Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3618519/2BFB6B42916111EB9B0F954AF8AEA228/52E536F885E311F1839138D4CE1D38B0.roa
File: 52E536F885E311F1839138D4CE1D38B0.roa (raw, json)
Hash identifier: O0OVa2whdj8gilhHf+SzgfGnaY2H5s9OCpqjpLb1cBE=
Subject key identifier: 1F:7F:AD:C6:1F:DE:81:7C:90:B0:AD:58:DF:C1:41:E8:EA:99:04:83
Certificate issuer: /CN=F3618519AF/serialNumber=7BD8A2D0454D6263E227FA7EEA6A1F865AF02406
Certificate serial: 07FC
Authority key identifier: 7B:D8:A2:D0:45:4D:62:63:E2:27:FA:7E:EA:6A:1F:86:5A:F0:24:06
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/e9ii0EVNYmPiJ_p-6mofhlrwJAY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3618519/2BFB6B42916111EB9B0F954AF8AEA228/52E536F885E311F1839138D4CE1D38B0.roa
Signing time: Wed 22 Jul 2026 15:38:02 +0000
ROA not before: Wed 22 Jul 2026 15:37:58 +0000
ROA not after: Sat 31 Jul 2027 15:37:58 +0000
asID: 328813
IP address blocks: 2001:43ff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3618519/2BFB6B42916111EB9B0F954AF8AEA228/e9ii0EVNYmPiJ_p-6mofhlrwJAY.crl
rsync://rpki.afrinic.net/repository/member_repository/F3618519/2BFB6B42916111EB9B0F954AF8AEA228/e9ii0EVNYmPiJ_p-6mofhlrwJAY.mft
rsync://rpki.afrinic.net/repository/afrinic/e9ii0EVNYmPiJ_p-6mofhlrwJAY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2044 (0x7fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3618519AF, serialNumber=7BD8A2D0454D6263E227FA7EEA6A1F865AF02406
Validity
Not Before: Jul 22 15:37:58 2026 GMT
Not After : Jul 31 15:37:58 2027 GMT
Subject: CN=6a60e3da-ca29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:2c:48:9b:e2:9f:f4:69:34:60:46:78:67:b0:
32:45:c0:e0:fd:d2:8a:b2:5f:72:28:ce:57:eb:b6:
35:8b:b3:3e:35:ce:20:bb:43:63:eb:3b:85:a9:a1:
cf:d1:99:f4:af:42:ce:f8:ce:b4:e8:a5:55:df:7b:
e1:dc:d7:1b:63:15:2b:c7:6e:1c:30:0c:58:c9:d8:
18:a5:89:5c:22:a3:25:c9:4a:0c:0c:12:4b:21:18:
1e:3e:9b:f7:8d:83:c4:f4:a9:94:63:99:43:a5:11:
74:47:ae:65:bd:02:80:be:85:7a:f2:54:78:bc:36:
8c:a4:08:9d:bf:ed:89:6e:35:e7:d8:63:93:84:73:
da:c7:68:91:12:10:53:12:ce:f3:84:d8:26:b1:7b:
51:e1:96:2f:af:09:25:1d:5a:7d:fa:60:91:99:b8:
01:12:cd:0f:87:96:d1:75:23:fd:f3:88:a5:70:70:
7e:88:18:d5:74:b0:85:f2:ce:55:cf:96:42:12:22:
22:b4:a7:fc:6b:8d:40:6d:00:c1:cf:85:4d:87:60:
74:86:a3:32:2b:95:5a:33:d8:63:11:49:f0:39:47:
41:a8:1a:fa:f5:64:74:83:2c:ac:22:63:14:cf:84:
ef:3b:11:3d:0d:d4:60:3e:4a:0f:71:6e:db:1d:70:
ad:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:7F:AD:C6:1F:DE:81:7C:90:B0:AD:58:DF:C1:41:E8:EA:99:04:83
X509v3 Authority Key Identifier:
keyid:7B:D8:A2:D0:45:4D:62:63:E2:27:FA:7E:EA:6A:1F:86:5A:F0:24:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3618519/2BFB6B42916111EB9B0F954AF8AEA228/e9ii0EVNYmPiJ_p-6mofhlrwJAY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/e9ii0EVNYmPiJ_p-6mofhlrwJAY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3618519/2BFB6B42916111EB9B0F954AF8AEA228/52E536F885E311F1839138D4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:43ff::/48
Signature Algorithm: sha256WithRSAEncryption
02:1e:32:65:eb:7a:39:21:eb:08:90:17:a0:a6:d4:87:1b:13:
0f:4a:40:8e:29:e1:60:9c:f6:db:88:b4:12:15:bd:cb:ac:5a:
ef:65:cc:4c:4a:0b:5f:74:a2:81:27:f7:b1:3c:f9:eb:41:43:
7e:e3:88:c3:15:3d:a1:d5:a7:8c:99:4a:21:72:00:84:46:ef:
b7:b4:62:b9:0a:c4:1f:41:e8:29:f8:c9:76:4e:ff:2e:87:c0:
84:37:d2:8c:a5:54:77:28:01:f5:17:94:1e:6e:15:f7:38:6d:
2c:97:f3:83:21:81:03:55:d2:9f:37:45:3b:94:b5:44:e0:41:
5c:71:40:a0:70:1e:f1:22:5f:6d:1d:ae:b3:40:04:72:bd:f9:
a9:0f:60:c3:65:60:51:29:72:9b:d0:ea:a8:57:d3:5b:a1:cf:
10:cd:2a:c8:dc:08:fb:03:9a:fd:19:b1:a9:f4:52:58:48:36:
8d:e8:77:ac:6d:52:6f:bc:65:ac:4d:c0:a7:de:98:01:a7:eb:
b1:9c:8b:15:09:28:40:bc:ae:9b:2d:19:82:9c:97:cf:bd:7c:
82:bb:df:16:46:f8:d6:b2:cc:fa:25:f5:5e:92:dd:07:7d:9d:
95:8c:60:5c:8d:fd:4c:77:d7:45:f7:58:95:84:4a:e2:53:4c:
bd:16:37:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:45:52 2026 by rpki-client