Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F09AB6BC6D5511F1BFBFC100CF1D38B0.roa
File: F09AB6BC6D5511F1BFBFC100CF1D38B0.roa (raw, json)
Hash identifier: nG7itI2DM9VAi4Z54U+hjpKImAgOcrnNfGZb35ChrZI=
Subject key identifier: 32:88:41:25:7D:4E:49:3A:C3:C0:4A:BB:2A:CE:1F:C6:77:D3:2E:4C
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1909
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F09AB6BC6D5511F1BFBFC100CF1D38B0.roa
Signing time: Sun 21 Jun 2026 09:45:31 +0000
ROA not before: Sun 21 Jun 2026 09:45:26 +0000
ROA not after: Sat 24 Jun 2028 09:45:26 +0000
asID: 22773
IP address blocks: 102.129.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Jun 2026 00:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6409 (0x1909)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jun 21 09:45:26 2026 GMT
Not After : Jun 24 09:45:26 2028 GMT
Subject: CN=6a37b2ba-7aa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e9:79:c5:a2:11:17:c7:66:11:a9:93:27:1b:
83:0c:bc:d0:af:4a:32:49:0f:2a:55:fd:11:fd:f7:
fa:90:b2:a9:a9:8e:4e:f9:52:ed:33:ca:f9:8a:f1:
4a:30:99:ef:cd:25:0e:3f:41:bd:e5:6f:90:8a:77:
6c:38:4e:13:a7:e0:77:61:56:cf:b6:e7:86:2a:12:
1b:03:51:48:83:e1:5b:41:f3:57:99:d3:a5:20:79:
86:8d:78:c1:54:b9:8c:1b:cb:79:1c:9f:23:16:0b:
67:32:32:8d:84:9f:d8:fa:ad:29:bd:31:14:85:d0:
dd:62:1a:84:cc:5c:60:a3:ac:0b:a8:e9:d3:6d:59:
c0:66:ab:6b:d0:c6:d3:ec:55:e8:2b:06:52:00:c5:
db:b7:7b:1d:35:69:2b:cd:19:05:2b:9c:3f:7b:12:
4f:20:07:f1:51:f5:91:2e:16:8b:a4:75:2b:78:60:
ac:ee:d0:95:8e:74:ec:ce:e6:d2:33:79:84:08:2d:
55:43:b1:dd:e8:2c:b5:e5:30:e5:2d:59:53:ac:71:
9f:a5:e0:5d:2d:63:67:f6:21:b7:53:29:80:56:a8:
9c:2b:d4:e1:82:5d:0d:73:43:77:ac:2b:d2:2d:3c:
35:9d:39:8b:fc:af:2d:11:9c:b8:70:94:3f:f3:65:
44:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:88:41:25:7D:4E:49:3A:C3:C0:4A:BB:2A:CE:1F:C6:77:D3:2E:4C
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F09AB6BC6D5511F1BFBFC100CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.194.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:3e:d9:50:bc:1d:49:0c:84:44:f8:f9:56:07:b7:60:27:b1:
e9:ad:68:b8:43:c4:61:82:f1:20:5e:9c:aa:d6:da:d0:f2:66:
80:01:26:e3:a6:cf:ed:0b:21:4c:5c:0b:8a:e2:e8:1f:23:40:
01:5a:d2:ac:cd:bb:47:59:80:3e:74:0f:5c:a1:59:5f:de:0e:
a6:ef:24:e3:d1:8c:74:42:07:cb:7f:ea:e7:d0:81:48:8c:c9:
bf:80:a4:20:a7:b3:e8:eb:39:32:5f:d7:f4:e3:90:ef:48:31:
7a:a8:17:b0:5f:c2:86:a6:3c:50:ba:28:1e:c9:ec:d4:42:a5:
e5:e0:65:f1:81:ab:23:2b:ad:70:73:6a:34:84:e9:15:56:16:
c2:e3:65:03:01:8a:b8:74:b9:1b:eb:86:cd:05:0d:f9:10:6e:
d5:b7:a9:c9:56:37:a4:fe:a4:a7:d8:6b:3a:5c:57:d7:94:32:
58:d8:85:f3:dd:59:e9:2f:a5:1b:04:bd:ee:74:08:ac:51:c6:
e3:fa:49:70:17:d4:56:1e:e7:cd:b1:33:1e:75:7b:5c:b1:ae:
2b:86:85:69:0b:a3:27:a9:e4:2a:7e:74:ef:9d:a8:bf:68:85:
8b:ea:e3:fd:4a:d2:d7:6d:03:ce:41:6c:bb:b1:69:1e:b0:cd:
ae:12:1a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 21:46:35 2026 by rpki-client