Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/EC1A604E3FC211F1938D9706CF1D38B0.roa
File: EC1A604E3FC211F1938D9706CF1D38B0.roa (raw, json)
Hash identifier: OP0qeQgSaO2gwzk9dDe9hM9DrqMk5V1q6hRQs75AorU=
Subject key identifier: 5C:ED:DD:D0:8E:B6:C4:3A:64:B6:C2:E4:05:2A:5E:64:F2:0B:FE:F8
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1834
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/EC1A604E3FC211F1938D9706CF1D38B0.roa
Signing time: Fri 24 Apr 2026 09:49:45 +0000
ROA not before: Fri 24 Apr 2026 09:49:40 +0000
ROA not after: Mon 24 Apr 2028 09:49:40 +0000
asID: 834
IP address blocks: 102.129.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Apr 2026 09:49:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6196 (0x1834)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Apr 24 09:49:40 2026 GMT
Not After : Apr 24 09:49:40 2028 GMT
Subject: CN=69eb3cb8-4e6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:81:d1:5c:cf:55:06:dc:bf:6d:29:5e:1d:ca:
52:69:b7:85:1c:57:82:4a:13:f0:44:b0:2f:b5:5a:
7d:fa:06:84:17:04:19:52:d3:78:19:58:96:64:eb:
fa:a7:42:58:10:2d:00:1f:b2:40:d9:98:ec:06:9f:
5f:44:8a:80:3d:7d:a0:4a:8f:ea:d5:6f:50:3c:f2:
86:e5:c5:65:05:4a:dd:d6:01:66:3f:c1:5e:b1:9b:
9b:bc:b1:62:4e:6d:06:3a:1e:a8:05:a7:7c:9e:2a:
60:2a:2e:6b:e7:9e:1d:15:0d:2d:5e:83:e7:63:7c:
4f:63:7a:a5:4b:8e:fb:4a:49:2c:51:3d:db:7b:6d:
b1:7b:08:bb:ff:41:6b:b2:73:9d:26:b8:d9:61:ba:
56:08:b6:5d:7d:93:ce:e1:d4:33:27:d6:32:75:b8:
29:e8:68:da:98:9c:63:89:38:3b:93:cf:bb:8b:2f:
53:0d:bf:89:93:75:9c:48:7c:a3:0f:8a:ef:1b:d8:
c1:b1:22:b5:b3:4d:9c:5f:fd:22:4b:c9:30:91:a5:
07:83:c5:57:fa:d2:0c:bd:70:d3:13:39:af:98:7f:
44:1d:e5:77:c1:96:04:65:69:72:84:67:71:f5:95:
ef:b7:b7:dd:05:e8:df:25:7d:e1:ea:b2:ec:e0:b0:
d2:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:ED:DD:D0:8E:B6:C4:3A:64:B6:C2:E4:05:2A:5E:64:F2:0B:FE:F8
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/EC1A604E3FC211F1938D9706CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.134.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:8a:ac:44:98:c7:d2:89:57:ff:37:f1:65:2a:6a:9c:b5:d6:
36:f9:1e:19:86:05:19:2c:8b:cb:7b:ee:99:e2:41:c7:39:0f:
47:e8:ce:8e:b0:d4:a5:9e:11:fb:3a:6e:78:ef:55:06:13:49:
81:54:c7:62:17:0b:33:33:0d:15:70:c6:c4:24:86:45:a1:37:
29:63:b8:18:fd:95:d8:83:7b:87:b2:8d:48:69:c2:b8:c3:ed:
15:ed:30:92:1d:68:dc:6e:4e:6e:1f:b2:6b:8f:28:c0:d1:41:
ca:32:64:37:11:59:d4:bf:6a:ef:d4:a3:36:94:fd:6a:58:56:
39:b3:78:30:32:ba:42:b4:cb:e3:4c:41:85:cc:6a:76:02:bb:
63:39:61:16:a5:ee:a0:9d:b0:97:c7:6c:9e:23:f6:66:4a:ed:
28:b3:06:f1:65:d2:b4:f4:69:a0:75:b8:57:95:5b:f7:d9:22:
cc:14:27:5f:45:58:07:92:02:33:68:69:59:ad:1c:8a:69:b7:
78:14:d5:60:c6:ef:50:4d:7f:89:16:49:5c:25:a5:d4:24:44:
f5:49:cc:80:9a:3c:91:a1:3d:85:2d:7c:c1:8f:4d:52:d2:19:
11:bd:f8:d5:b5:b5:fd:dd:89:c7:ef:ff:80:74:af:d1:ca:de:
9f:58:c1:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 24 20:49:11 2026 by rpki-client