Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/A5CA2E2A915D11F18869C2D3CE1D38B0.roa
File: A5CA2E2A915D11F18869C2D3CE1D38B0.roa (raw, json)
Hash identifier: KypHu/ol3ffQt+5iOIzHxidrsRFXqhRfT/DPPE+/kgM=
Subject key identifier: 3F:F4:7C:D1:2B:4D:90:5D:0E:74:2C:82:CA:50:DA:6E:6C:A0:9A:5B
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 198C
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/A5CA2E2A915D11F18869C2D3CE1D38B0.roa
Signing time: Thu 06 Aug 2026 06:11:23 +0000
ROA not before: Thu 06 Aug 2026 06:11:19 +0000
ROA not after: Sun 06 Aug 2028 06:11:19 +0000
asID: 137409
IP address blocks: 102.129.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6540 (0x198c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Aug 6 06:11:19 2026 GMT
Not After : Aug 6 06:11:19 2028 GMT
Subject: CN=6a74258b-12de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d9:02:f1:b8:1a:35:49:af:5b:9f:82:33:fe:
1b:c7:dc:4c:99:10:7e:81:17:cf:85:e4:b0:ea:7e:
df:19:8a:19:82:07:b1:69:f0:7f:10:ab:ae:0d:63:
48:ef:e0:a6:8c:61:f1:16:11:dd:b2:2e:51:1d:ee:
6e:7c:81:6b:e7:eb:23:de:06:2d:57:ff:4a:a4:1a:
34:a0:8d:71:17:19:c2:dc:cd:f5:a7:bc:8e:33:41:
c1:48:88:ef:1e:5c:d7:0c:9e:8b:e8:9b:48:86:7b:
a6:15:4a:eb:1a:df:a9:49:d8:a7:3f:52:52:0e:1c:
02:6b:da:a1:1a:99:45:e0:29:f7:8b:f9:5b:a7:19:
0f:6f:75:34:18:42:35:0a:aa:4c:cd:a7:dc:68:ca:
c8:c2:a0:ea:19:0d:b7:f0:9d:13:73:8f:e9:30:43:
17:e4:31:46:13:61:d9:04:1d:1c:53:e4:c1:2c:29:
23:c8:2d:4f:79:68:16:92:87:c5:e8:81:ed:e6:c7:
b1:2f:2d:c0:68:1c:70:e5:b4:9a:70:c9:39:b8:eb:
4e:8e:34:ff:58:78:9e:e7:54:4c:00:83:9f:3b:3e:
12:35:d5:31:49:a3:33:f3:1d:46:3b:51:06:11:10:
4c:7b:07:43:09:99:66:7d:fc:84:c1:73:5b:a0:83:
50:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:F4:7C:D1:2B:4D:90:5D:0E:74:2C:82:CA:50:DA:6E:6C:A0:9A:5B
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/A5CA2E2A915D11F18869C2D3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.173.0/24
Signature Algorithm: sha256WithRSAEncryption
32:c2:74:d9:3b:43:58:bf:71:80:48:cf:2a:af:f0:fc:7d:64:
9c:f8:2c:e2:82:ac:57:0d:61:76:58:98:50:2a:82:ea:61:6a:
c9:6a:38:aa:cd:fc:da:fb:e7:f9:ef:6b:ac:da:22:eb:92:a5:
0e:ff:c7:8a:a3:f2:a8:23:ef:39:86:17:4c:01:a1:9e:56:43:
d5:57:e3:f2:3c:19:e7:33:01:cb:5a:8b:0a:f2:3c:5e:5d:37:
63:4b:c9:fc:f9:72:22:8c:52:19:c6:22:ac:8d:7f:60:05:a2:
45:7f:5a:d3:81:df:d8:5a:e3:51:54:6c:bf:f8:a7:67:c3:9e:
00:94:b8:79:6c:c5:a0:08:47:f0:d2:e4:7d:de:13:3f:41:bd:
b0:c9:85:4a:02:cf:05:0d:ef:77:05:4c:f3:d2:09:08:5a:eb:
5a:c3:73:77:1d:8e:d7:eb:ef:f3:3e:a6:b9:50:4b:ca:0a:87:
68:ae:50:c0:5d:2f:ee:23:87:97:d8:97:bf:b8:db:81:fa:e9:
b6:38:bd:3e:a5:11:4f:d4:0b:5c:04:b1:e4:a1:62:98:47:ab:
64:2c:b6:f6:78:f5:d5:f8:88:ac:2a:fa:ef:ec:a4:74:be:b5:
02:7f:9c:70:c4:07:e5:87:9d:c4:a4:cc:b2:18:c9:88:8d:f6:
eb:25:f9:90
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICGYwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yNjA4MDYwNjExMTlaFw0yODA4MDYwNjExMTlaMBgxFjAU
BgNVBAMTDTZhNzQyNThiLTEyZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC/2QLxuBo1Sa9bn4Iz/hvH3EyZEH6BF8+F5LDqft8ZihmCB7Fp8H8Qq64N
Y0jv4KaMYfEWEd2yLlEd7m58gWvn6yPeBi1X/0qkGjSgjXEXGcLczfWnvI4zQcFI
iO8eXNcMnovom0iGe6YVSusa36lJ2Kc/UlIOHAJr2qEamUXgKfeL+VunGQ9vdTQY
QjUKqkzNp9xoysjCoOoZDbfwnRNzj+kwQxfkMUYTYdkEHRxT5MEsKSPILU95aBaS
h8Xoge3mx7EvLcBoHHDltJpwyTm4606ONP9YeJ7nVEwAg587PhI11TFJozPzHUY7
UQYREEx7B0MJmWZ9/ITBc1ugg1DlAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUP/R8
0StNkF0OdCyCylDabmygmlswHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4L0E1Q0EyRTJBOTE1RDExRjE4ODY5QzJEM0NFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmga0wDQYJKoZIhvcNAQEL
BQADggEBADLCdNk7Q1i/cYBIzyqv8Px9ZJz4LOKCrFcNYXZYmFAqguphaslqOKrN
/Nr75/nva6zaIuuSpQ7/x4qj8qgj7zmGF0wBoZ5WQ9VX4/I8GeczActaiwryPF5d
N2NLyfz5ciKMUhnGIqyNf2AFokV/WtOB39ha41FUbL/4p2fDngCUuHlsxaAIR/DS
5H3eEz9BvbDJhUoCzwUN73cFTPPSCQha61rDc3cdjtfr7/M+prlQS8oKh2iuUMBd
L+4jh5fYl7+424H66bY4vT6lEU/UC1wEseShYphHq2QstvZ49dX4iKwq+u/spHS+
tQJ/nHDEB+WHncSkzLIYyYiN9usl+ZA=
-----END CERTIFICATE-----
Generated at Thu Aug 6 09:37:01 2026 by rpki-client