Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/A60B9E886AF111F1829EC5B6CE1D38B0.roa
File: A60B9E886AF111F1829EC5B6CE1D38B0.roa (raw, json)
Hash identifier: vC1o8c0LZl7JC1bnrFiiAg7N9KrvlUeyUf/jEXQc2Kg=
Subject key identifier: BD:85:51:F0:78:9D:B7:55:8A:43:E2:BC:B7:08:51:A1:44:76:B0:F9
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 18F7
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/A60B9E886AF111F1829EC5B6CE1D38B0.roa
Signing time: Thu 18 Jun 2026 08:42:33 +0000
ROA not before: Thu 18 Jun 2026 08:42:29 +0000
ROA not after: Sun 18 Jun 2028 08:42:29 +0000
asID: 834
IP address blocks: 102.129.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 20 Jun 2026 01:09:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6391 (0x18f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jun 18 08:42:29 2026 GMT
Not After : Jun 18 08:42:29 2028 GMT
Subject: CN=6a33af79-cf62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d0:a8:d3:aa:45:e9:65:39:39:2f:48:ed:fc:
9c:1c:31:23:d2:5b:03:ae:e1:75:41:f7:28:3b:22:
20:8a:1b:6d:57:e4:22:d9:32:cd:45:cf:c7:a1:a4:
a5:94:9d:02:a2:dc:ba:67:2a:67:9d:2e:c8:36:00:
e6:ee:19:a0:5a:9f:03:c2:67:28:b8:ab:cb:ce:ad:
ea:1b:14:a4:1a:1d:cc:da:52:64:c8:b9:f8:9c:25:
97:af:43:8e:ac:f0:ed:72:46:06:db:1b:14:d1:33:
c4:dc:26:8f:a7:18:a0:c9:04:5f:bf:ff:db:9b:a1:
43:97:fb:ce:15:a5:60:8d:89:db:8a:46:cf:60:f1:
20:e2:c2:58:26:1e:48:33:0f:14:62:55:6e:a3:61:
2f:b6:66:e9:f3:92:e7:d7:59:04:84:84:48:08:b2:
47:79:30:a5:a8:9f:7e:c9:d3:a3:c6:72:31:63:a2:
d6:2e:2f:9a:3f:f5:5d:c8:2e:43:d7:22:6e:bb:eb:
82:e9:e5:37:09:3d:4b:3b:90:9e:ac:5c:d7:e3:95:
9e:b2:11:5f:34:2e:76:3d:ac:9f:29:fa:31:0d:51:
c7:c6:42:0f:cf:5f:be:ea:c4:ac:36:a8:1b:4f:0c:
31:52:30:ca:51:a7:18:11:3a:ea:98:5d:4d:7e:57:
96:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:85:51:F0:78:9D:B7:55:8A:43:E2:BC:B7:08:51:A1:44:76:B0:F9
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/A60B9E886AF111F1829EC5B6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.167.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:9c:01:8b:bf:26:3d:0b:49:c6:17:ac:f8:73:0b:8e:23:ab:
26:f1:9d:dd:23:6a:bf:b3:9d:29:9c:5b:a3:e9:43:29:e8:c1:
f6:80:c7:e1:79:03:be:93:33:1e:45:82:42:8e:87:b0:c1:fd:
01:a7:cf:b7:10:c8:e0:3e:4a:a7:09:76:34:d2:c8:c7:f5:23:
46:2a:17:2a:13:8c:4b:a1:57:b8:b3:7b:4f:ff:5e:3b:34:a0:
84:ff:5b:fb:98:ce:c3:9f:1f:65:7b:ac:a1:5b:22:32:87:4c:
da:bc:d6:5f:e5:c3:46:c1:36:92:d9:96:f5:7e:13:ff:d0:6a:
a4:e2:ae:77:22:1b:42:23:2c:da:bd:65:90:bc:58:64:5b:19:
95:bb:c1:ca:e2:7d:8b:a4:3d:01:69:1d:51:f8:e2:bc:4b:02:
a9:fb:34:bb:a6:70:73:d5:ef:15:b3:e9:4f:86:40:36:4f:62:
e0:0f:df:0d:d4:2c:d4:02:09:4e:ba:16:ae:c3:37:65:71:e5:
e3:2f:f7:6b:93:76:e1:0d:01:40:9e:86:e4:7a:21:4d:41:b5:
a7:bb:45:91:a3:81:65:b0:66:a2:ae:13:6b:1d:82:31:2e:47:
33:39:79:f6:54:f1:39:a9:63:f3:b3:14:6b:00:9b:61:6f:26:
23:35:a4:ca
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICGPcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yNjA2MTgwODQyMjlaFw0yODA2MTgwODQyMjlaMBgxFjAU
BgNVBAMTDTZhMzNhZjc5LWNmNjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC20KjTqkXpZTk5L0jt/JwcMSPSWwOu4XVB9yg7IiCKG21X5CLZMs1Fz8eh
pKWUnQKi3LpnKmedLsg2AObuGaBanwPCZyi4q8vOreobFKQaHczaUmTIuficJZev
Q46s8O1yRgbbGxTRM8TcJo+nGKDJBF+//9uboUOX+84VpWCNiduKRs9g8SDiwlgm
HkgzDxRiVW6jYS+2ZunzkufXWQSEhEgIskd5MKWon37J06PGcjFjotYuL5o/9V3I
LkPXIm6764Lp5TcJPUs7kJ6sXNfjlZ6yEV80LnY9rJ8p+jENUcfGQg/PX77qxKw2
qBtPDDFSMMpRpxgROuqYXU1+V5a5AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUvYVR
8Hidt1WKQ+K8twhRoUR2sPkwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4L0E2MEI5RTg4NkFGMTExRjE4MjlFQzVCNkNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgacwDQYJKoZIhvcNAQEL
BQADggEBAA2cAYu/Jj0LScYXrPhzC44jqybxnd0jar+znSmcW6PpQynowfaAx+F5
A76TMx5FgkKOh7DB/QGnz7cQyOA+SqcJdjTSyMf1I0YqFyoTjEuhV7ize0//Xjs0
oIT/W/uYzsOfH2V7rKFbIjKHTNq81l/lw0bBNpLZlvV+E//QaqTirnciG0IjLNq9
ZZC8WGRbGZW7wcrifYukPQFpHVH44rxLAqn7NLumcHPV7xWz6U+GQDZPYuAP3w3U
LNQCCU66Fq7DN2Vx5eMv92uTduENAUCehuR6IU1Btae7RZGjgWWwZqKuE2sdgjEu
RzM5efZU8TmpY/OzFGsAm2FvJiM1pMo=
-----END CERTIFICATE-----
Generated at Thu Jun 18 20:19:41 2026 by rpki-client