Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/DAD3C6A8873A11F1B763210ECF1D38B0.roa
File: DAD3C6A8873A11F1B763210ECF1D38B0.roa (raw, json)
Hash identifier: HmntjM92ImY2jnC92xXDH65VR7fs0Rpv5Y1BG2GFBEc=
Subject key identifier: 20:13:84:52:7C:99:E9:94:5C:8A:C0:75:46:64:DC:DE:FB:BB:27:A0
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1965
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/DAD3C6A8873A11F1B763210ECF1D38B0.roa
Signing time: Fri 24 Jul 2026 08:37:08 +0000
ROA not before: Fri 24 Jul 2026 08:37:04 +0000
ROA not after: Tue 27 Jul 2027 08:37:04 +0000
asID: 46450
IP address blocks: 102.129.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 08:37:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6501 (0x1965)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jul 24 08:37:04 2026 GMT
Not After : Jul 27 08:37:04 2027 GMT
Subject: CN=6a632434-4e06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:33:a9:48:b0:d7:21:2f:f1:83:1c:ad:52:78:
ea:94:27:4e:5a:d4:cf:74:fb:6d:f5:66:99:7b:e1:
a3:a4:4d:66:50:ec:f3:06:0a:41:57:ba:5e:fb:9e:
d1:67:41:a3:7f:8f:a3:1b:e1:cb:29:f7:b1:00:58:
6f:a9:36:65:bd:8d:c9:d2:e3:81:2f:7a:dd:f0:ad:
4f:d1:94:f1:17:26:5a:4d:17:87:a9:2c:ca:f5:3f:
2f:99:df:ee:7b:bf:37:fc:a9:a0:5f:7a:93:96:92:
bd:fd:8b:d1:8f:9b:ef:22:61:a2:65:32:e3:aa:8c:
33:1c:13:df:9f:47:5d:52:1a:7d:af:75:c9:a5:9f:
1f:b0:f1:94:a4:01:7b:fe:57:c6:d6:82:54:67:3c:
da:68:4c:4b:ca:4e:d7:27:66:41:cd:96:24:f8:8a:
26:3f:b1:71:c4:33:66:61:4d:7f:ee:84:28:dc:09:
a0:1f:6d:cd:40:b2:c5:31:40:51:ca:5f:26:13:01:
31:58:db:49:57:ee:dd:b6:01:5b:6c:d1:98:59:ec:
5a:6c:ac:4e:fe:4e:25:f9:5d:dd:34:51:f0:b2:93:
a2:9f:c2:cc:11:a8:1b:b3:5a:a9:b4:b9:8d:87:6e:
c7:69:64:89:1a:4e:89:71:d9:76:ff:56:df:35:ee:
b9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:13:84:52:7C:99:E9:94:5C:8A:C0:75:46:64:DC:DE:FB:BB:27:A0
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/DAD3C6A8873A11F1B763210ECF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.236.0/24
Signature Algorithm: sha256WithRSAEncryption
13:24:8c:40:18:b2:c8:40:35:c3:90:b7:9f:6a:bf:47:97:b4:
d8:8b:90:51:2c:2a:d5:79:6e:a4:ee:ac:0b:55:07:33:87:fe:
b9:9b:3a:26:f9:c3:02:54:e9:a5:d9:91:43:5e:78:55:a1:fc:
74:94:04:a7:7d:01:b2:30:0f:48:e1:c0:8c:e8:72:51:f5:a6:
c1:d8:ab:88:03:d7:a5:12:9c:74:a4:4d:18:e6:35:12:60:7d:
59:e4:9b:65:f0:5b:5d:00:35:9e:68:45:4c:44:eb:88:32:8b:
89:c1:d7:da:2f:78:04:58:7c:2a:ad:c5:29:19:99:a1:eb:41:
f8:2e:6d:b0:c5:45:f6:f8:83:46:d2:7a:92:80:49:ff:bb:ef:
db:44:4c:a3:95:87:5e:8b:59:e3:31:43:d8:c7:99:93:6e:9a:
b3:86:1d:7b:8a:90:d9:17:c4:09:94:23:11:23:45:2a:bb:d2:
15:59:ca:c0:ed:24:db:b3:8f:1e:b1:d2:b7:cb:03:e0:6b:61:
d6:f5:44:0e:b1:e3:30:9e:8a:2f:49:74:6c:74:e1:7c:90:bf:
d4:d1:7e:3d:bb:a7:4d:6e:4c:d8:f4:be:a0:1a:d7:b0:8d:2d:
0e:6f:b9:aa:b7:a7:b6:cb:77:8c:a4:1b:ec:30:34:af:e8:ad:
de:fe:b1:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:00:40 2026 by rpki-client