Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/B65B4AFA86B111F1B35420BECE1D38B0.roa
File: B65B4AFA86B111F1B35420BECE1D38B0.roa (raw, json)
Hash identifier: kmExG71hjRrSnQLc9Za9djJ4yDfiRKmuCxsWcutkbII=
Subject key identifier: 8D:EB:78:F0:2C:48:43:A6:E9:C8:8D:FB:0F:C9:E7:25:20:08:E7:9A
Certificate issuer: /CN=F3626C5BAF/serialNumber=2CDF580E376755B1F8C6880842126DD63DD74EE7
Certificate serial: 08E5
Authority key identifier: 2C:DF:58:0E:37:67:55:B1:F8:C6:88:08:42:12:6D:D6:3D:D7:4E:E7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/LN9YDjdnVbH4xogIQhJt1j3XTuc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/B65B4AFA86B111F1B35420BECE1D38B0.roa
Signing time: Thu 23 Jul 2026 16:15:25 +0000
ROA not before: Thu 23 Jul 2026 16:15:21 +0000
ROA not after: Thu 31 Jul 2036 16:15:21 +0000
asID: 327788
IP address blocks: 2001:43f8:9d0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/LN9YDjdnVbH4xogIQhJt1j3XTuc.crl
rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/LN9YDjdnVbH4xogIQhJt1j3XTuc.mft
rsync://rpki.afrinic.net/repository/afrinic/LN9YDjdnVbH4xogIQhJt1j3XTuc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2277 (0x8e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3626C5BAF, serialNumber=2CDF580E376755B1F8C6880842126DD63DD74EE7
Validity
Not Before: Jul 23 16:15:21 2026 GMT
Not After : Jul 31 16:15:21 2036 GMT
Subject: CN=6a623e1d-e599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:33:64:68:27:c4:5e:a0:d2:b3:c7:1f:35:aa:
8b:8b:8c:08:b7:72:d7:7f:7a:50:68:b3:d4:b7:b2:
b0:a2:d6:ab:3f:78:5f:4c:98:06:0f:a0:21:37:a8:
f7:c7:7a:fc:69:4b:38:04:ff:a6:24:fb:b3:e7:6b:
9b:fd:e4:31:b7:9b:aa:63:d3:d3:cb:4d:8a:fb:c7:
f8:79:2a:31:8d:d2:37:50:39:e3:47:a1:48:b6:80:
b6:71:7c:83:1d:3e:f3:c2:87:1c:63:ca:44:d2:60:
de:f7:64:cb:e4:31:3b:19:92:b3:bf:f6:08:9e:71:
ec:9d:0c:a2:9b:08:50:14:02:87:c9:69:b3:4c:e1:
a2:6e:f5:a5:f7:05:1d:aa:9a:c1:03:40:87:b4:cc:
ef:64:92:78:8d:a1:71:17:71:31:78:84:34:e0:e9:
f3:b2:72:a4:a9:c5:2e:36:ef:4d:aa:08:9c:1c:3c:
65:57:95:c3:bc:67:9c:6a:10:29:95:e7:d5:fe:dd:
2a:d9:6b:d3:c9:95:26:14:8e:d8:52:ac:40:3a:37:
57:3c:53:9a:cd:ee:f9:17:f6:81:9b:5b:61:76:7f:
10:61:a0:0e:15:2d:ee:10:d3:6f:e6:64:12:dc:69:
ed:90:05:7e:91:42:46:cb:a8:8b:a0:6d:49:fc:86:
a9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:EB:78:F0:2C:48:43:A6:E9:C8:8D:FB:0F:C9:E7:25:20:08:E7:9A
X509v3 Authority Key Identifier:
keyid:2C:DF:58:0E:37:67:55:B1:F8:C6:88:08:42:12:6D:D6:3D:D7:4E:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/LN9YDjdnVbH4xogIQhJt1j3XTuc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LN9YDjdnVbH4xogIQhJt1j3XTuc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/B65B4AFA86B111F1B35420BECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:43f8:9d0::/48
Signature Algorithm: sha256WithRSAEncryption
b2:1e:7f:2d:c0:a2:e7:c7:09:61:69:06:dc:4f:a8:5f:0b:9b:
52:ba:66:4e:07:d7:9d:1f:8c:32:af:8b:25:17:3e:7b:fc:1d:
58:4c:59:d2:ea:c0:f6:31:bc:7b:fd:47:34:25:67:58:85:48:
8d:68:2f:3a:cc:c1:dc:48:66:7b:a3:08:78:f1:bd:a7:e2:ea:
cb:62:dd:f8:b4:31:38:e5:60:19:ea:b1:9b:fc:f6:d6:07:c2:
2f:66:7a:21:e4:fa:48:af:0f:8c:9e:31:9a:4a:42:26:82:81:
e7:9a:bd:7c:d1:6d:1b:48:83:52:80:e8:d3:8d:78:89:81:5c:
42:29:5d:ee:53:3d:e6:bf:9d:0b:62:13:6e:ad:35:b2:bc:e4:
7f:39:dc:9c:4f:e9:9a:11:e8:9e:f7:7d:86:cd:cb:5a:86:21:
75:6f:41:23:6d:cb:97:53:ce:92:7d:66:14:b1:c9:24:83:00:
2d:cb:84:fd:41:33:0f:ac:5e:0c:d0:d2:57:fc:66:30:df:41:
db:43:dc:ed:a8:4e:82:5c:ad:7b:f8:26:e3:bf:f6:5b:d3:7e:
76:7d:9a:f0:55:83:a7:89:37:8c:2c:97:fe:cd:28:21:5b:7b:
3b:da:74:ca:f3:46:1a:f6:fc:f3:d9:e4:c4:fa:a0:37:f0:26:
41:60:57:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:32:04 2026 by rpki-client