Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E90CDC7A1C4911F1A1400BB9DAE4EC9C.roa
File: E90CDC7A1C4911F1A1400BB9DAE4EC9C.roa (raw, json)
Hash identifier: 7+tP+N5RW3KnhMU+0gJYK0u7/4DD7xqLla9KDMQsS+U=
Subject key identifier: ED:84:BC:AC:FD:BE:DC:1C:F3:EB:C5:BD:89:54:18:19:8F:D1:1F:A5
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 17A3
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E90CDC7A1C4911F1A1400BB9DAE4EC9C.roa
Signing time: Tue 10 Mar 2026 06:25:20 +0000
ROA not before: Tue 10 Mar 2026 06:25:15 +0000
ROA not after: Fri 10 Mar 2028 06:25:15 +0000
asID: 61317
IP address blocks: 102.129.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 00:06:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6051 (0x17a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Mar 10 06:25:15 2026 GMT
Not After : Mar 10 06:25:15 2028 GMT
Subject: CN=69afb950-36d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2c:18:39:2c:c7:f4:36:0a:a4:89:06:a4:00:
cc:b0:bb:cb:e3:59:5c:c2:8c:39:ce:54:10:6d:0c:
ea:fb:7b:38:14:c3:62:66:ab:c6:80:29:68:da:51:
83:11:9a:dd:28:0b:96:b9:26:eb:d0:1b:aa:45:80:
87:66:bb:17:88:df:e7:84:53:06:28:7e:ba:3f:3f:
f5:15:9c:85:05:f8:0d:55:a9:da:f2:63:7b:eb:fc:
dd:f4:47:17:dc:18:35:60:33:a0:d6:86:8e:e5:ea:
05:e1:62:af:7a:2c:15:f2:84:69:7e:70:e2:fd:06:
3b:17:36:a1:59:57:c6:a6:06:86:95:cf:21:e3:76:
b8:82:4d:c9:f4:f2:52:a6:54:78:23:64:d0:b6:88:
88:08:7b:5e:db:35:d6:34:96:22:88:f9:9d:71:45:
85:37:6d:e2:ad:4c:b6:4c:dc:7a:bf:b4:73:8d:cc:
23:59:ea:95:5f:8f:dd:64:6d:06:c3:0a:52:91:6d:
a6:d5:ae:79:5b:f1:56:35:10:98:a6:c3:28:6a:ca:
dc:05:b3:07:d5:ad:dc:81:95:6d:b7:f4:d7:b0:56:
1c:dc:68:20:42:bd:00:ec:78:ba:f7:88:a5:04:c5:
bd:31:23:4b:4b:46:fa:2a:81:3d:e3:8a:37:a5:13:
70:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:84:BC:AC:FD:BE:DC:1C:F3:EB:C5:BD:89:54:18:19:8F:D1:1F:A5
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E90CDC7A1C4911F1A1400BB9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.220.0/24
Signature Algorithm: sha256WithRSAEncryption
af:7a:83:1d:d2:dc:b3:0e:0e:2f:95:da:6a:87:90:e7:47:12:
f4:79:0e:c0:d1:9b:14:2f:b2:95:ab:10:fc:d6:5a:2f:79:a6:
34:53:fb:5b:0e:f7:48:55:47:fb:0e:8d:97:9e:b3:fa:83:03:
86:85:38:86:60:f6:c8:cc:74:df:a4:14:ef:3b:68:cd:1d:67:
23:84:9c:13:34:ad:b3:4c:fc:f7:e0:e2:eb:2a:89:17:67:31:
82:f9:51:da:ba:73:38:ca:cd:c8:3e:04:64:97:ed:5b:8c:3f:
c6:35:7c:4a:c8:59:d6:7d:df:7d:bf:90:cc:f4:f5:3a:2c:00:
4c:da:e8:5b:78:f4:39:ed:43:c9:04:b4:50:84:9a:95:0c:44:
6f:e6:d5:d1:c2:40:d6:9d:e9:15:e1:0d:bc:f2:d8:6f:b3:a7:
51:07:2b:a7:3d:13:08:27:d5:8d:ef:e4:cf:77:73:57:08:b5:
c8:6d:ee:32:b7:0b:d6:76:3a:af:6b:86:85:7e:d3:d6:48:1c:
69:10:6d:83:02:32:10:d5:05:55:73:93:e4:bd:d3:c1:90:0c:
c5:6a:97:55:04:e6:3c:a0:a5:cd:d8:aa:32:3f:03:0e:ca:da:
6d:49:96:9d:51:d6:59:9d:26:a8:f7:eb:17:be:8c:65:0c:24:
00:22:3d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 10:14:28 2026 by rpki-client