Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3652210/010E0928F53C11F094A518DBDAE4EC9C/0092A744850E11F1885F13C1CE1D38B0.roa
File: 0092A744850E11F1885F13C1CE1D38B0.roa (raw, json)
Hash identifier: M7RJY6bKu35PaT+OztRN5Pjv9OgE7mqyKvriAzsMfHE=
Subject key identifier: EC:23:AB:FD:AA:40:E8:DD:C1:4D:79:36:BD:DC:5E:46:6A:76:2D:A5
Certificate issuer: /CN=F3652210AF/serialNumber=75519AF48BCFD3BA46851652DF54B8B7EB88EDFF
Certificate serial: C3
Authority key identifier: 75:51:9A:F4:8B:CF:D3:BA:46:85:16:52:DF:54:B8:B7:EB:88:ED:FF
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/dVGa9IvP07pGhRZS31S4t-uI7f8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3652210/010E0928F53C11F094A518DBDAE4EC9C/0092A744850E11F1885F13C1CE1D38B0.roa
Signing time: Tue 21 Jul 2026 14:11:01 +0000
ROA not before: Tue 21 Jul 2026 14:10:57 +0000
ROA not after: Sun 20 Jul 2036 14:10:57 +0000
asID: 37049
IP address blocks: 2c0f:fdc8::/32 maxlen: 40
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3652210/010E0928F53C11F094A518DBDAE4EC9C/dVGa9IvP07pGhRZS31S4t-uI7f8.crl
rsync://rpki.afrinic.net/repository/member_repository/F3652210/010E0928F53C11F094A518DBDAE4EC9C/dVGa9IvP07pGhRZS31S4t-uI7f8.mft
rsync://rpki.afrinic.net/repository/afrinic/dVGa9IvP07pGhRZS31S4t-uI7f8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 195 (0xc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3652210AF, serialNumber=75519AF48BCFD3BA46851652DF54B8B7EB88EDFF
Validity
Not Before: Jul 21 14:10:57 2026 GMT
Not After : Jul 20 14:10:57 2036 GMT
Subject: CN=6a5f7df5-f984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:65:76:c4:db:a0:7b:d5:e1:b9:c3:87:f4:58:
21:ed:52:db:5d:ec:09:9b:eb:1b:70:ae:27:91:d3:
fe:5e:0c:2a:2a:85:d4:9b:73:38:30:be:45:35:40:
a5:d4:59:06:72:73:0b:33:90:b7:fe:88:53:cb:e5:
a9:98:8f:e9:a4:b1:25:ca:87:f0:12:dd:fc:14:7e:
13:54:1b:4f:cb:f5:a8:f7:e2:4e:31:c7:79:3b:27:
8a:71:a0:11:4d:f1:79:59:ef:a1:ea:bd:94:6e:7e:
7f:f1:d2:81:b4:6b:60:dc:d1:bc:0a:ef:dd:fd:f9:
f2:07:97:0a:d8:a7:42:f8:fb:dc:58:ef:fb:d0:f3:
5a:0b:54:fe:b3:1f:05:45:32:81:fe:5a:da:0d:18:
b7:41:42:0b:62:a3:53:48:bb:53:10:8f:c0:3a:ba:
fd:e9:ce:fc:8e:25:75:41:58:d2:e7:de:a6:e3:3d:
88:20:33:cc:72:ca:9c:4b:10:ce:4f:cd:8a:d0:2b:
4d:a9:fb:4d:81:18:09:33:9b:9b:f1:3b:fb:77:dc:
0f:86:8e:0a:29:bd:52:7d:77:d0:d5:37:fc:c4:ff:
9f:21:c1:89:27:ff:e8:a4:b4:9d:17:a8:25:a7:8c:
8c:86:78:74:b6:f3:99:84:fb:1a:73:c9:aa:0f:ec:
1d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:23:AB:FD:AA:40:E8:DD:C1:4D:79:36:BD:DC:5E:46:6A:76:2D:A5
X509v3 Authority Key Identifier:
keyid:75:51:9A:F4:8B:CF:D3:BA:46:85:16:52:DF:54:B8:B7:EB:88:ED:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3652210/010E0928F53C11F094A518DBDAE4EC9C/dVGa9IvP07pGhRZS31S4t-uI7f8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/dVGa9IvP07pGhRZS31S4t-uI7f8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3652210/010E0928F53C11F094A518DBDAE4EC9C/0092A744850E11F1885F13C1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:fdc8::/32
Signature Algorithm: sha256WithRSAEncryption
00:0b:a6:3c:b7:ce:fd:41:88:b0:9e:b7:d5:f9:62:5e:83:11:
b0:e5:d5:bf:85:0e:ab:3d:e5:97:ad:07:51:65:7c:b7:35:8e:
00:8a:c4:47:8c:65:e4:e1:21:e5:ed:b7:08:2d:a7:4f:a4:a4:
f4:30:2d:a4:71:d7:f3:f8:38:ee:e6:11:8f:df:c7:79:eb:b4:
d2:73:f0:e8:17:37:08:28:8b:57:3f:f8:23:b5:ef:14:18:40:
38:70:ef:5b:e3:69:aa:b8:41:d3:bd:a5:85:ca:f8:3f:bb:f8:
0d:2f:63:8b:bf:fb:1b:d4:44:76:b9:c5:12:7a:37:54:c0:0f:
62:1a:bf:e4:fe:b8:18:12:72:e2:8b:0d:fb:92:a6:c1:b2:47:
e9:d1:b2:fa:ca:88:45:28:60:f0:01:80:52:f3:2c:53:16:96:
83:10:76:af:aa:6f:6e:ad:4b:3b:33:3f:4a:05:ec:85:9a:89:
ac:38:e5:4d:05:86:a9:d1:56:ce:90:cd:13:48:a3:48:e0:77:
6e:6f:3b:26:19:81:f6:2d:f6:d6:8d:33:fb:ac:c8:32:88:c4:
91:7d:5c:aa:e2:d5:be:e5:75:af:d1:3c:5d:95:9c:01:96:97:
02:99:d1:e0:9b:c4:c3:8a:a8:c8:53:37:6d:98:fa:b8:0e:05:
c4:1b:2b:c5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAMMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTIyMTBBRjExMC8GA1UEBRMoNzU1MTlBRjQ4QkNGRDNCQTQ2ODUxNjUyREY1NEI4
QjdFQjg4RURGRjAeFw0yNjA3MjExNDEwNTdaFw0zNjA3MjAxNDEwNTdaMBgxFjAU
BgNVBAMTDTZhNWY3ZGY1LWY5ODQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC+ZXbE26B71eG5w4f0WCHtUttd7Amb6xtwrieR0/5eDCoqhdSbczgwvkU1
QKXUWQZycwszkLf+iFPL5amYj+mksSXKh/AS3fwUfhNUG0/L9aj34k4xx3k7J4px
oBFN8XlZ76HqvZRufn/x0oG0a2Dc0bwK7939+fIHlwrYp0L4+9xY7/vQ81oLVP6z
HwVFMoH+WtoNGLdBQgtio1NIu1MQj8A6uv3pzvyOJXVBWNLn3qbjPYggM8xyypxL
EM5PzYrQK02p+02BGAkzm5vxO/t33A+GjgopvVJ9d9DVN/zE/58hwYkn/+iktJ0X
qCWnjIyGeHS285mE+xpzyaoP7B2tAgMBAAGjggKmMIICojAdBgNVHQ4EFgQU7COr
/apA6N3BTXk2vdxeRmp2LaUwHwYDVR0jBBgwFoAUdVGa9IvP07pGhRZS31S4t+uI
7f8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjUyMjEwLzAxMEUwOTI4RjUzQzExRjA5NEE1MThEQkRBRTRFQzlDL2RWR2E5
SXZQMDdwR2hSWlMzMVM0dC11STdmOC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2RWR2E5SXZQMDdwR2hSWlMzMVM0dC11STdmOC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjUyMjEwLzAxMEUwOTI4RjUzQzExRjA5NEE1MThEQkRB
RTRFQzlDLzAwOTJBNzQ0ODUwRTExRjE4ODVGMTNDMUNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAsD/3IMA0GCSqGSIb3DQEB
CwUAA4IBAQAAC6Y8t879QYiwnrfV+WJegxGw5dW/hQ6rPeWXrQdRZXy3NY4AisRH
jGXk4SHl7bcILadPpKT0MC2kcdfz+Dju5hGP38d567TSc/DoFzcIKItXP/gjte8U
GEA4cO9b42mquEHTvaWFyvg/u/gNL2OLv/sb1ER2ucUSejdUwA9iGr/k/rgYEnLi
iw37kqbBskfp0bL6yohFKGDwAYBS8yxTFpaDEHavqm9urUs7Mz9KBeyFmomsOOVN
BYap0VbOkM0TSKNI4HdubzsmGYH2LfbWjTP7rMgyiMSRfVyq4tW+5XWv0TxdlZwB
lpcCmdHgm8TDiqjIUzdtmPq4DgXEGyvF
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:52:57 2026 by rpki-client