Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C88409D058D811F1AF0093BCCE1D38B0.roa
File: C88409D058D811F1AF0093BCCE1D38B0.roa (raw, json)
Hash identifier: UZOPAWW0z//Ho+17tLHp2bRmSAdS7bOLoSjVApc//yA=
Subject key identifier: CC:3F:6B:89:0B:98:0E:E4:56:8E:7D:E0:01:4B:E5:17:A7:03:29:3C
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 18AB
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C88409D058D811F1AF0093BCCE1D38B0.roa
Signing time: Tue 26 May 2026 07:59:13 +0000
ROA not before: Tue 26 May 2026 07:59:08 +0000
ROA not after: Fri 26 May 2028 07:59:08 +0000
asID: 13213
IP address blocks: 102.129.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 28 May 2026 00:07:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6315 (0x18ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: May 26 07:59:08 2026 GMT
Not After : May 26 07:59:08 2028 GMT
Subject: CN=6a1552d1-55ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e3:2a:1c:85:58:75:a6:ef:ac:78:1b:c4:34:
d8:16:08:5f:f1:ff:b4:86:ac:8d:40:88:05:0a:4e:
58:7a:dd:f4:76:11:4a:5f:00:ce:d2:8c:b1:a8:0f:
15:9d:5f:80:cc:2e:85:98:c5:c6:d0:d3:9c:12:bf:
77:03:62:28:cd:64:b8:18:c4:69:33:48:a2:d2:29:
fb:12:d9:1b:8b:20:a3:12:66:c4:00:ac:bc:f8:65:
37:a1:97:c0:65:fc:87:ef:87:7a:f5:60:9f:14:a4:
d1:0e:26:ba:70:99:7b:00:19:ff:51:65:c6:15:27:
e0:ef:80:29:85:da:e1:e0:69:b1:c8:ae:51:f3:1a:
74:0b:ef:e3:a6:08:80:eb:95:a4:4d:88:d4:bc:ff:
91:cf:24:fd:06:63:bb:26:b7:b5:9b:d2:93:ff:39:
3a:5b:a8:c6:56:7f:a8:a4:7c:3d:65:27:7e:61:e6:
15:db:cc:46:99:39:fd:9a:5f:1e:4f:99:4e:3d:48:
41:47:2a:3b:86:5a:78:6d:31:a9:e3:ce:ac:bc:4a:
1e:f5:ab:13:30:65:b5:d9:36:28:1c:99:2a:be:17:
25:79:55:37:3c:7b:fc:e6:a1:49:7f:b2:ea:c3:d1:
c0:a5:d3:2e:14:f3:4a:9c:54:1d:79:47:81:64:1e:
4e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:3F:6B:89:0B:98:0E:E4:56:8E:7D:E0:01:4B:E5:17:A7:03:29:3C
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C88409D058D811F1AF0093BCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.202.0/24
Signature Algorithm: sha256WithRSAEncryption
43:ff:3d:f2:de:73:77:fb:d1:64:2d:e4:a0:cd:01:8d:93:24:
f2:a1:8d:f6:76:46:03:a5:ac:20:27:ca:5d:1b:bf:42:ee:76:
ab:fd:da:ae:d1:33:7f:09:ea:81:41:b9:19:4b:8d:1a:99:cf:
1b:68:5a:f9:7e:72:0d:6a:b4:e9:7d:26:6a:b9:63:aa:b2:ef:
e5:ec:4a:d2:3a:c8:9e:1d:62:16:0b:89:e7:f2:15:82:97:af:
54:d6:91:d2:11:d5:bc:fe:04:2e:fb:39:c4:fd:bc:c0:d8:46:
3f:4c:c6:9f:bf:83:13:2c:74:cd:e8:dd:25:3a:dd:40:83:06:
26:d7:02:5d:9b:2c:4e:07:db:63:c6:0d:39:3d:74:4d:2f:3f:
e8:a3:d7:95:52:2c:3a:83:34:df:21:a4:75:81:92:06:26:ba:
cf:c0:f7:4d:36:af:d3:60:84:a2:35:cb:ca:00:86:68:8c:3a:
7c:aa:5d:43:2c:b3:5b:a4:ae:a1:80:17:25:7d:a5:fe:67:2c:
06:42:39:83:6e:c9:cd:01:08:a6:74:f9:c9:9f:e1:6b:d4:fe:
7f:e8:d0:f6:ac:13:6f:81:d2:5d:ec:f1:63:04:ba:1d:3a:9a:
fa:b1:cb:90:ae:26:de:64:7f:cb:6e:ae:ed:7a:c6:9e:91:a7:
77:04:bd:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 26 21:19:21 2026 by rpki-client