Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/A6886F2E59BE11F1BEDDCAABCE1D38B0.roa
File: A6886F2E59BE11F1BEDDCAABCE1D38B0.roa (raw, json)
Hash identifier: v2jJOmLJ6uW7q0iek7BiWm1WhJU/C7d6lVL4P47UzKs=
Subject key identifier: 56:35:25:94:9E:C3:C3:62:1E:12:3D:F9:D4:2E:88:5B:EE:D9:82:53
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 18B5
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/A6886F2E59BE11F1BEDDCAABCE1D38B0.roa
Signing time: Wed 27 May 2026 11:24:40 +0000
ROA not before: Wed 27 May 2026 11:24:35 +0000
ROA not after: Sat 27 May 2028 11:24:35 +0000
asID: 214266
IP address blocks: 102.129.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 29 May 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6325 (0x18b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: May 27 11:24:35 2026 GMT
Not After : May 27 11:24:35 2028 GMT
Subject: CN=6a16d478-93a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:02:b3:9d:9a:11:6d:be:2a:c1:ae:e1:66:f7:
8a:34:47:66:34:d7:8a:b6:68:a4:6a:e1:f8:fa:89:
27:26:59:ea:70:8e:b5:4d:6f:19:57:ce:09:16:83:
6a:a6:6a:7e:90:00:17:3a:18:42:bc:5d:ef:15:d9:
31:81:0b:9d:57:09:97:bc:4a:7a:fd:dc:fd:0d:08:
e4:81:e1:d8:65:17:d7:bc:90:03:c0:49:a8:b9:4c:
30:9f:4a:c9:6c:0e:e2:85:34:fb:09:35:d7:07:bc:
fc:6f:7e:eb:dd:f7:ff:10:49:28:f5:8a:c2:cb:4d:
ca:ab:05:7a:39:d0:c6:92:eb:dd:42:72:c7:ee:17:
ef:d8:42:6a:2f:9d:fc:f5:ae:88:90:da:9a:3a:90:
02:1e:d4:6c:1a:a6:12:1a:65:6c:70:14:16:57:7c:
36:c9:4c:7c:cf:89:6f:c4:5e:24:6b:b9:9c:4e:61:
d2:3b:60:17:88:1f:11:43:9b:66:6a:0e:79:17:ff:
20:7b:2d:e4:98:3a:b2:0c:55:b4:83:1c:6b:a0:a6:
fa:4f:25:d7:d9:d6:fa:ab:57:f5:87:38:bb:3c:fe:
7b:8f:4c:a0:ef:28:35:ec:cd:07:43:ca:fe:55:e8:
52:54:76:8f:89:f9:99:e6:36:0b:c6:6a:9d:d0:31:
65:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:35:25:94:9E:C3:C3:62:1E:12:3D:F9:D4:2E:88:5B:EE:D9:82:53
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/A6886F2E59BE11F1BEDDCAABCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.199.0/24
Signature Algorithm: sha256WithRSAEncryption
41:26:72:0e:0c:aa:56:d0:46:0e:db:39:c9:18:ee:69:2d:c7:
c9:e1:a5:76:a7:f3:8a:79:9e:b3:4e:44:31:86:39:ed:08:29:
b6:21:84:4e:f9:51:c7:7f:c5:38:82:8b:f2:bb:29:67:8b:0b:
2f:f0:0e:b9:09:f6:97:7a:b2:b1:5f:7a:39:ff:cc:fc:3a:75:
31:fb:f1:0f:1c:ae:fc:c7:b1:45:56:ec:ea:a3:9f:e3:3a:ea:
d0:d7:63:d6:54:c0:45:16:9d:a3:3a:17:b9:25:7e:56:66:1a:
5e:49:1d:e4:ee:34:76:eb:e6:a1:bb:9b:2c:73:0e:db:05:b2:
0d:37:69:3e:43:0b:c4:8e:81:41:22:e1:16:22:2a:83:31:db:
65:36:66:6a:53:65:30:ae:63:b6:0e:7e:8d:54:82:eb:da:01:
cf:d3:eb:60:8c:cd:39:f7:6a:a8:f8:8b:9b:36:1a:c5:3d:f5:
9c:d1:38:0c:5b:74:39:ba:a4:e9:ce:d1:a4:35:b9:79:b0:58:
fa:29:a1:02:c7:d0:a1:c3:2b:5a:8c:6d:f9:34:38:0b:18:63:
dc:32:16:cb:4b:b2:2c:a9:7a:89:18:4c:d2:1d:85:b5:6f:bb:
4b:c1:96:00:d3:27:ff:7c:61:29:2c:81:c9:62:7c:e3:8a:a3:
85:2f:31:3e
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICGLUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yNjA1MjcxMTI0MzVaFw0yODA1MjcxMTI0MzVaMBgxFjAU
BgNVBAMTDTZhMTZkNDc4LTkzYTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCxArOdmhFtvirBruFm94o0R2Y014q2aKRq4fj6iScmWepwjrVNbxlXzgkW
g2qman6QABc6GEK8Xe8V2TGBC51XCZe8Snr93P0NCOSB4dhlF9e8kAPASai5TDCf
SslsDuKFNPsJNdcHvPxvfuvd9/8QSSj1isLLTcqrBXo50MaS691CcsfuF+/YQmov
nfz1roiQ2po6kAIe1GwaphIaZWxwFBZXfDbJTHzPiW/EXiRruZxOYdI7YBeIHxFD
m2ZqDnkX/yB7LeSYOrIMVbSDHGugpvpPJdfZ1vqrV/WHOLs8/nuPTKDvKDXszQdD
yv5V6FJUdo+J+ZnmNgvGap3QMWVVAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUVjUl
lJ7Dw2IeEj351C6IW+7ZglMwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4L0E2ODg2RjJFNTlCRTExRjFCRUREQ0FBQkNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgccwDQYJKoZIhvcNAQEL
BQADggEBAEEmcg4MqlbQRg7bOckY7mktx8nhpXan84p5nrNORDGGOe0IKbYhhE75
Ucd/xTiCi/K7KWeLCy/wDrkJ9pd6srFfejn/zPw6dTH78Q8crvzHsUVW7Oqjn+M6
6tDXY9ZUwEUWnaM6F7klflZmGl5JHeTuNHbr5qG7myxzDtsFsg03aT5DC8SOgUEi
4RYiKoMx22U2ZmpTZTCuY7YOfo1UguvaAc/T62CMzTn3aqj4i5s2GsU99ZzROAxb
dDm6pOnO0aQ1uXmwWPopoQLH0KHDK1qMbfk0OAsYY9wyFstLsiypeokYTNIdhbVv
u0vBlgDTJ/98YSksgclifOOKo4UvMT4=
-----END CERTIFICATE-----
Generated at Wed May 27 17:19:06 2026 by rpki-client