Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9D72867247DF11F19316D9E1CE1D38B0.roa
File: 9D72867247DF11F19316D9E1CE1D38B0.roa (raw, json)
Hash identifier: ebaydeVDzzTxulYw0W8Mea1GOr4p2t7fEsVbhdNGb6U=
Subject key identifier: BF:FE:FF:E3:81:57:52:04:40:EE:CC:A8:1A:E1:5C:86:34:42:02:53
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1846
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9D72867247DF11F19316D9E1CE1D38B0.roa
Signing time: Mon 04 May 2026 17:35:17 +0000
ROA not before: Mon 04 May 2026 17:35:13 +0000
ROA not after: Thu 04 May 2028 17:35:13 +0000
asID: 834
IP address blocks: 102.129.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 08 May 2026 00:07:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6214 (0x1846)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: May 4 17:35:13 2026 GMT
Not After : May 4 17:35:13 2028 GMT
Subject: CN=69f8d8d5-a930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:34:e5:f1:25:54:29:07:d4:37:ac:cf:39:f3:
97:85:a3:d0:c0:4a:0d:ba:c7:9b:0d:ae:a0:60:0e:
32:63:b8:83:25:e7:96:b7:19:94:95:b0:49:18:17:
8e:10:a5:a8:b8:54:96:ed:af:72:e3:9c:7d:b9:9f:
3c:cc:68:aa:02:45:f0:74:0c:d5:b9:3f:15:f2:07:
05:fc:a5:11:a3:b0:22:d8:dd:61:49:c0:13:5f:bc:
fc:ce:6d:5f:63:ef:d1:b8:b5:3b:6b:fd:72:dc:4a:
87:57:b3:12:ad:55:75:74:9c:17:26:d2:5c:e9:a1:
0d:2e:a2:6d:d1:30:1c:b8:20:11:74:85:5f:74:67:
ee:9c:a7:71:7a:1f:9f:81:f4:87:b9:9f:8b:5e:fe:
4c:7d:b1:0f:0a:5e:03:67:f8:45:e6:4d:c9:63:e2:
5d:14:72:e8:16:52:21:2b:64:58:a6:d6:fd:c8:19:
d8:86:c3:84:e7:f3:51:62:78:50:82:3f:1d:34:20:
af:06:60:d2:65:fa:f5:04:c3:71:3f:f2:d9:53:00:
46:bc:55:de:5d:40:98:a4:31:f5:5a:44:02:85:f5:
f3:cf:ee:d5:e5:4b:a4:c3:d6:57:dc:28:39:a7:03:
24:1d:d5:60:a8:c6:87:c6:22:1a:27:ee:a6:e6:ac:
a1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:FE:FF:E3:81:57:52:04:40:EE:CC:A8:1A:E1:5C:86:34:42:02:53
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9D72867247DF11F19316D9E1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.218.0/24
Signature Algorithm: sha256WithRSAEncryption
dd:44:af:55:49:e2:2a:79:36:e3:cc:82:ef:4d:94:8f:67:ff:
e0:57:9f:fe:b5:ee:ec:27:00:e4:5d:7b:ef:bb:bb:a1:0b:61:
33:b1:36:cd:5b:55:30:23:8c:9a:71:79:1f:57:08:55:63:f2:
c9:44:f6:3f:4a:ca:97:30:5d:76:e4:d1:3c:8a:e0:c3:0b:df:
de:14:f6:90:6c:b3:c4:2e:be:88:36:cf:12:f4:3f:d9:38:54:
38:70:a1:83:67:86:2b:82:ea:eb:55:88:e3:97:3e:ec:81:9c:
4f:1f:2a:2b:04:e0:68:43:03:f7:79:5d:cf:1a:21:f4:6f:42:
18:f8:cb:a4:6f:5f:59:24:c7:fc:38:f7:4c:ea:35:5b:a6:83:
65:0b:d2:15:79:05:dd:c2:07:b7:24:1b:b6:64:f2:62:de:19:
9d:b1:46:ab:ae:db:a7:ae:84:b2:b8:5d:4b:dc:ad:a7:16:16:
f3:a4:6f:49:a3:85:47:17:e7:41:2a:83:c7:f8:14:00:8d:62:
11:db:90:35:66:5e:34:08:85:ea:b4:2d:b7:be:17:ff:1a:8f:
fc:59:fd:1a:5f:31:06:06:22:54:72:40:8c:3a:52:18:eb:ee:
a3:1c:d2:80:ae:49:c8:44:1a:65:bb:80:79:fe:41:fd:c1:48:
86:5f:fe:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 00:04:31 2026 by rpki-client