Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E8D4D8323E0B11F189D20E09CF1D38B0.roa
File: E8D4D8323E0B11F189D20E09CF1D38B0.roa (raw, json)
Hash identifier: TqYS9Rt2IBbucWLRHIXKIHsTFs4lcVfb9O0gGijaGKs=
Subject key identifier: 99:7C:5F:18:7D:38:3A:BE:C2:1D:29:2B:E3:9C:E1:CB:DD:B1:AC:BF
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1826
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E8D4D8323E0B11F189D20E09CF1D38B0.roa
Signing time: Wed 22 Apr 2026 05:27:10 +0000
ROA not before: Wed 22 Apr 2026 05:27:05 +0000
ROA not after: Sat 22 Apr 2028 05:27:05 +0000
asID: 198487
IP address blocks: 102.129.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 24 Apr 2026 05:27:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6182 (0x1826)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Apr 22 05:27:05 2026 GMT
Not After : Apr 22 05:27:05 2028 GMT
Subject: CN=69e85c2e-f79e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e2:56:9d:07:42:b0:81:97:ab:36:47:b9:dd:
e2:4f:da:02:ec:fe:52:06:93:3a:f3:b4:d0:f8:4e:
80:07:6f:f7:60:17:ce:32:37:5f:7b:73:6f:9e:2d:
57:c6:7a:2e:44:14:2e:57:28:b7:01:aa:16:b1:55:
3f:ad:79:9f:43:2f:51:78:64:36:41:ef:c3:53:c9:
51:e4:22:7a:ad:e2:ba:d9:f8:92:54:9d:4b:ef:22:
a7:11:76:b0:c7:34:80:fb:b5:1e:d0:2a:71:4f:8b:
02:44:e5:29:4b:ce:41:77:7f:34:4f:df:5a:26:5d:
dd:99:54:47:e5:d1:8b:d3:11:cf:87:1c:aa:33:61:
16:09:7b:f7:cf:c3:fc:38:82:e3:69:a2:05:65:33:
5a:78:c1:4c:ef:aa:c2:fe:36:61:42:d4:d8:da:bd:
38:68:dd:9a:7a:c9:e5:2a:75:49:f4:07:fb:5c:8b:
88:4e:44:31:7a:a0:b3:ba:4c:9b:d9:83:9e:29:d8:
5b:85:49:e8:8f:8e:94:81:5e:1e:42:26:69:65:50:
b9:20:6f:c4:0d:7b:a3:4b:2e:37:2e:a4:8e:8c:68:
f7:79:f1:38:b9:a5:89:0e:34:c6:31:db:60:14:1e:
66:dd:56:24:f7:9c:62:8d:ec:20:5f:24:1f:2a:62:
e1:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:7C:5F:18:7D:38:3A:BE:C2:1D:29:2B:E3:9C:E1:CB:DD:B1:AC:BF
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E8D4D8323E0B11F189D20E09CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.225.0/24
Signature Algorithm: sha256WithRSAEncryption
10:f4:6e:e5:b1:a5:9b:2b:84:e8:54:1c:e3:a4:ef:30:12:5b:
38:c5:10:65:0d:51:c1:2c:46:4f:59:f4:39:84:9e:be:2e:5a:
70:46:7c:7a:4c:0e:ac:30:b2:56:15:54:41:6f:8f:21:99:d2:
dc:c6:10:d9:0f:6a:ca:a1:af:64:d5:bd:90:af:76:c1:de:a6:
02:13:83:d9:e7:ea:e3:1c:cd:ac:b5:1b:f4:6a:97:b9:ba:56:
f2:a3:f2:74:c5:65:cd:fe:3a:cd:19:79:26:c2:5c:b1:19:d9:
f8:c0:70:4b:b8:14:0a:ad:57:6a:ae:ae:26:d0:f0:84:42:d3:
da:69:48:e9:95:84:98:7b:8c:4b:e2:d7:57:c0:bb:9b:fd:c7:
5d:38:a9:e3:49:17:97:43:fc:7d:6b:e8:3a:3a:a1:0b:3c:19:
e8:eb:6c:96:ac:d8:fd:ab:ce:4f:82:90:47:b8:74:a5:cd:27:
0a:82:09:52:2c:ca:28:b0:73:79:1f:8e:bb:6e:f4:30:21:04:
80:1b:76:56:f9:86:c4:17:76:2f:00:80:e3:da:18:92:84:e5:
b1:27:c5:5a:e5:9f:df:66:be:2e:8a:48:10:97:38:01:e4:21:
0e:14:11:f3:b8:11:d0:ac:3b:6a:e3:28:57:d2:97:53:81:3e:
7c:81:76:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 17:26:21 2026 by rpki-client