Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/CFAE75129BAC11F1A28FB0CECE1D38B0.roa
File: CFAE75129BAC11F1A28FB0CECE1D38B0.roa (raw, json)
Hash identifier: /MouYhogBZt6Ow3PxyB3YidGmhjaHBs5uz5eWgJYLRg=
Subject key identifier: 64:DA:65:C8:B4:2C:F5:DA:DA:B7:33:E8:90:D9:2B:67:05:EB:16:5E
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 19AC
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/CFAE75129BAC11F1A28FB0CECE1D38B0.roa
Signing time: Wed 19 Aug 2026 09:03:15 +0000
ROA not before: Wed 19 Aug 2026 09:03:11 +0000
ROA not after: Sat 19 Aug 2028 09:03:11 +0000
asID: 199737
IP address blocks: 102.129.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 21 Aug 2026 09:44:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6572 (0x19ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Aug 19 09:03:11 2026 GMT
Not After : Aug 19 09:03:11 2028 GMT
Subject: CN=6a857153-5123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7f:ca:46:da:22:2c:48:1a:7c:b6:bf:76:0b:
a6:35:ee:4b:3f:8d:dd:7f:25:ee:d4:00:c8:97:06:
f4:0c:81:d8:f7:48:51:48:bf:2e:87:36:db:81:25:
09:ee:82:d6:8a:df:34:2f:85:a2:e5:cb:e9:c6:b3:
e1:a8:b4:43:d2:80:09:07:31:2b:5f:51:ce:e2:af:
94:17:66:5e:6f:0f:cb:6b:e2:57:49:ba:04:11:8a:
6f:dc:5a:5a:d9:85:3b:a5:9d:ca:95:89:e2:57:0a:
8e:b7:9b:ea:95:e3:c4:19:3d:f8:42:2f:5c:75:7e:
a6:bb:e3:b4:ea:0c:d6:85:32:94:1a:9c:56:05:5e:
a5:f7:96:13:bc:59:95:14:6d:49:73:76:7b:65:44:
63:72:ba:37:e0:f7:f6:1d:2e:7c:a1:2e:5f:ce:04:
16:18:d5:91:a5:87:c7:08:7d:e6:37:74:ed:f8:6e:
e1:98:2a:58:1c:2c:40:8a:2d:ec:bd:4a:a5:81:56:
64:57:90:ac:51:4a:5a:89:90:0d:c0:12:da:5a:bb:
e8:e9:ce:91:08:54:c6:63:6d:95:8d:c6:0e:29:69:
17:45:ba:9d:cc:94:b4:56:22:06:fa:dd:26:12:06:
c0:c7:6a:db:0f:2b:77:e5:6b:11:47:4f:f7:ba:10:
7c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:DA:65:C8:B4:2C:F5:DA:DA:B7:33:E8:90:D9:2B:67:05:EB:16:5E
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/CFAE75129BAC11F1A28FB0CECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.208.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:2e:ad:88:7f:48:16:5d:f0:01:92:dd:7f:c0:30:a9:51:c3:
8b:75:e5:75:3f:f0:91:2d:b6:c3:f2:52:88:9a:5b:c9:c6:d7:
b0:7e:7e:a2:4d:75:7d:5c:f6:98:97:84:80:8b:0f:0c:8b:ee:
ce:0d:23:92:de:41:a7:5f:24:bc:6f:95:24:09:b4:1c:07:7a:
7e:70:5b:8e:58:c0:8b:b4:a5:b1:b8:47:e2:3b:77:23:aa:46:
6e:9b:af:95:89:0b:34:b3:c4:8e:78:e5:12:f1:3e:6c:b8:f7:
75:65:33:7b:06:27:4c:63:27:cb:12:8b:5b:61:00:ed:ec:06:
e4:1e:9d:a9:0f:55:e2:50:8a:bb:6f:79:37:d7:87:61:26:1d:
1a:2e:c6:8a:9e:04:79:75:fc:f4:fa:18:ce:dc:20:b8:7b:6c:
59:56:b4:f3:fc:c0:31:1a:5d:d3:3a:8c:77:da:d8:6b:d7:a9:
08:4a:57:76:f3:1e:92:39:c0:17:87:f7:01:6d:e6:82:62:3a:
76:12:a9:9f:7c:72:23:32:0d:30:26:4e:e2:14:4f:e6:f5:8d:
b6:7b:1c:a8:03:3a:f3:87:07:34:f4:d4:42:ea:14:7d:38:24:
70:3e:dd:32:5c:0c:cf:b8:cb:ad:40:68:01:0e:c5:b2:f2:65:
a0:c6:23:02
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICGawwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yNjA4MTkwOTAzMTFaFw0yODA4MTkwOTAzMTFaMBgxFjAU
BgNVBAMTDTZhODU3MTUzLTUxMjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC8f8pG2iIsSBp8tr92C6Y17ks/jd1/Je7UAMiXBvQMgdj3SFFIvy6HNtuB
JQnugtaK3zQvhaLly+nGs+GotEPSgAkHMStfUc7ir5QXZl5vD8tr4ldJugQRim/c
WlrZhTulncqVieJXCo63m+qV48QZPfhCL1x1fqa747TqDNaFMpQanFYFXqX3lhO8
WZUUbUlzdntlRGNyujfg9/YdLnyhLl/OBBYY1ZGlh8cIfeY3dO34buGYKlgcLECK
Ley9SqWBVmRXkKxRSlqJkA3AEtpau+jpzpEIVMZjbZWNxg4paRdFup3MlLRWIgb6
3SYSBsDHatsPK3flaxFHT/e6EHzhAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUZNpl
yLQs9dratzPokNkrZwXrFl4wHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4L0NGQUU3NTEyOUJBQzExRjFBMjhGQjBDRUNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgdAwDQYJKoZIhvcNAQEL
BQADggEBALwurYh/SBZd8AGS3X/AMKlRw4t15XU/8JEttsPyUoiaW8nG17B+fqJN
dX1c9piXhICLDwyL7s4NI5LeQadfJLxvlSQJtBwHen5wW45YwIu0pbG4R+I7dyOq
Rm6br5WJCzSzxI545RLxPmy493VlM3sGJ0xjJ8sSi1thAO3sBuQenakPVeJQirtv
eTfXh2EmHRouxoqeBHl1/PT6GM7cILh7bFlWtPP8wDEaXdM6jHfa2GvXqQhKV3bz
HpI5wBeH9wFt5oJiOnYSqZ98ciMyDTAmTuIUT+b1jbZ7HKgDOvOHBzT01ELqFH04
JHA+3TJcDM+4y61AaAEOxbLyZaDGIwI=
-----END CERTIFICATE-----
Generated at Wed Aug 19 23:37:20 2026 by rpki-client