Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B94C105C794911F19B53CFA1CE1D38B0.roa
File: B94C105C794911F19B53CFA1CE1D38B0.roa (raw, json)
Hash identifier: hV31qrjqVQ8lcyn+HItb1h4TNt3Od3MuO64Rjoe6XbY=
Subject key identifier: D5:CD:81:1F:95:32:24:0D:7A:FB:FA:97:13:68:B9:E8:1D:C6:A1:5C
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 193E
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B94C105C794911F19B53CFA1CE1D38B0.roa
Signing time: Mon 06 Jul 2026 14:48:18 +0000
ROA not before: Mon 06 Jul 2026 14:48:12 +0000
ROA not after: Thu 06 Jul 2028 14:48:12 +0000
asID: 203905
IP address blocks: 102.129.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 09 Jul 2026 00:07:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6462 (0x193e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jul 6 14:48:12 2026 GMT
Not After : Jul 6 14:48:12 2028 GMT
Subject: CN=6a4bc032-7886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f1:fc:25:a4:4a:24:a8:65:8f:73:6e:1d:4f:
4d:3b:fe:9f:30:6d:93:55:c0:64:7a:42:83:d2:77:
10:18:03:14:d7:64:0a:56:2c:ed:10:88:12:29:6c:
e3:37:82:04:25:9e:82:ba:d9:19:65:a7:0f:25:e7:
83:b3:f7:c8:5e:f6:43:bf:75:96:56:6a:b4:02:1c:
2e:7e:96:94:ba:7e:b8:13:69:15:fb:63:b5:36:4f:
69:2b:bd:20:b8:60:db:bc:32:5e:e2:57:cc:58:2d:
66:f7:de:2b:09:d8:18:b7:c1:05:3c:77:36:4b:de:
59:72:23:0a:3f:bd:ed:4a:21:94:40:10:85:5b:04:
43:23:a8:0f:1d:f7:3f:08:66:ad:86:88:d1:19:9e:
f9:c6:83:f6:19:b7:54:47:c2:a3:0c:35:06:1d:64:
83:9a:59:7e:2f:1c:ce:fe:5d:d3:61:35:c7:9e:24:
05:c0:42:e1:0f:c5:66:1d:09:84:54:9b:e6:0e:8e:
c1:40:f5:c3:5b:d7:81:b6:55:d9:2a:65:a8:b2:74:
5c:1b:c2:6c:89:21:2c:ec:d7:3f:1c:e7:3f:91:85:
d9:91:d1:fe:73:dc:e7:fa:b4:cc:af:55:0c:d8:e2:
68:11:b6:c8:e7:03:9f:2f:8e:97:1a:92:42:5a:bb:
e0:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:CD:81:1F:95:32:24:0D:7A:FB:FA:97:13:68:B9:E8:1D:C6:A1:5C
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B94C105C794911F19B53CFA1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.217.0/24
Signature Algorithm: sha256WithRSAEncryption
80:06:77:7a:be:74:4f:ee:0c:6f:ba:67:53:5a:c7:a7:a5:54:
1e:a4:86:ff:75:6f:a2:31:c5:4e:49:87:16:fb:3d:00:d8:b8:
6d:85:92:f5:e5:9b:99:c8:14:71:d1:f1:bd:ea:cb:0f:9e:13:
5a:9e:db:f7:dd:05:09:ce:f0:b0:ce:8c:cc:69:07:07:54:de:
3c:a8:bf:e7:6b:62:10:ce:06:ab:f2:3e:cb:9d:f8:28:a1:a2:
81:2a:6f:90:c8:4f:0b:fe:b2:3d:4d:fb:31:f5:73:4e:f1:b4:
ba:89:4b:03:f3:1e:c9:30:80:8e:1c:18:ea:3a:cf:97:8a:2d:
4f:ea:65:5d:e0:14:f6:c4:d6:f3:cd:fa:06:5d:26:14:dc:97:
66:52:cf:07:2f:c1:e4:f2:73:bf:1a:de:19:25:b1:92:20:4c:
bb:e2:15:e7:92:92:07:53:f6:68:ef:8c:ef:d9:69:f9:32:01:
7a:42:ac:9b:2a:61:39:a5:8d:70:f2:c5:fd:51:69:6f:be:f3:
af:ed:35:26:2f:e2:0d:50:cf:0c:05:80:f0:c9:af:72:2e:bc:
1d:fe:3a:30:ba:e0:9b:92:b6:e5:7a:77:37:2e:7e:00:c2:46:
e0:09:79:13:96:7b:eb:2e:86:fd:a0:c4:0a:c6:f3:68:e7:9f:
a1:ae:c7:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 10:05:33 2026 by rpki-client