Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C20E90264C3911F1961ECDE8CE1D38B0.roa
File: C20E90264C3911F1961ECDE8CE1D38B0.roa (raw, json)
Hash identifier: 7tPFRPtPMtZXxHqjWWjLmAylHX5M/3Hl1jPslwsoqKw=
Subject key identifier: C2:FB:46:88:A3:E2:D0:C5:29:C7:6A:0B:DD:4A:95:3A:82:5C:BC:6B
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 185E
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C20E90264C3911F1961ECDE8CE1D38B0.roa
Signing time: Sun 10 May 2026 06:30:38 +0000
ROA not before: Sun 10 May 2026 06:30:33 +0000
ROA not after: Wed 10 May 2028 06:30:33 +0000
asID: 396356
IP address blocks: 102.129.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 13 May 2026 00:07:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6238 (0x185e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: May 10 06:30:33 2026 GMT
Not After : May 10 06:30:33 2028 GMT
Subject: CN=6a00260e-a8fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9a:31:43:59:0c:f4:5f:d6:a4:21:4c:d3:3e:
ee:15:a5:2b:6c:29:7e:bf:f7:a5:64:05:1b:1a:fd:
a2:8c:ea:14:fa:8a:4d:d4:fa:26:b9:43:88:44:6f:
1d:52:de:83:ff:f5:11:b6:49:44:c7:b3:52:fc:59:
e2:42:59:2f:ce:d2:29:4a:65:73:d1:71:47:fc:e7:
b7:d4:41:c3:4b:25:da:df:ba:45:bb:f2:d1:e4:54:
e7:de:8b:59:4f:df:60:f5:fe:c2:f8:1b:9d:0e:dc:
74:8b:c8:d3:d9:14:4c:4f:2e:87:f3:62:d2:47:62:
23:c6:f8:5f:77:88:30:80:78:b9:91:30:d2:20:a5:
0e:bf:4d:46:86:2a:7e:fb:92:fe:4f:ed:eb:db:55:
b9:6c:65:df:45:12:3b:35:f5:78:f9:e9:e1:2e:26:
eb:b9:cc:94:de:2f:b0:91:55:f0:e5:ba:1a:ba:62:
0a:8c:1e:b0:02:a6:50:20:11:f5:6d:29:ee:b3:7b:
37:59:c1:fd:e1:5a:b0:2a:a6:61:67:73:71:24:16:
58:b1:69:48:19:3c:67:88:b9:fa:0f:c9:76:ae:d7:
9a:97:82:c5:33:fb:09:20:7f:ea:80:45:68:a3:3d:
aa:3c:db:50:02:ae:f0:fb:d0:9f:23:8c:3d:3d:a7:
ef:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:FB:46:88:A3:E2:D0:C5:29:C7:6A:0B:DD:4A:95:3A:82:5C:BC:6B
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C20E90264C3911F1961ECDE8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.231.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:4c:f6:3e:05:69:ed:37:18:c7:90:97:9d:06:3c:91:da:8b:
c2:fb:9d:56:27:b8:87:dc:11:fe:b6:ad:ca:84:60:a6:85:66:
b2:9a:5f:e8:69:a1:c1:02:0b:4b:5e:e3:c0:28:71:f5:87:7a:
60:33:02:95:7a:32:bb:68:71:39:b2:2e:df:c3:4e:c3:b2:af:
0d:51:63:0a:36:ee:e6:72:59:a0:33:4d:87:29:a0:f3:93:cf:
79:f5:bc:b3:4a:ab:16:a9:b2:13:84:be:3c:3d:4b:8e:83:c0:
a3:2c:46:ca:ea:3f:34:65:d3:04:84:bb:3a:45:84:f3:19:44:
72:59:11:1c:3c:dd:1d:59:6e:c4:20:0c:13:0c:5f:12:8b:8c:
47:2e:70:7c:45:b2:84:ec:ba:c4:b4:51:9b:75:16:f1:46:44:
47:56:ed:ad:0a:b6:82:18:6f:ad:32:5b:42:c6:84:4f:9d:ab:
df:b3:ac:6e:4f:44:af:0d:ba:51:80:97:5e:db:d2:5b:ae:ab:
43:ab:21:46:17:ab:a7:62:61:28:e0:e1:68:fd:fe:35:22:a9:
9f:5b:62:8c:ac:fb:4e:d2:a9:11:56:3c:b7:31:3b:cd:b7:29:
f2:d2:92:82:98:0b:f4:1f:84:c5:84:54:b3:0c:d2:6d:85:59:
f9:46:d2:1f
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICGF4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yNjA1MTAwNjMwMzNaFw0yODA1MTAwNjMwMzNaMBgxFjAU
BgNVBAMTDTZhMDAyNjBlLWE4ZmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCmmjFDWQz0X9akIUzTPu4VpStsKX6/96VkBRsa/aKM6hT6ik3U+ia5Q4hE
bx1S3oP/9RG2SUTHs1L8WeJCWS/O0ilKZXPRcUf857fUQcNLJdrfukW78tHkVOfe
i1lP32D1/sL4G50O3HSLyNPZFExPLofzYtJHYiPG+F93iDCAeLmRMNIgpQ6/TUaG
Kn77kv5P7evbVblsZd9FEjs19Xj56eEuJuu5zJTeL7CRVfDluhq6YgqMHrACplAg
EfVtKe6zezdZwf3hWrAqpmFnc3EkFlixaUgZPGeIufoPyXau15qXgsUz+wkgf+qA
RWijPao821ACrvD70J8jjD09p+9xAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUwvtG
iKPi0MUpx2oL3UqVOoJcvGswHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4L0MyMEU5MDI2NEMzOTExRjE5NjFFQ0RFOENFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgecwDQYJKoZIhvcNAQEL
BQADggEBAMlM9j4Fae03GMeQl50GPJHai8L7nVYnuIfcEf62rcqEYKaFZrKaX+hp
ocECC0te48AocfWHemAzApV6MrtocTmyLt/DTsOyrw1RYwo27uZyWaAzTYcpoPOT
z3n1vLNKqxapshOEvjw9S46DwKMsRsrqPzRl0wSEuzpFhPMZRHJZERw83R1ZbsQg
DBMMXxKLjEcucHxFsoTsusS0UZt1FvFGREdW7a0KtoIYb60yW0LGhE+dq9+zrG5P
RK8NulGAl17b0luuq0OrIUYXq6diYSjg4Wj9/jUiqZ9bYoys+07SqRFWPLcxO823
KfLSkoKYC/QfhMWEVLMM0m2FWflG0h8=
-----END CERTIFICATE-----
Generated at Mon May 11 04:34:51 2026 by rpki-client