Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362C7E9/F649106CE8D811E986B0B040F8AEA228/70E0EF4A1C5611F18E32DD81DAE4EC9C.roa
File: 70E0EF4A1C5611F18E32DD81DAE4EC9C.roa (raw, json)
Hash identifier: CQ0hSEAMLadXtbNl+F7CDLaiilmNLE2/Ef+nvNSAYdY=
Subject key identifier: 22:DC:AB:A7:38:83:95:E9:C6:5A:06:ED:1A:94:A4:8C:07:B8:8C:58
Certificate issuer: /CN=F362C7E9AF/serialNumber=E0B457629AC2D4DE7C94EA7B88155741D1EC2024
Certificate serial: 096E
Authority key identifier: E0:B4:57:62:9A:C2:D4:DE:7C:94:EA:7B:88:15:57:41:D1:EC:20:24
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/4LRXYprC1N58lOp7iBVXQdHsICQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362C7E9/F649106CE8D811E986B0B040F8AEA228/70E0EF4A1C5611F18E32DD81DAE4EC9C.roa
Signing time: Tue 10 Mar 2026 07:55:02 +0000
ROA not before: Tue 10 Mar 2026 07:54:56 +0000
ROA not after: Sun 31 Mar 2030 07:54:56 +0000
asID: 22572
IP address blocks: 2c0f:e9e0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362C7E9/F649106CE8D811E986B0B040F8AEA228/4LRXYprC1N58lOp7iBVXQdHsICQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F362C7E9/F649106CE8D811E986B0B040F8AEA228/4LRXYprC1N58lOp7iBVXQdHsICQ.mft
rsync://rpki.afrinic.net/repository/afrinic/4LRXYprC1N58lOp7iBVXQdHsICQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2414 (0x96e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362C7E9AF, serialNumber=E0B457629AC2D4DE7C94EA7B88155741D1EC2024
Validity
Not Before: Mar 10 07:54:56 2026 GMT
Not After : Mar 31 07:54:56 2030 GMT
Subject: CN=69afce55-e847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f0:7b:c7:71:c6:19:97:f2:1a:35:4d:1d:65:
60:c0:ef:04:b9:17:57:50:2c:f3:49:ca:da:b3:0c:
b7:b5:ed:b8:ae:48:ab:53:1a:25:3e:84:b8:0e:a3:
8b:4e:40:3a:c4:37:a8:cd:c6:be:92:cb:28:75:07:
dc:54:a2:0c:58:64:7b:bc:95:c3:d5:29:83:31:27:
1c:55:15:3b:5b:d9:5f:f5:e4:69:58:2b:21:cb:c1:
8b:76:b5:32:d2:ac:c4:c2:07:4d:3b:05:e2:7f:82:
52:dc:64:4a:c4:f0:df:d5:65:30:62:a8:47:86:0f:
39:6a:de:75:af:99:f3:61:d8:d7:9a:70:34:42:46:
1e:d2:c1:cf:b3:96:2a:80:ee:89:5c:9b:ee:c6:51:
9b:e8:cc:56:03:63:9d:47:b6:67:c9:a6:61:1a:ca:
ff:3c:5f:5c:38:0d:f1:88:0a:bc:6e:1f:85:9b:a8:
ed:24:f4:63:d1:81:8f:ba:c8:61:16:40:cf:64:95:
17:0e:46:6f:c5:30:94:9e:78:b9:fe:9a:df:b4:87:
67:3c:57:07:23:c2:b0:46:e1:35:83:cb:c0:8c:d7:
3e:a8:a1:e6:2b:49:85:4c:36:62:d9:16:93:82:fd:
0c:3f:28:9b:7d:72:0d:62:50:5c:c8:a5:a9:7d:90:
ee:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:DC:AB:A7:38:83:95:E9:C6:5A:06:ED:1A:94:A4:8C:07:B8:8C:58
X509v3 Authority Key Identifier:
keyid:E0:B4:57:62:9A:C2:D4:DE:7C:94:EA:7B:88:15:57:41:D1:EC:20:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362C7E9/F649106CE8D811E986B0B040F8AEA228/4LRXYprC1N58lOp7iBVXQdHsICQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4LRXYprC1N58lOp7iBVXQdHsICQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362C7E9/F649106CE8D811E986B0B040F8AEA228/70E0EF4A1C5611F18E32DD81DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:e9e0::/32
Signature Algorithm: sha256WithRSAEncryption
70:5e:17:01:ca:fe:f6:6e:2d:63:b5:de:dc:8e:22:96:e7:01:
1b:d5:8b:f0:0f:52:ba:5c:34:ec:c2:c8:a3:41:26:e5:9f:25:
50:c8:c7:36:41:9f:8b:3a:a0:ab:72:f9:c3:bc:9d:fe:46:1f:
64:2a:3a:ad:0b:14:91:d2:b9:1c:8e:a6:f9:d6:3f:4e:cd:33:
e0:25:77:a5:5d:41:bb:e7:3f:5d:ea:7d:98:88:69:7f:ff:db:
72:9b:6f:7b:b4:45:44:3a:fe:6f:8e:45:47:04:a8:26:00:94:
dd:06:2e:12:79:10:37:49:b7:be:b3:c1:61:e1:ba:07:60:8a:
73:78:cc:85:67:ad:34:20:0e:0f:9a:42:1d:81:3b:7d:8e:9c:
6b:07:ec:f7:1f:b3:a1:ee:8c:5a:11:51:27:e8:4a:d5:b0:ad:
2e:b2:53:5b:c4:8d:6b:05:b5:bb:fd:1c:f6:2c:66:fd:ed:b3:
a0:b0:b7:ea:11:d5:08:31:88:99:a3:75:bf:e3:ee:d2:54:0b:
69:ef:b5:3a:36:66:45:69:08:e2:16:b5:5f:b2:f5:0b:12:1f:
c9:80:a9:5f:cc:7c:b9:32:3e:44:34:ff:69:63:57:03:90:bc:
d7:89:02:1c:03:af:bd:c9:9d:03:85:55:0d:08:ff:0c:d5:83:
dc:c9:30:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:18:43 2026 by rpki-client