Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/D7848BCC1B7E11F1838CA293DAE4EC9C.roa
File: D7848BCC1B7E11F1838CA293DAE4EC9C.roa (raw, json)
Hash identifier: 7UajqMw/E0HzidxToTOgASRe4oxAVW0oCApXRdu1tsk=
Subject key identifier: 07:DD:6F:31:C2:58:5A:10:F4:28:8E:DD:32:5D:11:AB:64:C3:69:30
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1790
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/D7848BCC1B7E11F1838CA293DAE4EC9C.roa
Signing time: Mon 09 Mar 2026 06:11:43 +0000
ROA not before: Mon 09 Mar 2026 06:11:36 +0000
ROA not after: Thu 09 Mar 2028 06:11:36 +0000
asID: 834
IP address blocks: 102.129.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 11 Mar 2026 06:13:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6032 (0x1790)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Mar 9 06:11:36 2026 GMT
Not After : Mar 9 06:11:36 2028 GMT
Subject: CN=69ae649e-9b57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:eb:6b:2f:44:2f:c5:17:9b:60:cb:91:25:50:
86:41:8f:f2:b5:b8:7d:77:31:9e:71:86:cd:d9:cd:
dd:d1:35:c0:6d:91:1b:1f:3b:fc:41:3e:ad:fa:da:
fb:2b:c7:79:3c:90:0a:a9:ed:80:8e:26:60:b3:ab:
2e:29:50:5b:e3:84:07:34:20:53:f0:6b:91:9a:21:
f0:bf:1f:de:62:b9:13:62:a4:9f:9d:9c:7f:60:cd:
a7:58:a1:fe:25:b0:59:47:bf:07:9c:33:bd:1b:66:
26:fa:d3:17:21:97:fc:b2:77:e9:d7:ed:70:6d:52:
3f:54:0d:ee:26:36:2b:42:a8:28:45:ca:d4:21:57:
0e:69:f7:91:f3:a3:6f:15:39:79:98:03:d1:3e:45:
86:47:2f:00:75:9d:8e:03:f5:a3:ae:c1:f7:7b:53:
07:92:9e:e5:2e:c7:be:b3:7a:a7:43:56:63:20:06:
fe:13:33:03:0e:65:79:c1:5b:39:dc:af:61:c4:df:
57:52:06:37:d0:ba:2e:d6:37:7f:43:bc:fe:b4:0f:
ab:ac:39:77:aa:cb:e2:60:6b:d3:5a:87:0a:31:bf:
31:ab:5e:61:ec:f9:a7:6f:95:93:79:aa:29:85:f0:
af:44:d2:c8:56:b6:47:9b:01:95:0e:db:68:87:b0:
6a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:DD:6F:31:C2:58:5A:10:F4:28:8E:DD:32:5D:11:AB:64:C3:69:30
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/D7848BCC1B7E11F1838CA293DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.189.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:b3:92:bc:ab:a4:3b:0d:63:76:3c:99:87:26:65:b4:ae:3f:
16:46:a4:4c:b6:64:bf:cd:d3:af:dc:33:5c:9f:ca:0f:45:95:
e8:dc:ae:47:b0:6f:9e:46:6d:6a:ba:73:2b:b4:92:b6:e9:0b:
72:91:6b:74:68:79:ce:44:31:da:9b:ee:f9:d2:e6:40:0f:a8:
7c:0b:56:04:cb:54:34:7c:e8:35:d5:dd:13:a8:76:a7:57:2d:
d5:96:82:8f:2c:38:fd:af:85:16:b5:e0:f4:47:eb:92:6d:f4:
1a:98:6a:45:b1:a8:d8:4f:53:75:5e:2f:5c:26:56:eb:45:f3:
b9:9f:a7:03:88:b9:1b:c5:e4:2c:6e:c1:7c:16:38:af:3a:86:
5f:d2:2f:63:09:e7:8e:a6:43:a8:60:8c:29:25:08:73:2a:da:
d6:d5:45:6c:22:68:de:c3:6b:f3:0f:3d:64:0b:73:77:e5:2e:
8b:bb:4b:02:14:be:26:3a:96:2d:a1:31:e3:9e:59:c8:1b:3a:
f2:08:70:82:78:a4:15:d0:f0:1b:2e:53:b1:66:ac:48:cf:7c:
37:1f:3b:bc:72:e9:29:eb:0b:fe:88:8e:f9:7e:17:5c:93:05:
45:6e:c5:8a:38:c3:e6:d3:44:5b:44:1d:67:6b:58:08:45:ee:
cd:76:c7:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 10 02:25:14 2026 by rpki-client