Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/DD3D9F0434CE11F195C2A0EFCE1D38B0.roa
File: DD3D9F0434CE11F195C2A0EFCE1D38B0.roa (raw, json)
Hash identifier: 2eJnvXSUd7nwTBH6+0Sc1VOU2hmBApk2jZQp6MLQlv0=
Subject key identifier: 4E:10:50:FE:E4:FA:03:9C:A8:62:00:6E:08:B4:0C:98:8C:E8:3B:BB
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1809
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/DD3D9F0434CE11F195C2A0EFCE1D38B0.roa
Signing time: Fri 10 Apr 2026 11:17:31 +0000
ROA not before: Fri 10 Apr 2026 11:17:26 +0000
ROA not after: Mon 10 Apr 2028 11:17:26 +0000
asID: 834
IP address blocks: 102.129.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 16 Apr 2026 00:07:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6153 (0x1809)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Apr 10 11:17:26 2026 GMT
Not After : Apr 10 11:17:26 2028 GMT
Subject: CN=69d8dc4b-11d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:55:eb:8a:d8:b4:cf:c3:d1:d4:60:2d:75:a2:
3c:ac:73:f7:ba:39:09:0c:95:fd:5a:a1:06:25:10:
1e:f6:53:25:b2:c4:ff:ba:40:e7:0c:14:7c:91:70:
3b:86:37:36:bd:df:43:ed:6b:27:81:06:d5:ad:48:
5d:c8:c9:f4:9d:95:18:6c:3d:f3:e9:84:5c:71:38:
ca:ce:ec:c5:ec:31:9f:d4:5d:33:e5:e0:ad:e2:87:
c0:94:33:d3:e9:09:9f:6e:c6:e7:23:24:47:8e:c7:
e9:84:00:f3:35:01:9c:f8:d2:d9:7c:93:14:13:ff:
06:5a:ee:00:db:15:af:ba:fb:23:85:1c:e6:52:88:
ac:a3:06:d4:95:b4:43:3e:25:d3:ea:8e:65:e5:0f:
73:51:be:37:e2:be:cd:09:23:f8:75:a9:5f:4b:20:
00:f8:be:b0:2a:4e:f2:f4:07:84:0c:1b:39:51:16:
b7:5a:aa:cb:9f:84:57:36:7c:2e:8e:47:83:7a:5f:
5a:52:19:e2:39:ba:0a:0b:b1:18:58:82:9a:7d:57:
d8:13:c0:4f:30:79:1e:5d:ed:50:1a:45:28:a8:b2:
13:84:ff:24:d0:f8:46:a1:b4:56:21:51:fa:5f:e6:
bb:b4:dd:f3:4b:d0:50:94:de:3d:f9:c6:93:9f:31:
36:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:10:50:FE:E4:FA:03:9C:A8:62:00:6E:08:B4:0C:98:8C:E8:3B:BB
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/DD3D9F0434CE11F195C2A0EFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.189.0/24
Signature Algorithm: sha256WithRSAEncryption
07:51:62:5e:ab:a0:5c:a1:81:67:75:48:0e:4e:5e:90:98:b5:
94:4a:8a:6b:2c:99:fe:bd:08:c6:d7:ff:5a:0b:46:06:d0:a1:
29:ed:45:47:4f:ae:f3:c5:be:d2:67:9f:55:e9:87:d5:e5:2d:
fd:21:74:37:c0:db:8e:3b:39:39:06:fa:95:9a:eb:bd:c3:66:
6a:46:a8:69:d1:e8:84:40:a8:65:6a:46:a9:dc:91:43:81:a2:
7b:bc:15:fe:79:87:36:08:ad:6a:50:27:c8:b5:3b:b5:6c:67:
ee:43:21:3e:70:71:ca:42:87:4c:df:03:62:4e:15:fe:4a:eb:
05:bf:a3:2d:48:fb:53:79:ac:7f:ca:c7:09:4a:95:4f:1b:32:
4a:a8:b7:08:18:7f:4a:b7:98:7e:25:f0:9a:7e:a5:45:69:7e:
a1:57:c5:cb:14:a5:83:fd:80:bf:91:15:7a:3a:21:ff:b0:03:
00:7f:0d:1c:98:af:31:7a:fa:ac:eb:a2:57:f0:64:cb:c5:c8:
c9:80:1a:ce:2b:4a:e1:cd:ca:6c:c9:bc:ba:64:46:0c:85:f2:
aa:2b:fd:8a:e3:de:f9:68:3c:62:9f:f5:10:5d:77:5e:22:80:
8b:4a:7d:2a:06:23:0b:a5:bc:b1:3e:55:58:64:f1:7e:14:13:
23:de:4d:01
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICGAkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yNjA0MTAxMTE3MjZaFw0yODA0MTAxMTE3MjZaMBgxFjAU
BgNVBAMTDTY5ZDhkYzRiLTExZDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQClVeuK2LTPw9HUYC11ojysc/e6OQkMlf1aoQYlEB72UyWyxP+6QOcMFHyR
cDuGNza930PtayeBBtWtSF3IyfSdlRhsPfPphFxxOMrO7MXsMZ/UXTPl4K3ih8CU
M9PpCZ9uxucjJEeOx+mEAPM1AZz40tl8kxQT/wZa7gDbFa+6+yOFHOZSiKyjBtSV
tEM+JdPqjmXlD3NRvjfivs0JI/h1qV9LIAD4vrAqTvL0B4QMGzlRFrdaqsufhFc2
fC6OR4N6X1pSGeI5ugoLsRhYgpp9V9gTwE8weR5d7VAaRSioshOE/yTQ+EahtFYh
Ufpf5ru03fNL0FCU3j35xpOfMTb5AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUThBQ
/uT6A5yoYgBuCLQMmIzoO7swHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4L0REM0Q5RjA0MzRDRTExRjE5NUMyQTBFRkNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgb0wDQYJKoZIhvcNAQEL
BQADggEBAAdRYl6roFyhgWd1SA5OXpCYtZRKimssmf69CMbX/1oLRgbQoSntRUdP
rvPFvtJnn1Xph9XlLf0hdDfA2447OTkG+pWa673DZmpGqGnR6IRAqGVqRqnckUOB
onu8Ff55hzYIrWpQJ8i1O7VsZ+5DIT5wccpCh0zfA2JOFf5K6wW/oy1I+1N5rH/K
xwlKlU8bMkqotwgYf0q3mH4l8Jp+pUVpfqFXxcsUpYP9gL+RFXo6If+wAwB/DRyY
rzF6+qzrolfwZMvFyMmAGs4rSuHNymzJvLpkRgyF8qor/Yrj3vloPGKf9RBdd14i
gItKfSoGIwulvLE+VVhk8X4UEyPeTQE=
-----END CERTIFICATE-----
Generated at Tue Apr 14 18:16:29 2026 by rpki-client