Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363DDF3/D1A6091A76DC11ECA4EF3E895A40D577/E6BE8514847B11F1BA44D4BBCE1D38B0.roa
File: E6BE8514847B11F1BA44D4BBCE1D38B0.roa (raw, json)
Hash identifier: tauOOSFJltY6KG4MJlrCmt0lohbXb9OdzTR2QMoclwc=
Subject key identifier: A7:76:FC:5C:39:AD:7E:68:41:FE:70:04:8C:F6:A2:AD:D6:8D:2D:D3
Certificate issuer: /CN=F363DDF3AF/serialNumber=F6CFED766D185A5A441550E97084D37BE29C03EB
Certificate serial: 069E
Authority key identifier: F6:CF:ED:76:6D:18:5A:5A:44:15:50:E9:70:84:D3:7B:E2:9C:03:EB
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/9s_tdm0YWlpEFVDpcITTe-KcA-s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363DDF3/D1A6091A76DC11ECA4EF3E895A40D577/E6BE8514847B11F1BA44D4BBCE1D38B0.roa
Signing time: Mon 20 Jul 2026 20:45:11 +0000
ROA not before: Mon 20 Jul 2026 20:45:07 +0000
ROA not after: Thu 31 Jul 2036 20:45:07 +0000
asID: 36891
IP address blocks: 2c0f:f000::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363DDF3/D1A6091A76DC11ECA4EF3E895A40D577/9s_tdm0YWlpEFVDpcITTe-KcA-s.crl
rsync://rpki.afrinic.net/repository/member_repository/F363DDF3/D1A6091A76DC11ECA4EF3E895A40D577/9s_tdm0YWlpEFVDpcITTe-KcA-s.mft
rsync://rpki.afrinic.net/repository/afrinic/9s_tdm0YWlpEFVDpcITTe-KcA-s.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1694 (0x69e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363DDF3AF, serialNumber=F6CFED766D185A5A441550E97084D37BE29C03EB
Validity
Not Before: Jul 20 20:45:07 2026 GMT
Not After : Jul 31 20:45:07 2036 GMT
Subject: CN=6a5e88d7-afe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0f:90:a3:cb:ae:a1:a6:d2:d7:cf:27:5a:ee:
a5:31:65:c1:02:87:b1:77:6c:10:b5:06:1f:c8:b4:
c5:0d:0b:f5:2c:fe:35:4d:ec:e0:c2:46:3f:a7:e1:
b5:ec:8b:0f:ba:2e:b4:2f:93:99:f9:e7:71:93:97:
aa:73:72:62:6f:59:16:b5:57:98:66:6c:f5:2a:0b:
66:21:56:c4:8f:e8:8c:e5:df:3e:d0:ae:6d:38:82:
58:66:b1:1b:0f:ca:36:50:2f:f1:61:1e:a2:45:5a:
8d:b7:4b:7e:c6:74:2c:3b:73:c0:e2:42:a6:3a:d5:
e1:0d:23:88:e0:2d:79:3c:46:0d:f8:e8:21:60:07:
d6:9c:de:3b:db:04:f2:f7:ed:b3:a9:44:ff:64:98:
b4:aa:2f:48:e0:e4:bc:83:04:39:21:7b:d7:44:77:
d4:54:0a:cd:2f:33:aa:81:98:d9:26:a6:ec:df:f4:
b3:9f:2a:c4:5d:8d:0e:9c:fe:25:96:5e:61:f2:2a:
4a:fc:6d:9f:86:04:cf:a9:5b:36:e3:f5:20:60:b5:
c7:c3:a3:52:ff:08:8d:71:da:ad:c0:a6:d2:1d:b7:
f4:98:97:5a:2b:7a:6f:1e:a3:24:2f:1c:fb:cc:4f:
51:25:d1:f4:b9:9d:e3:c9:6c:00:70:00:a0:40:59:
a8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:76:FC:5C:39:AD:7E:68:41:FE:70:04:8C:F6:A2:AD:D6:8D:2D:D3
X509v3 Authority Key Identifier:
keyid:F6:CF:ED:76:6D:18:5A:5A:44:15:50:E9:70:84:D3:7B:E2:9C:03:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363DDF3/D1A6091A76DC11ECA4EF3E895A40D577/9s_tdm0YWlpEFVDpcITTe-KcA-s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9s_tdm0YWlpEFVDpcITTe-KcA-s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363DDF3/D1A6091A76DC11ECA4EF3E895A40D577/E6BE8514847B11F1BA44D4BBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:f000::/32
Signature Algorithm: sha256WithRSAEncryption
8b:8a:33:7d:df:4f:6c:9f:fb:91:25:71:4e:d0:9b:4d:1f:e8:
c3:90:34:aa:dd:57:ff:15:95:c6:fa:3b:81:7a:1d:3d:79:de:
b6:dc:24:ec:dc:ad:0a:3e:78:7d:02:58:b9:fd:3b:c7:99:dc:
5c:9e:40:d6:d8:2e:0f:ef:48:07:25:b0:25:9b:d6:22:c1:b0:
c3:a1:12:68:a0:6e:3e:e2:a0:1d:14:7f:4b:22:5e:a4:e1:2a:
b2:62:9c:86:1a:2b:93:37:65:af:8c:19:9e:50:7b:e0:f1:90:
1c:8b:64:10:74:bb:74:a4:28:5c:1f:14:d7:5f:06:01:b7:98:
b0:f1:75:16:45:4d:56:38:aa:aa:39:ad:1a:99:85:4c:a9:1a:
e2:39:f1:f2:8c:2f:9e:e8:86:83:12:49:18:b8:d0:a6:ab:cc:
e7:bc:d3:3d:02:7d:d8:75:d9:db:98:3d:43:12:44:b5:15:42:
a3:37:8b:5a:37:a7:66:4a:6b:5a:04:29:45:f1:b0:20:2e:8f:
7b:b4:53:69:42:64:8e:43:03:0e:28:63:65:a6:04:1e:9e:bd:
8d:05:8e:07:34:86:32:4f:a1:d5:92:1c:6b:ef:f6:29:6f:db:
7d:45:d6:3a:b0:8e:e7:d6:5a:a4:13:17:c1:71:f4:75:4b:a1:
35:0f:0c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:14:49 2026 by rpki-client