Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/96E4440A917F11F1ADAF251ACF1D38B0.roa
File: 96E4440A917F11F1ADAF251ACF1D38B0.roa (raw, json)
Hash identifier: P22LJ5tLgB0YbzVwRcaNsuwX50E15QtuGCO8cvR+5YM=
Subject key identifier: 9A:ED:B1:D2:02:2B:FA:DB:0A:2A:FF:0D:F6:84:3E:A3:99:C9:06:B3
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 198F
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/96E4440A917F11F1ADAF251ACF1D38B0.roa
Signing time: Thu 06 Aug 2026 10:14:21 +0000
ROA not before: Thu 06 Aug 2026 10:14:17 +0000
ROA not after: Sun 06 Aug 2028 10:14:17 +0000
asID: 134494
IP address blocks: 102.129.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6543 (0x198f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Aug 6 10:14:17 2026 GMT
Not After : Aug 6 10:14:17 2028 GMT
Subject: CN=6a745e7d-4b09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:09:98:d5:03:f0:af:dc:0c:55:5f:a9:c0:a4:
96:5f:0f:5c:02:de:88:21:32:ec:b9:ff:ad:76:27:
b8:e7:57:a9:5e:42:f6:68:db:b7:e4:65:8e:f6:70:
60:50:78:18:09:60:e2:b2:35:04:d6:17:0d:a9:cd:
65:75:b1:80:c6:2f:84:8c:ec:8b:07:60:83:10:71:
bc:fa:18:68:d9:63:b9:36:22:af:e5:bc:5e:6b:ed:
dc:e4:1b:21:6b:5e:01:54:a0:ea:ab:5c:bb:e1:ca:
2d:34:a5:b3:74:4a:92:37:8c:b6:a9:04:24:6e:48:
93:53:86:9d:12:ce:1f:8f:0e:b2:f9:a3:e3:33:e5:
5d:d6:2b:17:c7:7b:f3:37:06:f3:01:3f:b5:30:78:
6a:d1:f9:e7:d5:43:3f:6d:a0:1c:9a:db:eb:69:b9:
f7:ef:f5:10:63:a5:06:7b:1d:e5:44:dc:11:c4:23:
e1:40:35:a0:a5:18:9d:31:54:de:63:a7:97:b7:0f:
e6:f5:6a:d8:5c:cc:c1:7e:c0:25:9e:2f:5d:78:1a:
79:86:ce:4e:77:34:fb:a1:08:31:69:44:28:80:55:
97:04:68:9a:cf:cf:43:70:53:0f:c7:1b:d8:97:b7:
ee:41:59:88:e0:e7:a4:3a:02:68:45:07:fe:61:db:
49:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:ED:B1:D2:02:2B:FA:DB:0A:2A:FF:0D:F6:84:3E:A3:99:C9:06:B3
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/96E4440A917F11F1ADAF251ACF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.167.0/24
Signature Algorithm: sha256WithRSAEncryption
67:af:d7:44:9e:1e:58:07:25:16:89:34:08:55:d9:1e:fd:b1:
6b:d6:0b:8a:39:35:d3:0a:0a:05:8e:8c:67:6f:a0:f3:17:20:
0d:cc:5b:52:22:d0:c3:e9:a9:c7:f6:e5:cf:5f:18:5e:95:fb:
89:e9:d4:c7:2a:f1:f3:58:22:1d:c6:19:0b:f0:76:ff:8a:71:
c4:0e:ab:97:4d:43:33:87:0c:2c:02:82:cd:7d:e0:51:f9:37:
16:89:c6:ec:a0:44:3f:fc:5c:11:f1:36:db:5d:02:48:19:76:
cf:9f:66:8a:df:45:e4:99:61:bd:36:26:79:c4:41:84:97:4a:
2c:65:3d:04:a6:8d:0d:9f:13:29:fe:aa:15:9d:07:f8:de:87:
ff:81:ce:85:ca:3a:4a:7c:4e:69:f0:71:a1:d0:9a:64:b5:c6:
ef:5c:4e:e1:c7:1c:c3:d4:29:0a:5d:71:dc:87:36:08:ae:c4:
53:9f:d1:39:aa:b0:a9:f7:aa:3d:32:f2:d8:fc:cb:42:b8:f7:
b1:26:a0:17:4f:c4:8e:39:f7:d7:19:84:08:aa:f5:04:33:be:
47:d9:50:07:d1:93:13:fe:cb:92:00:08:47:10:bd:e3:6a:4b:
21:40:b1:6c:7b:02:52:a0:7c:bf:01:e6:20:4a:86:38:05:5c:
2d:13:aa:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 15:16:51 2026 by rpki-client