Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/D1BDD630553F11F19FBF26C2CE1D38B0.roa
File: D1BDD630553F11F19FBF26C2CE1D38B0.roa (raw, json)
Hash identifier: SV8d4yufbiVcj4bIImUxw8eYank+4Su394babT/lYgU=
Subject key identifier: 8A:08:0A:25:23:87:CE:49:8F:7F:96:7A:7D:BF:09:4D:C1:99:70:50
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1898
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/D1BDD630553F11F19FBF26C2CE1D38B0.roa
Signing time: Thu 21 May 2026 18:06:42 +0000
ROA not before: Thu 21 May 2026 18:06:37 +0000
ROA not after: Sun 21 May 2028 18:06:37 +0000
asID: 834
IP address blocks: 102.129.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 May 2026 00:07:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6296 (0x1898)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: May 21 18:06:37 2026 GMT
Not After : May 21 18:06:37 2028 GMT
Subject: CN=6a0f49b2-5344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5e:ce:f6:17:a8:01:7e:00:c6:20:d1:2f:7d:
ea:e8:f7:82:0d:17:e6:65:2c:07:37:05:89:a6:60:
d5:d4:14:ca:46:e3:1b:35:ac:6f:4c:55:75:85:ee:
65:ef:50:68:27:d4:32:16:26:f6:d6:73:5f:84:8c:
55:5a:6c:f0:ef:50:1c:0a:29:0b:6c:56:b9:c7:f3:
80:f5:71:37:e7:83:67:91:92:9a:2e:ff:f9:8a:66:
24:5f:ce:47:78:0f:1e:85:2b:24:3b:a5:ac:27:5d:
ab:b1:83:28:29:ea:58:32:40:24:bb:8f:b8:4e:fa:
3a:a6:67:be:2a:4a:24:ac:fa:cc:b9:e1:df:b1:de:
9d:c5:89:60:a5:c8:68:65:cc:cf:1f:33:0f:22:a7:
25:88:9d:03:3f:27:9a:7d:ce:37:11:4e:c5:e1:00:
ff:2d:d5:1e:4d:69:18:c6:f9:d3:ae:8e:bc:a5:70:
c8:84:75:89:bd:e8:d3:a3:d3:94:10:c0:cf:32:61:
20:c7:d7:89:67:36:40:bd:14:c7:15:c7:68:5a:6c:
1c:1b:10:27:24:26:c5:fc:e8:5f:d9:22:b2:a0:6a:
53:81:31:0e:44:b3:26:40:18:30:40:89:44:26:d7:
e4:a9:0f:82:d0:c1:50:07:43:4f:2d:a1:6b:7c:26:
eb:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:08:0A:25:23:87:CE:49:8F:7F:96:7A:7D:BF:09:4D:C1:99:70:50
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/D1BDD630553F11F19FBF26C2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.225.0/24
Signature Algorithm: sha256WithRSAEncryption
45:d4:f4:b8:bb:56:5f:b2:2e:58:5e:1b:e3:76:dd:77:a3:9a:
d7:c8:22:73:5f:b2:81:95:7b:dc:1d:aa:ef:b2:b8:50:98:4f:
09:cc:92:81:a9:84:74:6d:b4:2e:9b:1b:5d:e9:ef:7f:3e:2d:
f7:55:fb:49:07:ad:86:6e:70:b4:82:49:89:2d:62:1b:00:b5:
83:50:89:78:c4:8d:ba:0e:9d:af:c5:31:5c:db:d5:2f:60:2a:
6c:bf:13:df:8d:06:a6:35:f5:6a:c4:14:3c:36:26:c3:f6:fb:
81:88:b3:5e:6c:94:85:ba:c9:d6:41:78:a3:72:50:67:e8:93:
1b:ec:64:d1:ba:50:2a:fa:be:0d:d9:f1:40:d7:be:a8:4b:89:
97:89:4e:e6:13:db:18:91:c1:93:d4:fd:88:60:39:c0:c2:50:
97:f4:39:4d:56:69:0a:40:79:45:bc:5e:ad:5a:e6:7a:00:0a:
e2:83:e2:1e:c5:90:fe:9c:d3:b2:49:39:01:21:29:2c:ff:06:
93:29:3e:5f:17:56:b7:89:0f:ee:66:3f:a2:d9:ee:3c:f9:82:
9c:28:b8:a7:9b:e2:38:2f:ed:34:a2:e0:37:f4:23:30:38:df:
1a:c3:f8:fd:a2:7c:78:59:01:02:83:ed:f2:5e:bf:7d:20:93:
6f:7c:9d:76
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICGJgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yNjA1MjExODA2MzdaFw0yODA1MjExODA2MzdaMBgxFjAU
BgNVBAMTDTZhMGY0OWIyLTUzNDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDTXs72F6gBfgDGINEvfero94INF+ZlLAc3BYmmYNXUFMpG4xs1rG9MVXWF
7mXvUGgn1DIWJvbWc1+EjFVabPDvUBwKKQtsVrnH84D1cTfng2eRkpou//mKZiRf
zkd4Dx6FKyQ7pawnXauxgygp6lgyQCS7j7hO+jqmZ74qSiSs+sy54d+x3p3FiWCl
yGhlzM8fMw8ipyWInQM/J5p9zjcRTsXhAP8t1R5NaRjG+dOujrylcMiEdYm96NOj
05QQwM8yYSDH14lnNkC9FMcVx2habBwbECckJsX86F/ZIrKgalOBMQ5EsyZAGDBA
iUQm1+SpD4LQwVAHQ08toWt8JuvlAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUiggK
JSOHzkmPf5Z6fb8JTcGZcFAwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4L0QxQkRENjMwNTUzRjExRjE5RkJGMjZDMkNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgeEwDQYJKoZIhvcNAQEL
BQADggEBAEXU9Li7Vl+yLlheG+N23XejmtfIInNfsoGVe9wdqu+yuFCYTwnMkoGp
hHRttC6bG13p738+LfdV+0kHrYZucLSCSYktYhsAtYNQiXjEjboOna/FMVzb1S9g
Kmy/E9+NBqY19WrEFDw2JsP2+4GIs15slIW6ydZBeKNyUGfokxvsZNG6UCr6vg3Z
8UDXvqhLiZeJTuYT2xiRwZPU/YhgOcDCUJf0OU1WaQpAeUW8Xq1a5noACuKD4h7F
kP6c07JJOQEhKSz/BpMpPl8XVreJD+5mP6LZ7jz5gpwouKeb4jgv7TSi4Df0IzA4
3xrD+P2ifHhZAQKD7fJev30gk298nXY=
-----END CERTIFICATE-----
Generated at Fri May 22 04:21:35 2026 by rpki-client