Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9C9CDDB64C3911F1AB8582E8CE1D38B0.roa
File: 9C9CDDB64C3911F1AB8582E8CE1D38B0.roa (raw, json)
Hash identifier: umXilXz4JDUwUEjSL9Z6mYGweReOIz5VqTF45uOXzUI=
Subject key identifier: 77:BD:22:C6:9B:95:31:53:C1:65:AB:CD:7B:75:59:1D:57:A1:92:91
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 185C
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9C9CDDB64C3911F1AB8582E8CE1D38B0.roa
Signing time: Sun 10 May 2026 06:29:35 +0000
ROA not before: Sun 10 May 2026 06:29:31 +0000
ROA not after: Wed 10 May 2028 06:29:31 +0000
asID: 396356
IP address blocks: 102.129.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 13 May 2026 00:07:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6236 (0x185c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: May 10 06:29:31 2026 GMT
Not After : May 10 06:29:31 2028 GMT
Subject: CN=6a0025cf-5b5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3b:67:ef:50:da:e5:2a:7c:4f:e0:ee:92:28:
40:41:e9:5d:ab:20:05:fb:0c:e3:4d:8c:35:ca:b0:
0b:a8:4a:28:43:57:ea:97:cf:9b:69:07:aa:c4:9e:
b9:b1:a4:ad:d6:9b:9d:fe:43:33:be:bd:bd:73:15:
54:6b:d2:92:a1:a5:fa:44:68:bb:14:8d:dc:c7:aa:
55:41:ac:2a:8d:31:fa:bb:0f:aa:2b:95:f6:85:55:
59:a8:ca:88:ac:12:79:57:0e:d4:34:71:7e:85:9f:
60:a7:f3:75:75:99:d5:74:c7:13:3d:c4:41:f3:90:
63:bb:2a:5e:64:d1:c1:e3:b1:ff:52:c3:e1:67:bb:
43:b5:90:fc:6e:50:f3:71:86:cf:08:00:66:43:07:
77:f7:cc:fa:dd:44:87:d4:84:83:95:0a:2f:5c:a4:
a2:82:f0:d9:26:c8:67:ad:46:6a:91:04:2c:b2:b3:
d0:69:72:c1:c6:8a:54:50:90:ed:de:b9:a8:f4:61:
07:68:f3:c8:10:58:54:cf:c6:90:24:46:20:c6:44:
1b:65:70:f4:cf:dd:78:fe:c5:97:62:a8:a8:28:8a:
5a:0e:fb:10:63:35:c8:a5:f4:d4:c2:7f:4e:e8:b7:
81:bf:5b:cb:6d:e0:d6:f6:46:dd:17:ce:13:3d:f9:
ec:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:BD:22:C6:9B:95:31:53:C1:65:AB:CD:7B:75:59:1D:57:A1:92:91
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9C9CDDB64C3911F1AB8582E8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.212.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:08:0f:64:90:06:24:16:2e:8a:bf:a4:2b:ff:dc:12:37:13:
e4:5e:24:54:e3:c3:b6:dd:78:61:35:eb:be:42:cf:1d:7a:c6:
c4:db:01:d0:59:31:42:06:bc:22:92:06:43:f8:dc:f6:aa:b7:
24:18:d6:23:bc:5e:1d:1b:3a:41:d4:90:5a:2d:f3:c0:ce:d7:
75:c0:8d:02:33:15:cb:42:4b:44:1f:f1:fc:25:da:79:58:d5:
30:4c:20:f2:e1:06:fb:d5:05:85:b2:1d:6d:e8:d0:58:15:00:
f3:79:92:42:5d:27:ac:20:a5:14:c5:f5:fd:06:43:06:60:cd:
9b:68:9c:c2:ea:71:eb:ac:42:f2:ea:0a:76:80:fc:73:cb:b3:
94:66:cc:51:52:47:8e:53:c9:79:74:2f:01:54:20:96:3c:1d:
b8:a4:ab:4c:85:4b:a4:07:25:ab:e0:46:b7:83:b5:1e:4d:60:
89:3c:21:82:c4:c0:95:09:34:81:8d:62:f4:70:99:10:76:78:
14:b6:22:fc:8c:d2:5b:ef:62:eb:b5:0f:e8:c8:1f:f0:d1:b6:
26:0d:85:ae:40:8b:91:c7:8d:e5:f9:06:40:bf:ee:9c:dd:14:
f2:56:2c:93:90:c0:d5:86:5c:45:e1:5e:d5:34:c3:0c:87:af:
0f:f9:2a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 11 04:35:23 2026 by rpki-client