Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C57C42025DA611F1B78BBEEACE1D38B0.roa
File: C57C42025DA611F1B78BBEEACE1D38B0.roa (raw, json)
Hash identifier: 6jo0Hf+RdQCdG4Za++WglBhXmToRCdkGYydlF5v4FOg=
Subject key identifier: 95:DC:89:B7:56:3E:F9:52:63:9F:66:83:19:93:6B:D2:59:CE:2E:F8
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 18C1
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C57C42025DA611F1B78BBEEACE1D38B0.roa
Signing time: Mon 01 Jun 2026 10:43:49 +0000
ROA not before: Mon 01 Jun 2026 10:43:44 +0000
ROA not after: Thu 01 Jun 2028 10:43:44 +0000
asID: 152179
IP address blocks: 102.129.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 03 Jun 2026 00:07:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6337 (0x18c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jun 1 10:43:44 2026 GMT
Not After : Jun 1 10:43:44 2028 GMT
Subject: CN=6a1d6265-159c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:b9:7e:59:4a:ee:d8:ba:d5:7c:bd:93:cd:54:
07:3e:99:b2:22:f5:fb:aa:56:51:58:82:04:b6:3c:
58:82:88:4e:23:f4:c9:c5:f6:49:6a:6f:bf:da:1e:
41:82:b1:c2:2f:e0:1c:f4:4a:91:4f:55:40:aa:c3:
25:81:b3:32:8c:e6:1c:d8:f8:9f:8b:1f:7f:31:07:
01:ca:22:94:05:c1:11:c5:48:58:fc:ee:bb:7c:9f:
ad:e1:c5:9c:4c:fd:94:64:e9:6a:ca:24:de:b3:4a:
ed:6e:a0:c0:dc:d8:d0:43:73:9e:b9:9e:f5:d6:0d:
fa:8e:32:99:2f:0b:df:9b:f7:90:38:45:2f:dd:c2:
a7:9f:3d:9a:02:80:f0:5a:4c:d4:0f:bf:d1:8b:b0:
d5:d4:c0:fd:bd:b9:c1:3a:c0:39:ee:c7:34:c0:79:
e4:2f:e7:a1:f7:04:61:b6:5d:42:6a:69:f4:00:2b:
39:07:4d:9c:e0:eb:f0:d7:a6:de:4e:41:fc:b2:be:
24:94:f0:19:d9:4f:a6:4b:d3:a1:a1:63:7e:08:a2:
d6:d3:be:ad:db:8c:68:17:ec:19:22:84:07:a9:3f:
a1:68:94:94:86:cf:de:7c:d9:80:f1:e0:e3:8c:7d:
3f:4b:05:92:87:04:d4:53:d2:78:0f:74:55:a1:d0:
42:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:DC:89:B7:56:3E:F9:52:63:9F:66:83:19:93:6B:D2:59:CE:2E:F8
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C57C42025DA611F1B78BBEEACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.139.0/24
Signature Algorithm: sha256WithRSAEncryption
64:32:a4:9a:97:fb:79:35:cb:58:a2:d0:86:cf:42:d2:dd:ac:
14:1f:50:00:68:c8:5a:95:0b:0c:91:3f:80:4d:2d:45:0c:cf:
f2:b4:99:86:8b:e8:4d:08:1f:0f:fb:6c:28:10:c7:19:f3:1e:
1f:56:e7:0f:45:f2:aa:eb:e0:36:a1:52:06:7e:0c:3d:17:00:
e9:eb:f4:63:be:3c:e3:48:3a:bc:58:ee:9a:27:f3:a1:8e:3e:
fa:9b:bb:74:0f:f4:bf:00:38:06:1c:15:e4:aa:9d:d0:44:ce:
c2:ed:bb:82:2e:e3:01:d0:5e:fc:62:da:f2:fc:5b:4e:fe:29:
f8:08:32:8d:91:23:a2:5c:28:7f:98:a8:30:73:7b:fa:7c:8c:
c9:31:1d:8e:7e:5f:6b:40:d6:d3:53:16:5f:55:07:22:f6:c4:
ba:57:bc:6b:ad:41:15:37:a0:8a:05:a5:df:46:27:7a:56:9c:
c6:85:b7:92:6a:da:0f:5f:f7:77:89:f3:95:57:bc:28:a5:f8:
8d:fb:23:8a:f4:9c:11:23:88:5c:24:7c:fe:a6:e0:37:59:20:
23:ad:44:84:15:52:15:9e:3e:e5:c5:ad:6c:54:50:d8:6d:d4:
71:7c:8c:ec:9a:33:03:ab:a1:e9:01:8f:7f:3e:8e:02:3e:33:
c5:24:96:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 1 23:45:50 2026 by rpki-client