Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C605D24C6AE911F1BDF93308CF1D38B0.roa
File: C605D24C6AE911F1BDF93308CF1D38B0.roa (raw, json)
Hash identifier: LpkT9lzVOEwOQtRzh6mDlVr9YMgoDodYRGrE8DEFNtU=
Subject key identifier: 14:EE:58:E7:18:05:6E:09:86:51:5A:62:00:4C:DF:7C:6E:20:3F:8A
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 18F4
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C605D24C6AE911F1BDF93308CF1D38B0.roa
Signing time: Thu 18 Jun 2026 07:46:11 +0000
ROA not before: Thu 18 Jun 2026 07:46:07 +0000
ROA not after: Sun 18 Jun 2028 07:46:07 +0000
asID: 212238
IP address blocks: 102.129.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 20 Jun 2026 01:09:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6388 (0x18f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jun 18 07:46:07 2026 GMT
Not After : Jun 18 07:46:07 2028 GMT
Subject: CN=6a33a243-d06f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:68:a9:69:01:90:58:57:2a:dd:66:e9:4d:2a:
a6:ef:29:88:b5:9b:5a:b5:2f:f0:14:e2:e7:b3:94:
7a:f5:e5:37:c0:49:01:52:14:6f:85:ef:3a:c5:c5:
df:fa:b1:e5:ed:99:c1:5b:1f:e5:d1:ca:a2:81:37:
cb:79:15:00:04:fb:1c:a2:02:18:bb:65:5d:c2:80:
0e:7b:f7:5b:d4:fa:5e:95:00:5a:48:69:14:96:fb:
3f:6e:d2:2c:12:dd:3d:4b:c4:b9:a0:2f:78:f2:b1:
78:e1:ef:99:76:03:53:64:15:34:7f:d5:ba:74:a7:
70:4f:24:22:3d:0b:9d:5e:06:5d:ca:4f:65:2d:7a:
09:4f:34:4c:0b:ea:d4:94:be:aa:bb:98:03:bb:7b:
75:93:7e:35:23:1e:e2:97:77:24:cf:5c:37:0e:8d:
74:14:fb:49:50:17:2a:9e:79:b3:18:cc:4e:b8:85:
7a:a3:7a:42:ed:3b:ee:29:84:2c:e5:a2:48:7b:94:
2f:85:8d:69:74:b0:07:51:5b:e1:cc:7e:03:94:3b:
64:1e:91:d8:2b:af:34:13:af:f4:79:1a:80:1b:70:
94:04:a4:2b:a1:a0:1e:c1:95:86:ad:4e:e7:dc:9c:
d9:7e:c8:6d:99:cb:af:aa:fc:9b:1d:cc:ef:6a:96:
21:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:EE:58:E7:18:05:6E:09:86:51:5A:62:00:4C:DF:7C:6E:20:3F:8A
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C605D24C6AE911F1BDF93308CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.217.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:87:93:b3:50:33:c0:05:69:8d:47:63:b6:db:10:ef:0e:e1:
9d:6d:47:67:7b:14:e4:ea:6f:d4:7d:b6:11:5a:cf:6b:97:0e:
99:8b:d9:e8:5f:68:ec:08:dc:11:e6:7e:9a:d3:47:50:fc:2d:
96:00:5c:78:d8:5f:55:46:1a:5a:a6:e8:6f:aa:b2:00:dd:ed:
e4:a0:6a:bc:62:c7:1e:b0:ed:11:9f:89:83:b2:00:2f:bf:95:
71:68:7c:54:3e:a4:9c:05:08:08:89:64:82:ee:00:58:06:6e:
11:29:89:2f:40:bc:ec:32:1c:40:5b:4d:06:e1:81:c5:c6:6c:
5f:aa:00:16:3d:14:15:00:28:e8:11:03:e3:07:64:be:81:72:
99:73:e4:65:6d:df:f1:ec:4c:14:a9:0b:12:e6:7e:6b:b7:7d:
6f:8f:fb:8d:2c:5a:8b:e3:14:b5:47:0c:4e:de:f4:77:be:52:
c6:18:61:2f:25:f6:14:fa:54:5a:de:34:eb:5f:ce:ce:96:36:
f1:89:66:f2:47:98:c5:9d:45:5e:ee:fa:ad:3b:77:0f:c7:fa:
63:dd:6b:84:7e:8d:a3:21:73:af:4a:03:e6:4a:06:06:02:7b:
7c:38:83:71:d6:c8:46:e5:04:84:4b:04:38:67:04:c4:bc:86:
f6:f5:06:9f
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICGPQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yNjA2MTgwNzQ2MDdaFw0yODA2MTgwNzQ2MDdaMBgxFjAU
BgNVBAMTDTZhMzNhMjQzLWQwNmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDpaKlpAZBYVyrdZulNKqbvKYi1m1q1L/AU4uezlHr15TfASQFSFG+F7zrF
xd/6seXtmcFbH+XRyqKBN8t5FQAE+xyiAhi7ZV3CgA5791vU+l6VAFpIaRSW+z9u
0iwS3T1LxLmgL3jysXjh75l2A1NkFTR/1bp0p3BPJCI9C51eBl3KT2UteglPNEwL
6tSUvqq7mAO7e3WTfjUjHuKXdyTPXDcOjXQU+0lQFyqeebMYzE64hXqjekLtO+4p
hCzlokh7lC+FjWl0sAdRW+HMfgOUO2QekdgrrzQTr/R5GoAbcJQEpCuhoB7BlYat
TufcnNl+yG2Zy6+q/JsdzO9qliEhAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUFO5Y
5xgFbgmGUVpiAEzffG4gP4owHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4L0M2MDVEMjRDNkFFOTExRjFCREY5MzMwOENGMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgdkwDQYJKoZIhvcNAQEL
BQADggEBAEqHk7NQM8AFaY1HY7bbEO8O4Z1tR2d7FOTqb9R9thFaz2uXDpmL2ehf
aOwI3BHmfprTR1D8LZYAXHjYX1VGGlqm6G+qsgDd7eSgarxixx6w7RGfiYOyAC+/
lXFofFQ+pJwFCAiJZILuAFgGbhEpiS9AvOwyHEBbTQbhgcXGbF+qABY9FBUAKOgR
A+MHZL6Bcplz5GVt3/HsTBSpCxLmfmu3fW+P+40sWovjFLVHDE7e9He+UsYYYS8l
9hT6VFreNOtfzs6WNvGJZvJHmMWdRV7u+q07dw/H+mPda4R+jaMhc69KA+ZKBgYC
e3w4g3HWyEblBIRLBDhnBMS8hvb1Bp8=
-----END CERTIFICATE-----
Generated at Thu Jun 18 20:19:38 2026 by rpki-client