:b8:76:81:e2:3d:46:19:6b:84:cd:46:f4:
06:c5:ee:db:0b:1c:ae:61:40:b6:bc:cd:7d:91:19:4b:64:5b:
19:a6:44:3f:66:47:63:a0:64:d7:9a:91:92:a2:2c:c2:50:13:
be:a1:c7:14:20:d1:98:9d:77:2d:3c:48:e4:d9:30:d7:4d:ef:
26:1c:e4:04:bc:29:0b:e5:36:2c:43:26:70:09:d9:d2:94:13:
c9:a3:e1:94:72:85:92:04:6b:58:9c:55:f2:e0:25:c2:79:3e:
98:a8:da:65:54:1f:1f:35:f5:fc:c4:08:2b:fe:97:a7:20:0f:
9d:fa:ed:bd:90:ff:28:a1:8a:6a:be:5a:ff:c4:ee:c3:9c:ac:
9a:8a:d5:19:09:6d:16:62:bd:a8:20:19:69:bb:66:f1:4a:42:
c9:51:5c:89:54:4c:aa:60:16:a9:06:da:a6:2e:0f:c8:b5:2e:
be:53:3e:d6:91:c7:4b:2d:96:6d:90:10:56:5e:42:e4:ff:96:
eb:16:60:cf:59:f1:62:0a:16:f9:1d:0d:04:9b:bb:bb:1e:f7:
32:88:30:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 14 19:20:44 2026 by rpki-client