Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/DA7ACD3C503511F18409841ECF1D38B0.roa
File: DA7ACD3C503511F18409841ECF1D38B0.roa (raw, json)
Hash identifier: aglSHbGSXyDyoH217Gx9WhJSqaoN6CjP9MeM/DsYSvM=
Subject key identifier: 52:A8:CD:F3:D7:56:C0:8B:E8:C6:76:43:E7:29:48:CA:51:2E:8B:CC
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1870
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/DA7ACD3C503511F18409841ECF1D38B0.roa
Signing time: Fri 15 May 2026 08:12:46 +0000
ROA not before: Fri 15 May 2026 08:12:41 +0000
ROA not after: Mon 15 May 2028 08:12:41 +0000
asID: 13213
IP address blocks: 102.129.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 19 May 2026 00:07:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6256 (0x1870)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: May 15 08:12:41 2026 GMT
Not After : May 15 08:12:41 2028 GMT
Subject: CN=6a06d57e-06aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fe:29:ec:bf:dc:63:b4:b7:50:26:9b:86:78:
5e:8e:82:b1:a3:a5:d9:dc:6c:4f:d7:64:01:70:9e:
9e:21:d1:2a:23:0d:b9:29:5a:aa:15:73:78:18:84:
c8:69:84:57:99:5b:e4:73:91:a8:e6:d6:e7:e7:89:
24:ab:41:c7:cb:2e:6e:e6:5f:14:ff:25:e5:d9:8a:
bb:f6:80:b1:73:b1:71:f2:24:47:5e:ff:8f:f3:1c:
b0:34:ec:64:4d:d7:63:3f:8a:9a:6b:60:05:1d:ce:
32:1b:f3:c7:30:04:c0:98:51:e2:58:d7:3d:cf:c5:
f7:01:f8:24:8e:5b:c3:a1:d7:09:c7:c5:13:65:54:
7b:31:7b:7d:30:91:ec:53:89:69:4f:d4:be:41:a2:
6c:86:dd:5b:85:86:31:de:6f:00:9d:f6:2d:a4:1a:
10:0b:72:93:6f:83:4d:09:0c:70:bf:25:bc:2c:1a:
7d:78:97:9c:0a:39:33:e5:af:f8:9b:70:8b:60:7f:
6c:c7:71:f6:e1:d3:03:04:e2:b6:68:89:c8:35:96:
07:79:06:9a:cf:e2:96:d7:44:95:54:38:5e:91:76:
3f:35:be:42:93:e8:1b:78:33:81:8d:99:6d:70:eb:
98:27:fe:76:6f:a1:38:32:29:e3:9e:6a:83:9a:2e:
82:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:A8:CD:F3:D7:56:C0:8B:E8:C6:76:43:E7:29:48:CA:51:2E:8B:CC
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/DA7ACD3C503511F18409841ECF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.238.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:65:35:68:6a:42:42:49:52:21:cf:b1:5b:d8:bc:03:07:93:
88:c7:16:38:9d:85:13:58:1b:6c:f8:b2:62:f1:55:f5:2b:7f:
54:d4:de:c1:41:d2:b1:9a:e5:e1:6a:39:9c:72:3c:b8:dd:c5:
57:d8:38:5c:d0:bb:c0:0c:c6:ea:e1:d6:b0:0c:79:e0:6f:9e:
4d:9b:4e:eb:10:0b:5c:94:53:ec:f6:dc:8a:77:a6:bf:c5:9f:
b1:ec:2f:19:05:9a:f7:c6:8a:74:b0:9c:94:b3:b8:79:61:15:
a6:8a:87:2b:ca:40:3b:db:f1:19:1d:b9:5e:5f:8c:5c:da:72:
f6:e6:d9:be:9b:fe:f8:d0:9a:3c:a0:dd:23:85:d0:26:b1:a5:
ad:90:f7:05:64:2c:f4:3a:39:04:21:16:fa:b8:15:f7:28:f5:
d1:93:78:cc:b6:70:db:fd:94:25:b0:1f:62:02:7d:87:bd:13:
7c:da:89:de:82:89:69:38:b0:9b:ba:bf:24:11:aa:ae:b7:5f:
ff:50:9d:8b:b1:52:5d:37:2a:6d:65:c2:1d:ba:e1:bd:49:4c:
85:91:26:d7:bb:57:ed:c7:c0:3c:bf:63:4c:74:dc:c6:8d:5d:
f3:4e:8f:8a:4e:9d:59:de:c6:67:29:3d:ef:5f:91:a5:28:af:
1d:f4:62:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 20:44:09 2026 by rpki-client