Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F5E9D69E9BAD11F1B43705D5CE1D38B0.roa
File: F5E9D69E9BAD11F1B43705D5CE1D38B0.roa (raw, json)
Hash identifier: QqqIMaFGVc2MIgIVBlZV2dj6+fISVepcTy7Qq8S1ZCc=
Subject key identifier: 99:C8:40:25:E5:2B:A4:A2:3C:76:16:AD:F2:80:49:91:C8:56:00:F1
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 19B0
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F5E9D69E9BAD11F1B43705D5CE1D38B0.roa
Signing time: Wed 19 Aug 2026 09:11:28 +0000
ROA not before: Wed 19 Aug 2026 09:11:25 +0000
ROA not after: Sat 19 Aug 2028 09:11:25 +0000
asID: 212238
IP address blocks: 102.129.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 21 Aug 2026 09:44:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6576 (0x19b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Aug 19 09:11:25 2026 GMT
Not After : Aug 19 09:11:25 2028 GMT
Subject: CN=6a857340-0d7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:77:22:bb:a0:f6:21:dc:45:ec:cd:48:2f:39:
0f:0b:82:7f:43:9d:bd:20:f3:a1:f7:66:8e:e1:38:
56:0d:b9:42:4c:90:6e:c0:95:72:ea:fb:51:d6:b4:
d0:3a:b7:42:c9:d9:35:04:17:59:95:45:d1:60:b7:
81:67:6b:db:73:4f:31:7c:81:c7:ce:a4:cd:7e:42:
0c:e0:3c:f1:c5:b7:4b:aa:5b:03:01:6c:aa:14:a3:
c1:25:cf:8b:59:12:ed:93:fc:76:18:42:eb:f1:45:
f9:bb:2a:10:b1:48:22:79:fa:cf:73:46:25:ec:68:
ea:6a:4a:67:ba:22:84:7b:26:aa:b0:d7:e5:43:31:
b9:3e:7e:1b:65:b5:13:9d:2c:cd:c8:29:71:47:ae:
23:d1:97:d7:8a:68:8d:20:c5:0a:b1:3e:14:83:3c:
04:07:bd:fd:31:04:80:1a:11:e6:ae:8a:9b:e9:8d:
c7:f4:30:d0:1f:ad:d2:06:e1:a8:57:c3:66:06:17:
97:eb:5f:87:84:a3:52:3a:58:47:c1:ff:cc:5e:54:
43:61:b8:8b:7b:7e:76:e1:e1:15:bc:90:c7:2b:07:
f8:76:db:33:b5:1b:18:d5:43:24:da:1b:f1:31:9f:
4e:57:42:0b:48:5b:94:fb:26:f6:b6:54:78:6c:5b:
08:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:C8:40:25:E5:2B:A4:A2:3C:76:16:AD:F2:80:49:91:C8:56:00:F1
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F5E9D69E9BAD11F1B43705D5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.143.0/24
Signature Algorithm: sha256WithRSAEncryption
20:31:24:60:b2:a2:d3:e7:90:39:86:e4:4f:1d:65:8f:ee:f7:
ab:67:2f:b1:91:c8:8f:50:71:2c:1f:5d:5f:c0:1f:46:ff:96:
02:67:39:98:3b:31:d4:03:1e:b0:66:c7:7b:8c:94:7c:6c:a0:
64:16:5c:5b:cf:3b:6f:a8:be:57:b7:53:3f:95:ee:2a:95:39:
bf:4f:31:a0:97:4d:b3:41:a4:96:9c:c9:0b:7f:40:c1:ab:30:
80:53:44:f8:29:79:60:a3:01:e2:bd:b0:a2:57:68:81:4e:94:
04:7e:0a:50:b9:36:05:93:f7:a5:17:4c:93:42:5d:dc:41:75:
9e:c3:90:e4:6e:c3:69:bc:97:3f:73:e8:d8:21:6b:80:bc:a6:
c6:7a:1e:3d:9c:7b:7c:ec:32:d3:76:f5:40:01:af:dd:7f:1f:
ce:57:d2:44:bc:93:a2:1b:24:22:be:94:e3:f4:a1:07:67:ba:
61:3c:8b:1e:37:9c:7d:c9:47:1a:e8:b0:b4:ab:1c:f9:ff:d1:
de:9a:d3:9e:f1:fc:ad:c9:b6:af:7e:73:e2:dc:6b:e2:e5:74:
a6:ac:3f:bb:ef:30:42:a6:01:fc:a0:77:86:e7:67:12:ae:df:
1e:74:15:c1:2d:18:e8:8d:73:b7:52:53:91:b4:a9:0f:4e:b5:
a0:14:b4:a0
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICGbAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yNjA4MTkwOTExMjVaFw0yODA4MTkwOTExMjVaMBgxFjAU
BgNVBAMTDTZhODU3MzQwLTBkN2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDMdyK7oPYh3EXszUgvOQ8Lgn9Dnb0g86H3Zo7hOFYNuUJMkG7AlXLq+1HW
tNA6t0LJ2TUEF1mVRdFgt4Fna9tzTzF8gcfOpM1+QgzgPPHFt0uqWwMBbKoUo8El
z4tZEu2T/HYYQuvxRfm7KhCxSCJ5+s9zRiXsaOpqSme6IoR7Jqqw1+VDMbk+fhtl
tROdLM3IKXFHriPRl9eKaI0gxQqxPhSDPAQHvf0xBIAaEeauipvpjcf0MNAfrdIG
4ahXw2YGF5frX4eEo1I6WEfB/8xeVENhuIt7fnbh4RW8kMcrB/h22zO1GxjVQyTa
G/Exn05XQgtIW5T7Jva2VHhsWwgLAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUmchA
JeUrpKI8dhat8oBJkchWAPEwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4L0Y1RTlENjlFOUJBRDExRjFCNDM3MDVENUNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgY8wDQYJKoZIhvcNAQEL
BQADggEBACAxJGCyotPnkDmG5E8dZY/u96tnL7GRyI9QcSwfXV/AH0b/lgJnOZg7
MdQDHrBmx3uMlHxsoGQWXFvPO2+ovle3Uz+V7iqVOb9PMaCXTbNBpJacyQt/QMGr
MIBTRPgpeWCjAeK9sKJXaIFOlAR+ClC5NgWT96UXTJNCXdxBdZ7DkORuw2m8lz9z
6Ngha4C8psZ6Hj2ce3zsMtN29UABr91/H85X0kS8k6IbJCK+lOP0oQdnumE8ix43
nH3JRxrosLSrHPn/0d6a057x/K3Jtq9+c+Lca+LldKasP7vvMEKmAfygd4bnZxKu
3x50FcEtGOiNc7dSU5G0qQ9OtaAUtKA=
-----END CERTIFICATE-----
Generated at Wed Aug 19 23:37:07 2026 by rpki-client