Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F20A756A75F611F194E7CAF8CE1D38B0.roa
File: F20A756A75F611F194E7CAF8CE1D38B0.roa (raw, json)
Hash identifier: 8u3eS2K8A/1kj5mLCVuXslAnHLK3JLpZPdH/oKiNyYY=
Subject key identifier: AC:48:B0:E3:CB:37:D8:7B:7A:55:BB:73:C6:33:29:BF:94:24:E9:97
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1935
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F20A756A75F611F194E7CAF8CE1D38B0.roa
Signing time: Thu 02 Jul 2026 09:18:11 +0000
ROA not before: Thu 02 Jul 2026 09:18:07 +0000
ROA not after: Sun 02 Jul 2028 09:18:07 +0000
asID: 834
IP address blocks: 102.129.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 Jul 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6453 (0x1935)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jul 2 09:18:07 2026 GMT
Not After : Jul 2 09:18:07 2028 GMT
Subject: CN=6a462cd3-7a00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:75:c8:ce:5b:d5:0e:8c:1c:ad:49:bd:08:0e:
b2:ed:db:35:45:9c:93:fc:6d:2c:b0:b5:0d:8b:ba:
26:36:c3:85:a6:20:08:cd:f5:6c:40:d4:e2:6d:cc:
11:60:31:d0:69:8c:47:f3:ae:87:0a:97:da:bf:f6:
75:ee:ab:5b:24:c3:bb:85:eb:47:1e:c0:b4:8d:6d:
d7:c6:83:c5:18:d7:63:8f:ff:34:8f:64:d8:8e:74:
34:8a:13:a6:18:88:76:f3:0b:c0:a3:ea:f8:61:44:
dc:b1:4c:4c:12:a9:71:03:a8:7d:88:e2:ff:d3:63:
3f:69:6e:81:5b:4d:5b:53:cf:43:ab:9a:7e:eb:65:
5a:9c:9d:85:c2:a9:8c:16:f5:78:d1:b2:68:03:ba:
bd:01:bb:0f:9c:be:82:ab:68:1f:07:b2:1f:04:4c:
54:2f:b8:d9:07:b6:f6:00:45:e8:ae:04:19:14:10:
50:42:86:fe:8e:4e:2f:a2:14:db:61:10:63:a7:bf:
8b:bd:12:85:6d:65:ad:2a:c2:c5:a7:a1:90:61:43:
94:e5:95:6d:fc:e7:f4:43:f4:be:ae:b1:cc:43:43:
a1:c4:6e:f7:7d:7d:54:e1:d7:d7:ec:55:de:28:b7:
1b:bc:31:42:49:9b:85:a5:29:c2:26:43:1c:68:fe:
a1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:48:B0:E3:CB:37:D8:7B:7A:55:BB:73:C6:33:29:BF:94:24:E9:97
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F20A756A75F611F194E7CAF8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.245.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:e9:d7:3b:76:55:f3:f3:81:3b:a0:0c:f5:b2:20:22:eb:ca:
58:ed:40:a7:da:00:7f:bc:ba:6c:98:50:ea:21:6c:af:d4:f9:
7a:10:2c:86:99:10:2b:16:a4:43:ed:e6:38:3b:5e:c6:e8:4b:
ac:cb:a9:ee:52:30:65:c0:21:72:cc:fe:65:2e:24:a7:38:ff:
d5:8c:56:f4:1f:43:8c:2c:14:8f:23:a7:c3:e2:2b:4d:6b:da:
65:6c:42:b2:75:7e:16:ec:7e:8c:ea:99:21:7a:bd:3f:dc:67:
19:ff:2b:81:86:11:7d:05:dd:56:b7:db:30:c8:8b:0c:48:40:
6f:6f:51:cd:61:21:b0:e6:12:a6:b9:d7:d0:cb:1a:63:29:47:
4f:81:3f:4e:93:ea:f9:10:56:56:32:a1:f2:a9:20:4b:f4:b2:
e4:67:04:61:4a:2e:7f:1c:a4:e1:aa:7f:cf:dd:26:71:90:33:
41:46:da:63:b0:65:7d:b1:db:68:25:30:ec:07:0d:9f:9b:6b:
b1:84:15:07:1b:6e:ec:3f:c7:68:83:75:eb:34:cb:84:50:24:
dc:87:58:ad:97:85:ea:c9:60:58:35:48:66:d2:b0:45:e1:df:
48:1a:a0:1f:a8:e9:b2:af:ad:69:ae:a8:77:07:16:33:6c:ad:
18:10:f8:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 06:28:07 2026 by rpki-client