Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C49580864F9811F19661E3E0CE1D38B0.roa
File: C49580864F9811F19661E3E0CE1D38B0.roa (raw, json)
Hash identifier: 71QnS2ymSo7e61DQ1C6E8Trs48joyqSd0wfr3rNznZw=
Subject key identifier: 88:D9:62:9B:31:44:04:AC:F4:18:EB:7E:B6:55:0B:E6:8B:04:1C:F2
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 186C
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C49580864F9811F19661E3E0CE1D38B0.roa
Signing time: Thu 14 May 2026 13:28:18 +0000
ROA not before: Thu 14 May 2026 13:28:13 +0000
ROA not after: Sun 14 May 2028 13:28:13 +0000
asID: 13213
IP address blocks: 102.129.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 16 May 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6252 (0x186c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: May 14 13:28:13 2026 GMT
Not After : May 14 13:28:13 2028 GMT
Subject: CN=6a05cdf2-6900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:64:11:0d:35:45:e6:67:8b:30:95:a8:61:9a:
86:c4:9a:42:5a:47:42:e9:49:87:ba:62:29:53:9e:
34:03:22:91:fc:21:cd:e9:76:df:05:98:d6:54:1d:
f2:c6:6f:64:dc:75:f1:ac:d0:b3:b5:b8:33:42:c6:
5a:4d:a2:53:30:97:62:b9:0e:aa:05:9b:98:4e:62:
1e:89:44:3e:6b:13:9c:61:25:76:99:58:bf:04:16:
3d:a1:1e:bd:65:f8:7b:4d:8b:d2:52:c9:26:fa:6b:
a8:9f:db:ff:f1:40:88:4b:3c:8b:ea:01:c6:9f:f0:
90:7f:33:eb:30:3c:b9:ff:a9:35:a3:42:76:5e:5e:
d5:7f:10:6a:a0:e2:6e:58:13:44:2a:53:2e:d2:45:
93:ff:99:22:cd:f3:b9:de:bf:02:44:b4:d6:c8:a1:
7c:cf:c5:f7:06:48:b4:ca:90:b6:59:be:a3:48:23:
71:31:09:76:d8:bc:53:a4:c8:b7:76:b6:38:54:fc:
91:63:46:89:84:c8:e0:cd:a6:f2:7f:16:41:28:ce:
cf:bf:74:84:b6:5f:ab:1e:53:b4:c0:2c:d9:bf:0e:
8c:26:0a:6d:5d:8e:60:0a:c2:b7:35:fd:1f:d7:cf:
3a:8c:45:22:4e:fd:04:3b:4a:d2:a0:ba:5b:23:e6:
75:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:D9:62:9B:31:44:04:AC:F4:18:EB:7E:B6:55:0B:E6:8B:04:1C:F2
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C49580864F9811F19661E3E0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.128.0/24
Signature Algorithm: sha256WithRSAEncryption
77:98:ff:b1:a6:ad:45:17:29:bd:b2:f3:b2:9c:7b:0c:da:4f:
ff:46:3a:ac:eb:79:07:96:f7:cc:14:53:ea:18:dc:d6:b6:bd:
92:16:03:87:16:91:36:33:32:3e:fc:e1:83:ca:69:39:c8:71:
dc:61:91:d3:c5:2e:bb:a7:ff:3b:55:fb:04:45:d9:08:cc:fd:
3b:72:f3:4d:7d:e3:66:e8:99:8a:8d:3a:32:bb:60:dd:28:84:
d4:0b:0f:0c:a7:ad:fe:24:b3:b1:79:36:90:22:2c:e4:ca:68:
4a:22:dd:9e:bb:a2:91:b5:c2:73:3c:cf:82:1f:7b:ac:cc:df:
21:94:f1:4b:c1:e3:98:e0:b0:11:94:7f:c6:17:79:ea:85:6f:
a3:f8:de:0f:b5:b8:3a:59:d4:46:62:bd:77:9e:90:b7:a0:67:
63:37:ba:62:dd:06:3c:07:74:6b:43:31:d0:0f:ce:08:c2:6b:
58:38:73:99:33:98:ae:34:6d:07:06:88:d8:04:f7:68:fa:1f:
c1:65:59:3f:a6:ec:2e:5a:d6:4c:30:8b:77:df:62:86:45:11:
bd:c1:6c:47:22:39:f8:06:37:4d:7e:18:51:b7:18:a4:92:04:
bf:62:d1:82:d7:1e:58:a7:28:93:26:f0:c2:93:8a:8c:82:2a:
3d:1d:5f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 14 19:20:43 2026 by rpki-client