Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/910A7E30494711F1B9C8E7F4CE1D38B0.roa
File: 910A7E30494711F1B9C8E7F4CE1D38B0.roa (raw, json)
Hash identifier: EskrMQggt4zRcfSvf2jjSKtqTPjxLuBFSj75L76FfIk=
Subject key identifier: 44:79:87:F2:46:E5:7A:80:48:9D:28:2E:B6:C7:DF:30:B3:86:2D:A5
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 184A
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/910A7E30494711F1B9C8E7F4CE1D38B0.roa
Signing time: Wed 06 May 2026 12:31:55 +0000
ROA not before: Wed 06 May 2026 12:31:51 +0000
ROA not after: Sat 06 May 2028 12:31:51 +0000
asID: 9009
IP address blocks: 102.129.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 08 May 2026 00:07:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6218 (0x184a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: May 6 12:31:51 2026 GMT
Not After : May 6 12:31:51 2028 GMT
Subject: CN=69fb34bb-60ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2d:e5:f8:e8:df:6d:32:22:e4:79:f7:da:8a:
32:28:ef:af:6f:35:0d:ee:4d:c3:6a:83:46:30:30:
0b:1e:42:e0:88:0f:f6:22:01:ad:4e:07:3b:90:bf:
aa:c1:86:ad:6a:6c:d4:05:69:be:1f:aa:85:a2:87:
46:99:1c:c3:41:eb:42:d9:31:57:7a:83:ac:08:5b:
0d:cb:36:a9:94:84:35:ea:99:7f:65:19:1d:77:f9:
63:39:a0:e0:a9:c0:15:65:12:5a:8e:f4:2d:28:3d:
37:2a:ec:e6:d9:fc:0e:6e:c7:93:74:f7:b1:4f:70:
d1:9a:6e:21:2f:de:3d:c2:b8:8b:d8:aa:a3:58:59:
21:42:1e:5e:e2:0c:a3:a2:3b:d5:87:2e:7e:41:a7:
32:aa:da:5d:2c:81:c4:c5:3a:dc:a7:bf:4c:ff:70:
c3:91:74:1b:81:9d:25:23:ad:e4:ea:d1:0b:df:e1:
03:5a:63:a8:0c:8d:88:63:f9:d6:02:ee:72:c2:2e:
04:ff:19:3e:a3:b3:30:ea:37:f6:f7:de:91:5c:24:
b4:00:02:bd:2e:2d:92:a8:4f:54:a1:b2:8a:bc:29:
dd:52:b2:df:b5:3a:ba:64:80:b3:c3:80:bf:3e:81:
bf:b7:fa:eb:f9:ec:01:52:7c:49:2f:f6:ae:29:dd:
2a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:79:87:F2:46:E5:7A:80:48:9D:28:2E:B6:C7:DF:30:B3:86:2D:A5
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/910A7E30494711F1B9C8E7F4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.238.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:7c:6c:05:62:85:dd:e0:89:44:61:0e:1a:52:91:ad:e6:31:
ef:3f:4a:7d:35:c6:f2:57:51:60:36:9a:62:de:3f:7b:7b:98:
b1:cb:1e:ba:46:5a:1c:96:26:1e:01:fc:cb:ce:9c:d8:ca:ca:
60:c8:ff:6c:d8:79:5f:57:90:f4:1b:f1:bd:26:b6:bf:71:27:
2e:6f:09:53:05:c2:36:c3:e1:0b:92:a0:4d:c7:e7:c9:50:75:
44:e2:c6:18:27:99:44:c6:af:d6:70:05:31:84:62:a7:25:82:
a7:48:99:d3:a0:8f:4f:b5:1a:7e:e2:2a:7f:85:97:81:4a:57:
2c:37:90:88:e9:b6:3c:95:aa:01:55:47:c0:48:a7:5d:93:55:
0d:29:07:87:8c:ad:44:70:30:2f:e9:eb:9e:55:64:da:8c:3b:
d1:0e:a7:64:63:9b:ce:ff:2c:33:98:50:4e:1a:69:52:93:aa:
7d:33:71:fd:b3:2c:02:2d:bd:b4:e7:79:10:72:ac:88:57:da:
5a:88:36:62:59:3f:60:a7:9c:78:08:04:68:6c:4b:73:ca:ca:
64:f3:7e:17:60:b9:f8:9d:79:9b:10:95:f7:f4:1b:26:4a:a4:
09:5c:a3:65:34:90:71:69:4a:ee:5f:be:69:75:d5:d0:86:f4:
4a:84:50:0c
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICGEowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yNjA1MDYxMjMxNTFaFw0yODA1MDYxMjMxNTFaMBgxFjAU
BgNVBAMTDTY5ZmIzNGJiLTYwYWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC9LeX46N9tMiLkeffaijIo769vNQ3uTcNqg0YwMAseQuCID/YiAa1OBzuQ
v6rBhq1qbNQFab4fqoWih0aZHMNB60LZMVd6g6wIWw3LNqmUhDXqmX9lGR13+WM5
oOCpwBVlElqO9C0oPTcq7ObZ/A5ux5N097FPcNGabiEv3j3CuIvYqqNYWSFCHl7i
DKOiO9WHLn5BpzKq2l0sgcTFOtynv0z/cMORdBuBnSUjreTq0Qvf4QNaY6gMjYhj
+dYC7nLCLgT/GT6jszDqN/b33pFcJLQAAr0uLZKoT1Shsoq8Kd1Sst+1OrpkgLPD
gL8+gb+3+uv57AFSfEkv9q4p3SqZAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQURHmH
8kbleoBInSgutsffMLOGLaUwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4LzkxMEE3RTMwNDk0NzExRjFCOUM4RTdGNENFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmge4wDQYJKoZIhvcNAQEL
BQADggEBACx8bAVihd3giURhDhpSka3mMe8/Sn01xvJXUWA2mmLeP3t7mLHLHrpG
WhyWJh4B/MvOnNjKymDI/2zYeV9XkPQb8b0mtr9xJy5vCVMFwjbD4QuSoE3H58lQ
dUTixhgnmUTGr9ZwBTGEYqclgqdImdOgj0+1Gn7iKn+Fl4FKVyw3kIjptjyVqgFV
R8BIp12TVQ0pB4eMrURwMC/p655VZNqMO9EOp2Rjm87/LDOYUE4aaVKTqn0zcf2z
LAItvbTneRByrIhX2lqINmJZP2CnnHgIBGhsS3PKymTzfhdgufideZsQlff0GyZK
pAlco2U0kHFpSu5fvml11dCG9EqEUAw=
-----END CERTIFICATE-----
Generated at Thu May 7 00:04:50 2026 by rpki-client