Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B2CD33E44AD911F1BF414E06CF1D38B0.roa
File: B2CD33E44AD911F1BF414E06CF1D38B0.roa (raw, json)
Hash identifier: s6/nYboqKaLuih2yER1FFNTsG+8MioaI4wyqoKR/VOo=
Subject key identifier: 92:C2:64:D9:68:65:E9:FF:C6:A2:B6:07:6C:38:6A:D9:58:98:38:23
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1852
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B2CD33E44AD911F1BF414E06CF1D38B0.roa
Signing time: Fri 08 May 2026 12:30:30 +0000
ROA not before: Fri 08 May 2026 12:30:25 +0000
ROA not after: Mon 08 May 2028 12:30:25 +0000
asID: 834
IP address blocks: 102.129.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 12 May 2026 00:07:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6226 (0x1852)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: May 8 12:30:25 2026 GMT
Not After : May 8 12:30:25 2028 GMT
Subject: CN=69fdd765-ede9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:25:cc:5e:fb:c9:af:2c:de:dd:50:9d:d9:ab:
45:92:7b:c4:ab:21:76:60:c8:d0:eb:d3:fa:d1:aa:
14:12:74:85:93:49:53:4c:75:24:b3:d2:5d:ea:37:
46:6f:54:40:a9:f0:fb:9d:cd:93:27:62:6c:d3:99:
68:9a:41:42:6b:5c:3f:5d:47:c7:0d:41:f8:63:df:
97:9f:ad:d2:c3:15:08:ed:c4:7c:0f:15:d8:49:6a:
ec:60:38:f0:71:35:81:ac:4c:aa:5c:d3:4a:64:d3:
d4:1a:55:ee:24:42:6d:e8:3e:b2:42:ee:08:4a:94:
4e:b4:5e:90:2a:07:82:17:d2:de:dd:e7:ec:5b:ff:
9f:95:69:93:17:43:a4:52:c3:93:25:da:37:8a:06:
f4:4b:f5:cf:a7:34:f0:3a:41:ef:5b:fa:0c:82:df:
0e:a4:0b:56:63:fd:21:ae:30:52:55:f1:f7:3b:5a:
90:de:51:68:d6:dc:2f:1f:d8:48:67:6b:0f:97:65:
53:de:53:38:c1:e6:2b:5b:98:47:1f:42:41:95:ab:
5c:f4:cd:dd:13:70:f7:70:19:4e:20:00:de:ee:68:
e5:a3:15:67:09:29:d3:b0:2d:42:31:68:1b:92:d7:
5a:75:a5:18:26:56:c6:56:de:2f:36:eb:32:5a:70:
15:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:C2:64:D9:68:65:E9:FF:C6:A2:B6:07:6C:38:6A:D9:58:98:38:23
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B2CD33E44AD911F1BF414E06CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.128.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:42:27:bf:eb:f4:26:e6:ee:f5:7d:5d:9a:b2:e6:06:90:e0:
3f:7a:4f:82:59:b3:89:58:f6:28:70:25:b2:4b:ba:45:21:06:
67:1e:2f:35:00:ba:5b:0c:24:5e:4d:d8:e3:90:2a:94:5d:a5:
14:b1:0e:90:ff:6b:52:14:65:4e:b1:13:cc:1a:06:fb:4a:6a:
4d:d6:b8:59:8a:0d:70:47:3a:6a:48:28:2c:31:d6:64:47:3f:
e4:00:15:76:77:a0:99:73:49:c6:af:3c:96:69:a6:c6:fe:73:
42:a6:25:5a:7f:ce:a2:65:da:f0:aa:20:b1:68:9e:17:24:ef:
d3:98:29:ad:ea:12:0f:51:17:d8:4c:bb:56:4e:a0:39:f2:7f:
91:14:55:9c:b4:ac:af:aa:f3:f9:49:62:61:fb:66:97:5e:e6:
3f:55:f4:2e:28:9f:7c:98:07:52:59:30:4b:51:0c:d6:e0:61:
76:5e:39:7b:30:ab:e8:02:76:a3:cf:98:4d:cf:7f:c9:94:58:
ac:11:87:b9:21:aa:12:74:02:ae:42:a9:81:17:45:2e:12:cf:
48:0c:82:bc:b5:33:9e:d0:1c:08:a8:0c:de:4a:2c:7b:ce:74:
eb:57:6c:5b:ad:bf:12:bc:33:0f:5f:5b:86:f0:d9:4c:1b:d6:
78:60:bb:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 10 04:14:49 2026 by rpki-client