Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/A5B1E03E82C311F19A754CC9CE1D38B0.roa
File: A5B1E03E82C311F19A754CC9CE1D38B0.roa (raw, json)
Hash identifier: okcs/8vY5kiW8QcSsOHb/MTrbRxeYvpYj/OZI2oxgpo=
Subject key identifier: 05:60:5A:58:5E:FE:13:B4:E6:09:B3:43:8A:3B:AA:C8:17:D7:99:25
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1959
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/A5B1E03E82C311F19A754CC9CE1D38B0.roa
Signing time: Sat 18 Jul 2026 16:13:44 +0000
ROA not before: Sat 18 Jul 2026 16:13:40 +0000
ROA not after: Tue 18 Jul 2028 16:13:40 +0000
asID: 5511
IP address blocks: 102.129.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Jul 2026 00:07:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6489 (0x1959)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jul 18 16:13:40 2026 GMT
Not After : Jul 18 16:13:40 2028 GMT
Subject: CN=6a5ba638-d08f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:af:4a:fb:e0:3a:fa:3a:03:76:90:f2:97:e1:
3c:ff:7f:d6:97:f3:2e:b5:9c:a7:6c:80:31:a2:f5:
2d:64:e4:d4:d7:19:23:33:0a:73:e2:50:21:45:6c:
e8:78:c9:d1:08:92:6c:9f:dd:5c:92:cd:76:fc:26:
6e:25:e2:0d:23:06:77:23:e0:7b:f9:02:cb:53:7c:
d4:e0:19:4b:22:1f:ea:57:f4:3e:f1:ac:e7:8b:16:
01:23:7e:4c:07:ce:60:e5:e8:f1:0f:0d:e5:76:df:
25:6b:a2:fd:ff:e0:41:2f:17:a7:55:e4:f3:6a:82:
f8:d0:a5:ea:60:05:c7:d3:56:70:52:76:26:b4:03:
46:1f:ee:e6:13:9d:38:49:c8:f6:d9:de:fd:d0:fc:
25:e0:5c:68:dd:a6:bd:04:ba:8c:cc:70:f7:1e:e2:
a1:3a:2c:ec:84:32:c0:2c:0c:8f:a6:79:9b:9e:29:
1f:a6:42:02:60:66:b6:26:2a:e9:f0:3d:3e:8e:6e:
ff:3c:b8:ab:9e:c7:a6:a3:c7:98:6a:05:5f:99:5f:
fe:b6:00:1f:91:9a:63:dc:ae:33:e5:e1:20:2c:62:
41:65:d9:ea:d9:10:dd:69:a7:a7:1d:d0:8c:6d:4d:
2a:eb:7b:a3:88:32:cd:97:8a:f5:06:0a:5e:eb:f1:
5d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:60:5A:58:5E:FE:13:B4:E6:09:B3:43:8A:3B:AA:C8:17:D7:99:25
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/A5B1E03E82C311F19A754CC9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.157.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:97:80:49:d7:8e:4e:8c:a6:fc:a6:3c:c1:b8:15:2c:58:f0:
ad:12:b7:f9:0d:a8:e0:79:cd:f1:a1:3f:ee:66:db:50:30:d9:
71:68:3e:03:ea:39:63:b4:43:00:1a:49:a0:7f:8e:7a:92:23:
a3:8d:a8:8a:94:cb:2d:9e:2e:b3:ce:49:c8:03:5b:45:89:f0:
bd:6f:07:81:1d:ed:a4:14:3d:b5:04:99:e4:85:03:80:3c:d7:
24:a4:aa:62:43:fa:4f:b5:00:3f:69:f5:58:15:d7:f6:b4:74:
aa:31:47:91:05:cd:56:2c:62:05:91:cc:bf:e1:bc:f9:5d:03:
07:0c:68:0f:c6:03:c5:49:64:77:45:c2:16:f6:75:bf:6c:58:
88:61:97:14:17:17:12:15:0d:31:d8:7e:9e:3c:40:4f:76:59:
6a:a1:8b:81:62:b9:25:9d:74:10:99:14:a6:81:0d:a4:2f:30:
bb:a3:0f:6c:9a:02:50:0f:1d:26:8f:12:ba:04:c4:52:5a:12:
7b:ee:1f:75:f3:5c:dc:bb:c6:0d:14:58:48:ce:79:93:d9:0f:
c9:97:e6:22:8f:ac:8e:bf:66:53:41:7f:aa:b4:56:5e:54:6e:
95:cf:b5:24:e4:5a:51:3b:cd:6d:29:25:63:42:53:8c:9e:62:
7b:f2:85:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 14:53:14 2026 by rpki-client