Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F9D3C5E85DA611F1BD0323EBCE1D38B0.roa
File: F9D3C5E85DA611F1BD0323EBCE1D38B0.roa (raw, json)
Hash identifier: D5KDpgBR9CfVWtQloYcdZgfpukJ4B4Ki7434cSTapdk=
Subject key identifier: F9:0E:5A:31:3F:DC:54:D1:B0:47:70:24:60:2A:09:20:02:75:8B:2A
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 18C3
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F9D3C5E85DA611F1BD0323EBCE1D38B0.roa
Signing time: Mon 01 Jun 2026 10:45:17 +0000
ROA not before: Mon 01 Jun 2026 10:45:12 +0000
ROA not after: Thu 01 Jun 2028 10:45:12 +0000
asID: 153671
IP address blocks: 102.129.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 03 Jun 2026 00:07:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6339 (0x18c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jun 1 10:45:12 2026 GMT
Not After : Jun 1 10:45:12 2028 GMT
Subject: CN=6a1d62bc-af53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:33:2e:09:82:83:11:0e:6e:3f:74:fa:f0:c1:
36:87:8d:12:69:bb:7e:2e:d0:1e:96:42:80:27:4e:
ab:a8:f9:2d:66:0c:73:36:39:09:a5:29:ff:11:e0:
b7:17:2d:75:e2:d8:4b:33:c2:a3:f6:3f:d4:e9:56:
3e:42:04:ba:9f:90:61:ce:27:a8:ab:8d:3c:23:1f:
65:50:25:a5:e9:2b:85:ef:a8:18:be:d0:88:b9:ef:
5b:0c:62:ca:5f:c9:3b:77:6b:8b:4e:f3:09:ae:3b:
a5:9a:6f:88:0a:0f:b1:d9:38:6f:83:01:57:82:c7:
14:2d:ee:32:06:cb:19:9c:a3:7e:23:23:05:97:79:
b7:c5:e3:43:8b:6f:bb:bf:06:6d:3a:a8:b5:da:65:
ff:c1:77:eb:b6:4e:ad:5d:7e:43:6b:8a:89:05:36:
e9:3c:a7:13:94:e0:8e:07:05:7f:df:7d:4f:38:e2:
80:79:01:dc:f4:3f:1a:3a:6f:71:0d:87:f8:02:0e:
91:95:ce:50:fb:2e:ca:ce:83:d8:21:39:ed:10:2f:
62:11:4e:67:59:f0:e3:0a:78:c4:42:89:cd:4f:2b:
6a:be:5e:8c:3c:4d:2b:64:54:25:01:9b:f6:d7:59:
44:72:fc:50:d6:21:c6:24:48:04:62:78:db:28:33:
bc:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:0E:5A:31:3F:DC:54:D1:B0:47:70:24:60:2A:09:20:02:75:8B:2A
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F9D3C5E85DA611F1BD0323EBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.183.0/24
Signature Algorithm: sha256WithRSAEncryption
81:c6:56:2e:c0:f8:4d:45:1b:db:10:79:7c:5b:1a:41:49:2c:
a7:ab:6e:35:64:8d:63:8a:c4:56:6d:84:9d:8a:af:78:fd:6a:
2e:37:a8:4e:3d:dc:bf:34:43:a3:6e:c8:63:7c:19:08:43:04:
8d:23:79:05:0f:5f:28:c6:55:58:2a:22:4f:d4:8d:b3:8d:95:
a1:48:b1:f6:6d:4a:dc:0b:97:7b:f2:4f:47:d9:d6:f4:30:d2:
66:41:f8:00:72:e3:aa:8a:7c:e5:aa:53:d4:f2:03:d0:eb:9f:
7d:a8:7f:87:79:d2:ed:0f:c5:e1:86:b8:6a:ff:ac:29:9a:14:
3d:f6:b8:21:db:a7:52:1c:9a:6c:1c:40:4c:91:3d:6b:47:41:
54:d9:a5:8b:cf:f1:47:46:1b:fc:41:d7:3a:af:7b:8c:c6:66:
e9:50:b1:9e:2c:61:76:02:aa:06:b0:fe:e8:3c:66:42:cb:eb:
4f:55:a7:72:4e:32:1c:5e:3d:f1:d9:7a:66:2b:b9:ca:29:99:
c2:ee:98:f1:d4:9a:ec:b1:e4:34:8e:09:a0:ba:81:93:a5:4b:
a3:c9:12:72:dc:12:b7:6a:1e:dd:4d:97:67:94:c0:25:c0:ec:
9d:e1:8e:28:4b:37:40:50:7e:7a:fb:ca:82:e2:64:82:99:62:
0e:73:2e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 1 23:45:03 2026 by rpki-client