Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E0FC9FCE8D7E11F1BD4B05D4CE1D38B0.roa
File: E0FC9FCE8D7E11F1BD4B05D4CE1D38B0.roa (raw, json)
Hash identifier: TvwYBOryeAe7SS9HpEv6o/Ddz+x0H9aZp2Q8R6uxq78=
Subject key identifier: AE:BF:3C:5E:5F:69:A4:7A:D5:F0:1A:A8:8C:6C:9A:E0:4C:B1:B2:7B
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1978
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E0FC9FCE8D7E11F1BD4B05D4CE1D38B0.roa
Signing time: Sat 01 Aug 2026 07:59:11 +0000
ROA not before: Sat 01 Aug 2026 07:59:07 +0000
ROA not after: Tue 01 Aug 2028 07:59:07 +0000
asID: 834
IP address blocks: 102.129.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 03 Aug 2026 00:07:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6520 (0x1978)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Aug 1 07:59:07 2026 GMT
Not After : Aug 1 07:59:07 2028 GMT
Subject: CN=6a6da74f-31b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:32:dc:4b:ec:16:94:0a:b7:ea:1f:7a:94:5b:
a6:3f:a3:e0:02:02:75:63:86:e7:5b:cf:15:35:e4:
51:50:15:69:e6:c6:38:3f:41:fa:04:3d:4c:65:34:
bd:ba:db:2d:a5:5c:d4:61:5b:7a:10:c3:13:c8:85:
5e:fd:41:ae:23:8f:15:1e:67:43:1b:c3:bc:5e:b7:
ba:a1:7d:8a:5f:36:e1:c8:11:9a:0d:b6:e9:0d:85:
5a:55:93:31:d5:f8:07:a1:40:91:41:59:e3:d4:34:
de:e5:32:8e:63:e3:65:1d:e1:b9:cc:bc:25:19:56:
ba:d9:f7:29:9f:4d:5b:19:e4:fd:43:f6:19:8c:e5:
1b:5a:ed:5b:ca:9b:96:77:64:a7:23:bb:61:df:cd:
91:fe:0b:d8:d3:c8:db:53:a3:ab:d6:9c:13:c0:7f:
3c:c5:26:41:32:82:35:ff:90:bb:f4:5b:82:b4:dd:
21:ae:77:eb:78:26:dd:a3:fb:11:83:13:8f:ee:df:
ff:cb:c1:5c:8c:79:44:a6:a3:8d:e9:53:ea:3c:dd:
58:a1:94:6e:fc:6e:8a:9f:87:36:fa:bf:ca:68:70:
3b:7c:1a:9d:5e:4a:87:f2:2c:78:41:6b:be:6e:a1:
12:86:60:4d:e2:0f:77:b8:28:44:84:7d:68:c1:88:
67:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:BF:3C:5E:5F:69:A4:7A:D5:F0:1A:A8:8C:6C:9A:E0:4C:B1:B2:7B
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E0FC9FCE8D7E11F1BD4B05D4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.252.0/24
Signature Algorithm: sha256WithRSAEncryption
30:03:64:6d:16:b9:1e:ee:4e:7a:c3:c5:91:76:45:1b:da:cb:
a8:4d:34:e3:23:81:a0:6b:34:fa:39:c8:09:32:a5:5f:0e:e3:
04:c4:c4:40:dc:1b:84:16:4b:c4:95:ad:a6:ed:21:a8:20:7b:
ce:62:28:8c:f4:fb:39:23:da:ed:3b:3f:20:0e:59:f9:e7:95:
87:d4:f9:e9:8b:f9:71:77:4a:56:32:6d:16:86:df:a6:00:00:
d4:de:8b:3f:6b:7e:ab:1a:7b:0f:5a:d0:bb:35:75:5f:30:40:
e5:ad:09:49:b2:93:bd:7d:9e:f6:ab:75:87:b5:97:93:85:ac:
88:5e:cb:00:82:83:98:3f:3b:3e:74:eb:06:76:b6:1e:c9:4e:
4f:6d:d3:de:fb:0f:c2:f7:cf:df:a1:7a:3a:26:ba:1c:15:c2:
84:70:94:7a:dd:d0:94:1f:d7:df:67:65:5c:4a:ab:03:6e:c1:
d9:4e:4e:67:30:73:c6:c1:8e:39:56:d6:59:d0:e5:1c:fd:ff:
09:b4:88:a7:10:0d:c7:db:87:06:76:5c:58:80:ff:b2:0f:d1:
c5:72:12:00:8d:22:23:fe:28:ab:6e:65:66:ba:4d:f8:ff:fb:
0d:82:ef:6e:d7:4f:ca:67:60:93:fc:4f:0d:82:03:e7:11:0a:
01:6f:79:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 1 13:20:10 2026 by rpki-client