Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/972CF1A455E411F186F63EB6CE1D38B0.roa
File: 972CF1A455E411F186F63EB6CE1D38B0.roa (raw, json)
Hash identifier: 2/QetG1Qkhhkj3wD65TlnJu0PGiekGFc8HORuuOo3Mk=
Subject key identifier: 26:AF:6B:9A:15:94:BC:6B:9D:C0:09:C7:D9:53:A6:B8:76:AD:5C:E7
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 189D
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/972CF1A455E411F186F63EB6CE1D38B0.roa
Signing time: Fri 22 May 2026 13:46:11 +0000
ROA not before: Fri 22 May 2026 13:46:05 +0000
ROA not after: Mon 22 May 2028 13:46:05 +0000
asID: 51082
IP address blocks: 102.129.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 May 2026 00:07:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6301 (0x189d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: May 22 13:46:05 2026 GMT
Not After : May 22 13:46:05 2028 GMT
Subject: CN=6a105e22-78a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:65:51:16:d5:ee:0d:88:2f:4d:95:68:50:d5:
a3:78:03:82:b8:85:ec:e1:13:f9:7a:38:52:1e:ad:
13:3c:b3:41:5d:79:92:bb:01:11:aa:7a:c6:7b:59:
77:e3:19:64:25:23:de:88:63:f8:0a:f9:07:96:e5:
4a:16:6f:55:bf:98:9e:7c:39:08:4d:c9:76:4a:3d:
80:02:94:c5:7b:96:73:38:f7:a8:cf:ec:cb:a4:f1:
e5:52:f7:5e:73:cc:a3:b6:4f:71:a4:93:8a:fb:eb:
dd:d8:3d:6b:84:97:7d:16:fb:e0:42:ae:9e:16:8e:
0d:70:9d:58:af:49:1d:9c:6c:b1:b9:28:c3:e3:4c:
0d:b9:8f:56:45:7a:17:42:d7:ea:7d:9f:b0:36:b5:
bc:62:6e:68:a3:40:00:52:b0:ed:5e:59:d4:77:26:
2b:41:b6:8a:cb:af:17:27:3a:bb:2c:06:36:18:84:
29:42:fd:13:77:51:86:7a:c9:61:5b:2b:0d:30:93:
35:d4:2b:72:69:65:8b:f0:93:1f:38:49:da:d9:12:
43:05:23:e2:18:ba:6c:c6:3a:62:7e:59:71:7b:28:
ab:7c:fe:c9:31:c1:e2:1c:62:65:8a:e8:49:9f:cd:
68:f5:64:1a:3f:26:64:54:c5:9c:cc:ac:7f:3e:97:
97:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:AF:6B:9A:15:94:BC:6B:9D:C0:09:C7:D9:53:A6:B8:76:AD:5C:E7
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/972CF1A455E411F186F63EB6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.244.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:a3:2f:13:8a:e4:14:48:97:94:8f:35:38:6d:94:ba:32:89:
39:a5:c5:58:42:1d:54:6a:8d:1e:ed:30:59:28:1e:cf:29:87:
2f:e0:86:d7:77:49:fe:4d:a3:8c:91:6c:80:67:f8:c6:17:51:
bf:88:60:f9:cd:5a:93:a3:38:19:a1:4c:7c:9f:22:cb:f9:7a:
a6:3e:d9:bc:5a:2f:50:4d:53:16:c2:f4:1d:65:01:c0:d7:68:
d6:4d:c4:e9:66:ab:c2:1a:6d:e1:35:f0:c9:d0:40:80:54:b8:
6d:6a:cd:82:08:db:a7:d5:18:9e:df:d3:3d:48:50:ca:0f:b5:
5b:ae:7c:fb:40:3f:0e:41:68:88:c9:d7:9c:80:eb:f3:8e:2c:
77:01:4f:23:81:7e:15:7f:d6:50:e7:f4:47:44:42:e8:06:96:
0f:30:b7:81:e2:cc:dd:49:0b:2d:d8:75:08:59:8e:e8:db:10:
a7:45:5e:4a:f8:1f:37:5c:00:ef:26:0b:d5:b1:2e:e2:9f:16:
87:20:a6:49:5b:9d:9c:ac:f6:5f:28:e3:ba:ff:54:e8:30:bd:
9b:da:fb:9a:84:d7:f0:a8:9f:22:ff:67:3f:ed:6b:fa:df:0f:
05:5c:86:62:22:a3:b4:4f:3b:20:f0:ae:76:5d:3a:b6:fb:42:
24:d6:62:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 17:36:26 2026 by rpki-client