Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3652B4F/F8B6F5A6739811F1964A9F12CF1D38B0/029DE484739A11F19EC65B1ACF1D38B0.roa
File: 029DE484739A11F19EC65B1ACF1D38B0.roa (raw, json)
Hash identifier: jctyW7FimWluAOazH1wxQiSlUMxQbqqu1aZTbh2lZYI=
Subject key identifier: D5:3D:DE:65:E6:57:40:01:0B:EB:F1:A0:0C:68:7E:27:4E:DA:9B:F8
Certificate issuer: /CN=F3652B4FAF/serialNumber=6A30A01940AF9C14C9995EACE1B7692218A0C2A6
Certificate serial: 02
Authority key identifier: 6A:30:A0:19:40:AF:9C:14:C9:99:5E:AC:E1:B7:69:22:18:A0:C2:A6
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ajCgGUCvnBTJmV6s4bdpIhigwqY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3652B4F/F8B6F5A6739811F1964A9F12CF1D38B0/029DE484739A11F19EC65B1ACF1D38B0.roa
Signing time: Mon 29 Jun 2026 09:07:53 +0000
ROA not before: Mon 29 Jun 2026 09:07:48 +0000
ROA not after: Tue 31 Dec 2047 09:07:48 +0000
asID: 327990
IP address blocks: 2c0f:5640::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3652B4F/F8B6F5A6739811F1964A9F12CF1D38B0/ajCgGUCvnBTJmV6s4bdpIhigwqY.crl
rsync://rpki.afrinic.net/repository/member_repository/F3652B4F/F8B6F5A6739811F1964A9F12CF1D38B0/ajCgGUCvnBTJmV6s4bdpIhigwqY.mft
rsync://rpki.afrinic.net/repository/afrinic/ajCgGUCvnBTJmV6s4bdpIhigwqY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3652B4FAF, serialNumber=6A30A01940AF9C14C9995EACE1B7692218A0C2A6
Validity
Not Before: Jun 29 09:07:48 2026 GMT
Not After : Dec 31 09:07:48 2047 GMT
Subject: CN=6a4235e9-d410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:9e:cc:0b:78:31:e5:72:e1:c9:b0:97:51:b8:
42:fa:25:cd:ae:79:15:32:38:d8:6a:a6:f7:d7:09:
40:c1:80:b6:db:4a:dd:25:f3:11:05:99:1e:06:82:
fc:ac:ee:d0:05:42:79:ce:71:28:6a:58:a5:e1:83:
3d:9c:08:f6:cd:af:99:54:27:03:70:ac:42:7f:75:
a0:22:1b:6f:d8:03:ca:3c:89:e4:3e:d8:4a:39:15:
ff:3a:4c:9b:3b:53:08:93:57:7c:45:c9:06:5e:df:
2b:13:9a:fe:e6:f8:ad:b6:cb:8e:99:8d:1d:6e:f4:
9e:cf:ba:56:3b:77:6c:b6:b4:4e:11:8e:5b:07:54:
95:8b:f3:87:70:36:c9:ae:b9:f0:fe:42:34:9b:d6:
52:a9:e4:6a:51:56:5a:db:4c:2a:65:ae:4a:34:28:
af:2c:da:65:d8:d0:79:6a:49:6c:8a:6d:66:0d:72:
49:3d:e6:ea:04:e2:af:1b:06:a3:df:a6:89:18:af:
2a:30:9f:e7:76:24:10:df:a5:a3:b5:74:3f:d0:f3:
34:2f:93:97:9c:85:96:87:0c:ad:ec:e6:0d:8e:51:
f0:94:ed:e4:0a:9b:55:6a:16:30:44:56:41:94:79:
ba:0c:2a:93:f2:b7:1a:79:0e:53:f6:69:33:52:0d:
a2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:3D:DE:65:E6:57:40:01:0B:EB:F1:A0:0C:68:7E:27:4E:DA:9B:F8
X509v3 Authority Key Identifier:
keyid:6A:30:A0:19:40:AF:9C:14:C9:99:5E:AC:E1:B7:69:22:18:A0:C2:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3652B4F/F8B6F5A6739811F1964A9F12CF1D38B0/ajCgGUCvnBTJmV6s4bdpIhigwqY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ajCgGUCvnBTJmV6s4bdpIhigwqY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3652B4F/F8B6F5A6739811F1964A9F12CF1D38B0/029DE484739A11F19EC65B1ACF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:5640::/32
Signature Algorithm: sha256WithRSAEncryption
49:e9:35:ec:7e:de:18:83:06:c9:2c:66:da:7b:86:0a:6d:92:
09:45:7a:48:b4:c6:f8:8f:5d:e6:8e:79:97:8a:c9:2a:c5:71:
7a:1e:f3:10:7e:c5:23:bf:c2:2c:85:bd:4e:36:31:82:f4:61:
ee:2a:e0:bd:21:e0:46:67:f7:41:4c:a3:fa:c4:dc:c9:38:96:
f8:5d:b3:64:b1:cf:fe:56:66:36:a4:35:49:25:80:ed:3a:6d:
a0:f1:80:72:88:87:c6:ac:f9:7b:01:6d:3a:a5:f9:ca:01:c3:
5f:27:08:54:dd:da:34:bb:c3:99:10:c5:4f:bb:ed:ba:44:0e:
7f:2e:bf:be:20:ec:a8:64:d7:c2:b1:71:92:f6:b2:8d:0c:60:
eb:c0:2f:c3:a2:20:e5:cf:9d:24:95:ba:6d:25:35:26:9e:2e:
bc:85:65:51:08:0f:22:37:d0:1b:2d:38:87:17:7b:a3:1d:2c:
e9:6c:28:86:67:2a:9f:4d:10:cf:08:95:f0:3d:24:ae:71:00:
51:52:48:a4:b9:40:bf:33:09:1f:24:8c:13:aa:be:06:13:75:
64:14:5a:7b:b4:1f:64:ad:ec:d9:0b:74:3f:75:22:d9:62:7d:
76:9c:de:91:b6:2b:b2:4c:8b:e7:d0:85:36:4a:28:c8:cd:34:
76:f7:ba:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:43:05 2026 by rpki-client