Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3623CAF/D13F9DB0F4F111E5BE8A634CF8AEA228/EEDCD7B8874711F1B7959ADDCE1D38B0.roa
File: EEDCD7B8874711F1B7959ADDCE1D38B0.roa (raw, json)
Hash identifier: zj+lVv65yLchsV3Pei38AK8L8pgPqkZ3OPkz3wu3q0k=
Subject key identifier: 3A:62:EF:5C:7C:59:E9:44:18:90:B4:E0:44:16:7D:DE:82:12:B7:9B
Certificate issuer: /CN=F3623CAFAF/serialNumber=334DE7D2EB862018BB95749B648DCBAF50D13DA8
Certificate serial: 0F11
Authority key identifier: 33:4D:E7:D2:EB:86:20:18:BB:95:74:9B:64:8D:CB:AF:50:D1:3D:A8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/M03n0uuGIBi7lXSbZI3Lr1DRPag.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3623CAF/D13F9DB0F4F111E5BE8A634CF8AEA228/EEDCD7B8874711F1B7959ADDCE1D38B0.roa
Signing time: Fri 24 Jul 2026 10:10:45 +0000
ROA not before: Fri 24 Jul 2026 10:10:41 +0000
ROA not after: Sun 06 Feb 2033 10:10:41 +0000
asID: 22690
IP address blocks: 2c0f:6100::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3623CAF/D13F9DB0F4F111E5BE8A634CF8AEA228/M03n0uuGIBi7lXSbZI3Lr1DRPag.crl
rsync://rpki.afrinic.net/repository/member_repository/F3623CAF/D13F9DB0F4F111E5BE8A634CF8AEA228/M03n0uuGIBi7lXSbZI3Lr1DRPag.mft
rsync://rpki.afrinic.net/repository/afrinic/M03n0uuGIBi7lXSbZI3Lr1DRPag.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3857 (0xf11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3623CAFAF, serialNumber=334DE7D2EB862018BB95749B648DCBAF50D13DA8
Validity
Not Before: Jul 24 10:10:41 2026 GMT
Not After : Feb 6 10:10:41 2033 GMT
Subject: CN=6a633a25-392b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2e:9d:c0:3f:ac:e1:e6:9f:ec:a2:ba:73:22:
3e:29:f7:42:09:47:0c:6f:af:ef:f7:88:b1:d7:21:
68:da:ad:54:9a:07:2b:ac:90:eb:0d:88:5a:55:10:
5e:f6:e7:89:4a:00:bd:45:92:a5:60:30:f4:8a:eb:
89:85:be:d9:31:da:87:fe:ae:fc:62:c0:2c:25:22:
8c:26:cf:55:40:cd:45:24:05:ac:87:a5:8d:76:57:
8d:31:c9:d2:1a:43:06:35:ac:10:a9:74:14:49:4f:
87:69:87:87:c1:48:98:e5:21:c9:f6:c3:ee:de:6c:
13:6a:a5:49:3c:50:42:36:50:94:90:be:b2:6a:99:
64:55:e0:a4:96:40:ac:72:dd:fc:2b:98:25:af:bf:
f5:84:26:1c:d4:fe:9e:c6:53:5b:97:a8:d0:7e:08:
65:d5:77:7e:40:b7:44:bf:f4:9e:1f:57:1f:9c:a2:
71:5d:89:c8:7a:26:90:fa:91:ac:0a:ea:5e:07:0f:
b7:87:f7:49:cc:01:86:a8:9b:6f:e6:e6:1b:d0:fb:
3a:12:78:8b:b0:c4:0b:a8:f8:ba:f0:b7:2c:28:ea:
c3:60:3e:2b:7b:0e:53:ae:53:3e:c7:ca:5c:6e:70:
aa:c8:73:67:3c:2a:e3:d3:0a:d9:28:33:37:31:0e:
dc:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:62:EF:5C:7C:59:E9:44:18:90:B4:E0:44:16:7D:DE:82:12:B7:9B
X509v3 Authority Key Identifier:
keyid:33:4D:E7:D2:EB:86:20:18:BB:95:74:9B:64:8D:CB:AF:50:D1:3D:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3623CAF/D13F9DB0F4F111E5BE8A634CF8AEA228/M03n0uuGIBi7lXSbZI3Lr1DRPag.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/M03n0uuGIBi7lXSbZI3Lr1DRPag.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3623CAF/D13F9DB0F4F111E5BE8A634CF8AEA228/EEDCD7B8874711F1B7959ADDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:6100::/32
Signature Algorithm: sha256WithRSAEncryption
68:ab:72:b3:58:e9:05:4c:cc:83:56:53:ac:d0:03:58:5b:f3:
f9:c0:e8:5d:70:8e:06:e6:52:f4:13:b2:b6:f0:ea:8d:82:8e:
81:69:25:82:03:13:e7:b7:86:86:63:00:c1:94:69:47:4c:f8:
fb:4b:26:61:8f:c7:e3:58:23:fc:e1:86:fe:63:be:4b:5d:17:
b7:f3:28:4f:6c:80:ea:ad:f7:a9:16:fe:1d:12:31:1d:38:a4:
b3:e5:3c:1a:84:b3:71:de:85:78:77:4d:ec:46:b9:74:f2:fc:
f5:55:de:7e:34:d3:64:a4:99:67:2b:c5:22:a2:2d:38:62:14:
29:27:1d:46:06:63:5c:d7:97:b3:97:81:17:51:c5:f5:21:4f:
df:fd:d5:d2:c8:48:a7:60:a9:92:d3:54:f7:51:66:69:b3:b6:
8a:f6:b7:85:9e:e0:90:79:b2:17:98:1b:9e:11:0d:53:cb:87:
c4:78:b9:6d:9c:f7:b1:a4:9e:5e:c1:dd:be:7a:58:25:d8:57:
e2:a9:78:54:64:26:6c:4e:51:4c:36:ef:ce:5b:50:86:65:bc:
c1:53:08:ef:16:45:48:f9:52:f6:ea:66:14:e6:09:68:d5:7d:
95:85:7c:9c:bd:e8:63:d8:91:c8:33:e7:76:98:2d:1a:19:21:
e1:2d:24:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:53:41 2026 by rpki-client