Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C734ECE631A211F18608F4E4DAE4EC9C.roa
File: C734ECE631A211F18608F4E4DAE4EC9C.roa (raw, json)
Hash identifier: EhkOPGrvpxQUwEqEWH/8SIzDXRoOlm3UPGPV+33iF/8=
Subject key identifier: 93:32:38:D1:2E:4C:27:7C:91:FA:FE:B1:37:34:38:6B:CE:92:A6:6A
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 17FB
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C734ECE631A211F18608F4E4DAE4EC9C.roa
Signing time: Mon 06 Apr 2026 10:24:22 +0000
ROA not before: Mon 06 Apr 2026 10:24:18 +0000
ROA not after: Fri 06 Apr 2029 10:24:18 +0000
asID: 834
IP address blocks: 102.129.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 09 Apr 2026 01:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6139 (0x17fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Apr 6 10:24:18 2026 GMT
Not After : Apr 6 10:24:18 2029 GMT
Subject: CN=69d389d6-400c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:05:a5:10:b9:ae:e9:47:f9:c6:62:ec:f4:3a:
ab:ea:32:df:e4:ee:09:2b:cc:12:89:23:2b:e5:04:
96:9b:cd:61:58:75:90:49:0c:ba:ba:a0:b1:40:26:
89:f5:9f:eb:e8:27:3f:dd:a1:9d:7a:d9:fb:55:70:
58:7d:4b:9e:58:3b:9c:41:c4:ab:22:69:9b:0b:df:
c0:b3:c0:1f:db:ab:a0:a2:6e:8d:d3:da:33:9e:e8:
fc:15:80:9b:37:1b:e0:d2:28:22:f0:69:51:50:45:
ee:7a:9d:5c:be:27:a2:7e:d7:1d:f0:66:1b:07:1e:
36:b1:fd:25:3f:0b:b0:36:23:6a:af:13:68:a5:39:
7d:19:7e:d5:de:1e:8a:b0:38:63:b2:9f:3e:da:77:
bd:9a:85:dd:e5:2d:dc:3a:0d:3f:ee:cc:77:e4:86:
c5:47:13:59:90:1b:c7:97:4b:70:f2:3d:60:b8:e5:
97:7f:4d:c6:ab:93:42:1e:5c:96:8c:30:f0:4c:0d:
0d:ba:b9:35:2a:24:56:9e:4a:22:36:59:42:f1:2d:
c1:8c:b8:55:75:2a:01:52:b1:57:1d:37:35:11:4c:
50:ee:69:33:e7:41:02:bf:12:4a:5b:a2:35:64:cd:
39:1f:93:fd:13:74:29:44:ca:a1:3f:3c:b8:5d:6a:
7b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:32:38:D1:2E:4C:27:7C:91:FA:FE:B1:37:34:38:6B:CE:92:A6:6A
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C734ECE631A211F18608F4E4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.225.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:d7:77:39:83:02:a8:71:b5:c9:cc:66:8c:28:70:25:48:8c:
de:a6:ae:16:59:83:22:bb:e3:3b:90:f7:02:74:d5:5a:bc:05:
cd:12:17:32:a5:87:9a:a0:f5:13:23:e3:18:03:31:09:b1:23:
dd:c8:4e:21:0a:a2:21:1e:aa:12:ad:44:04:3a:28:9d:63:47:
39:2e:fb:a6:fb:00:95:f9:a7:7d:c8:08:6e:22:58:48:50:f6:
97:9b:3d:8b:66:cd:88:e2:3f:a8:57:e9:8f:a8:2d:e4:5a:79:
b3:43:5d:e7:2e:24:c6:ea:a0:6c:5e:da:eb:a0:d0:4f:49:c0:
e7:de:eb:01:fe:8b:0c:89:91:ed:7a:b2:2c:b5:d5:6c:8b:3c:
a3:03:f3:e7:6c:23:12:e8:98:06:e9:3c:9e:89:d3:f7:30:3d:
c6:e0:57:fc:df:05:1c:27:24:90:b9:75:76:bd:69:a5:da:e4:
28:3e:77:31:b4:e2:93:14:f5:d1:16:5a:5e:c7:94:3b:a1:f7:
0c:52:9f:0d:83:42:59:ac:cf:28:a8:70:c7:98:e5:91:5a:4f:
47:3a:b4:76:8e:ed:d0:e3:5d:83:7d:d4:b5:85:c4:da:96:64:
91:e3:15:66:c0:28:e3:a7:4d:f3:e7:d9:18:13:b3:b6:ce:ee:
7e:84:f6:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 13:13:03 2026 by rpki-client