Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364AE44/22270EFEAF4411EB8C257686F8AEA228/A5F3DC22803011F18518BADFCE1D38B0.roa
File: A5F3DC22803011F18518BADFCE1D38B0.roa (raw, json)
Hash identifier: DF+u9s44Ut3/J+viKm+ou2FWZp3u6LhKP6V1fR+xehU=
Subject key identifier: 12:F1:D6:F7:A3:8D:D6:29:38:31:A5:50:9D:C6:C9:52:71:44:39:CB
Certificate issuer: /CN=F364AE44AF/serialNumber=8F503BD573CE113517CD6B4CFA374A62F15E12C1
Certificate serial: 07A9
Authority key identifier: 8F:50:3B:D5:73:CE:11:35:17:CD:6B:4C:FA:37:4A:62:F1:5E:12:C1
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/j1A71XPOETUXzWtM-jdKYvFeEsE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364AE44/22270EFEAF4411EB8C257686F8AEA228/A5F3DC22803011F18518BADFCE1D38B0.roa
Signing time: Wed 15 Jul 2026 09:36:26 +0000
ROA not before: Wed 15 Jul 2026 09:36:22 +0000
ROA not after: Sun 15 Jul 2029 09:36:22 +0000
asID: 36925
IP address blocks: 2c0e:6000::/24 maxlen: 48
2c0f:fb20::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364AE44/22270EFEAF4411EB8C257686F8AEA228/j1A71XPOETUXzWtM-jdKYvFeEsE.crl
rsync://rpki.afrinic.net/repository/member_repository/F364AE44/22270EFEAF4411EB8C257686F8AEA228/j1A71XPOETUXzWtM-jdKYvFeEsE.mft
rsync://rpki.afrinic.net/repository/afrinic/j1A71XPOETUXzWtM-jdKYvFeEsE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1961 (0x7a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364AE44AF, serialNumber=8F503BD573CE113517CD6B4CFA374A62F15E12C1
Validity
Not Before: Jul 15 09:36:22 2026 GMT
Not After : Jul 15 09:36:22 2029 GMT
Subject: CN=6a57549a-5d41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e7:68:ca:2a:f7:5e:67:96:18:a7:08:64:fe:
bc:13:90:42:db:5b:02:5b:28:94:5b:5f:c7:89:d5:
c9:5a:c6:f7:4a:f9:c0:84:31:36:b2:4a:38:94:8c:
64:cf:6d:db:b3:91:e8:0c:9e:b4:a2:3e:fe:87:97:
00:5c:3d:e0:78:27:5b:65:6d:9a:c8:76:3b:2d:a5:
59:d1:98:0c:70:78:b4:fd:c4:e7:a6:15:55:4e:17:
67:9a:f6:bb:5c:79:f6:e6:02:6f:96:b8:20:c2:78:
d9:fd:54:48:aa:47:56:31:f4:6c:b8:05:b6:c7:a7:
da:b6:bb:d3:97:93:be:70:0e:87:14:45:59:bf:de:
ea:54:62:d2:47:80:7f:00:b5:f5:a6:9d:87:2e:6d:
28:c6:07:5e:eb:64:01:12:c0:ee:f0:47:a3:ab:b8:
71:ba:33:6b:0a:ee:fb:a7:1c:41:c3:07:f7:49:7b:
ad:22:57:6d:be:d4:49:71:05:63:ff:c3:fd:f0:b9:
f9:ea:ea:3d:a5:ba:ee:9d:83:ec:82:6b:ce:15:40:
e7:3c:ce:85:23:12:be:66:43:94:ef:1a:b8:f2:17:
98:b0:92:22:ec:27:31:35:3a:20:af:b6:98:16:6f:
02:98:f6:ab:68:cf:a5:5d:3f:e0:5a:71:85:f8:3f:
67:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:F1:D6:F7:A3:8D:D6:29:38:31:A5:50:9D:C6:C9:52:71:44:39:CB
X509v3 Authority Key Identifier:
keyid:8F:50:3B:D5:73:CE:11:35:17:CD:6B:4C:FA:37:4A:62:F1:5E:12:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364AE44/22270EFEAF4411EB8C257686F8AEA228/j1A71XPOETUXzWtM-jdKYvFeEsE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/j1A71XPOETUXzWtM-jdKYvFeEsE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364AE44/22270EFEAF4411EB8C257686F8AEA228/A5F3DC22803011F18518BADFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0e:6000::/24
2c0f:fb20::/32
Signature Algorithm: sha256WithRSAEncryption
11:c7:f8:d0:a6:d7:54:fe:03:91:9c:9d:cf:5f:f9:c8:f2:8a:
ed:03:56:43:fd:cd:1d:7b:df:a9:0a:d0:03:59:8c:77:a0:a9:
2d:c6:96:3d:68:1c:7f:74:df:4a:85:3c:d2:4e:9d:4e:0e:0d:
6c:24:dd:04:a6:99:b8:2a:03:cf:33:f6:2e:6b:23:fb:64:27:
d0:fc:84:ce:f4:e4:1a:3c:a1:6d:42:ec:ec:d2:03:8e:80:9e:
79:dc:0c:e0:d6:ab:0a:fe:15:25:0f:fe:d7:60:ca:76:cf:cf:
56:51:52:fe:80:cb:06:94:59:38:df:d5:20:db:5c:84:0d:ef:
46:56:9d:78:b2:79:56:ea:d7:4e:35:39:76:b4:dd:ea:84:4b:
43:a2:8a:5f:64:b3:3d:76:bd:dd:2a:cf:82:3a:e8:25:01:0f:
da:fe:a6:9e:22:0e:37:50:43:6e:7e:44:7c:76:0a:1f:6b:7e:
fc:9b:39:59:45:8e:9f:9d:64:35:3f:34:e2:dc:96:d3:82:0d:
a1:b7:77:08:6a:d7:8b:1c:1a:a3:72:59:9d:ad:87:c8:17:46:
87:f0:66:c8:ce:f6:f0:81:fb:4a:4d:18:6e:bd:72:27:dd:d1:
5a:a1:03:68:92:76:7e:1e:17:16:23:3f:7b:75:d9:30:22:18:
f3:46:da:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:45:41 2026 by rpki-client