Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365C604/340A4E06624511ECAA933A9B5A40D577/4A39ED9E216811F1B9641F8FDAE4EC9C.roa
File: 4A39ED9E216811F1B9641F8FDAE4EC9C.roa (raw, json)
Hash identifier: ZEu/gRkS0nHQNfo1XGm/zqNOd7PN310lh4RpfKuvGtc=
Subject key identifier: D5:75:21:A6:A9:FD:2C:5D:39:5A:D6:3E:C6:A6:60:AB:52:88:6C:F1
Certificate issuer: /CN=F365C604AF/serialNumber=83035995DE18C9D6AD4BCBB9CD95A1504D9FCA1F
Certificate serial: 063A
Authority key identifier: 83:03:59:95:DE:18:C9:D6:AD:4B:CB:B9:CD:95:A1:50:4D:9F:CA:1F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/gwNZld4YydatS8u5zZWhUE2fyh8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F365C604/340A4E06624511ECAA933A9B5A40D577/4A39ED9E216811F1B9641F8FDAE4EC9C.roa
Signing time: Mon 16 Mar 2026 18:45:23 +0000
ROA not before: Mon 16 Mar 2026 18:45:18 +0000
ROA not after: Mon 31 Mar 2036 18:45:18 +0000
asID: 328826
IP address blocks: 2c0f:7240::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F365C604/340A4E06624511ECAA933A9B5A40D577/gwNZld4YydatS8u5zZWhUE2fyh8.crl
rsync://rpki.afrinic.net/repository/member_repository/F365C604/340A4E06624511ECAA933A9B5A40D577/gwNZld4YydatS8u5zZWhUE2fyh8.mft
rsync://rpki.afrinic.net/repository/afrinic/gwNZld4YydatS8u5zZWhUE2fyh8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 29 Mar 2026 00:06:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1594 (0x63a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F365C604AF, serialNumber=83035995DE18C9D6AD4BCBB9CD95A1504D9FCA1F
Validity
Not Before: Mar 16 18:45:18 2026 GMT
Not After : Mar 31 18:45:18 2036 GMT
Subject: CN=69b84fc3-eb8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9e:31:f6:a5:54:26:56:4a:2a:0e:55:fc:4a:
14:c8:37:d6:4d:54:16:8c:ee:ac:98:63:41:7b:db:
22:5a:c7:c9:fc:9f:d5:89:f3:f0:cd:82:82:15:1c:
6f:c6:6e:46:74:59:c2:2a:a5:d1:a6:0a:72:7b:5c:
69:ac:be:46:ee:0c:b3:c8:3e:b1:33:5b:36:0a:fb:
4e:27:b0:97:c8:d6:1d:87:47:b0:73:23:3c:71:bf:
5f:cb:f1:fd:17:80:ba:f3:33:38:82:54:68:f1:2b:
c3:11:f0:ef:06:5a:e2:9b:66:bf:d4:b4:76:b4:97:
51:48:0f:21:fa:d7:0b:72:d7:39:95:f8:4a:b3:f9:
c3:70:95:a8:b7:7e:eb:94:86:41:1d:88:27:a9:69:
e8:6b:b5:92:45:b3:f1:69:7b:77:42:43:7c:b5:d3:
24:07:50:69:b5:f5:d0:23:ca:f3:6b:cc:e6:4c:e3:
c1:4d:7e:75:ec:01:16:40:2e:b6:b1:c1:0d:ee:82:
3e:d8:83:cd:ad:63:65:5e:1b:9c:f9:e4:59:9d:c4:
eb:dc:d1:8b:a6:4f:35:5a:35:fa:e0:f6:4b:18:d9:
9b:a3:e0:6d:36:08:f4:81:1e:45:03:10:77:03:76:
56:34:9d:0c:bc:5c:34:69:44:d0:b4:d3:e9:25:d6:
8f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:75:21:A6:A9:FD:2C:5D:39:5A:D6:3E:C6:A6:60:AB:52:88:6C:F1
X509v3 Authority Key Identifier:
keyid:83:03:59:95:DE:18:C9:D6:AD:4B:CB:B9:CD:95:A1:50:4D:9F:CA:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F365C604/340A4E06624511ECAA933A9B5A40D577/gwNZld4YydatS8u5zZWhUE2fyh8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gwNZld4YydatS8u5zZWhUE2fyh8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365C604/340A4E06624511ECAA933A9B5A40D577/4A39ED9E216811F1B9641F8FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:7240::/32
Signature Algorithm: sha256WithRSAEncryption
09:f9:e2:25:b2:94:2d:57:15:cd:5d:ac:d0:25:93:13:db:48:
db:13:cf:a2:46:76:3c:ef:60:32:80:8c:56:fb:fe:7d:83:ea:
41:d1:0a:22:1f:3d:a6:44:25:8f:c5:88:d1:2e:00:63:2f:30:
68:b0:d1:88:70:60:01:a5:63:8a:9d:62:e8:58:24:28:6a:37:
48:e9:40:33:4f:cf:6c:15:2a:40:ba:24:0f:77:25:58:4b:19:
a1:0e:e2:14:80:aa:cf:33:52:8b:60:b1:75:39:41:de:a0:9c:
10:1f:df:65:7d:54:c5:80:23:45:6e:3e:05:34:70:94:7b:3d:
77:45:e9:bf:42:0b:88:38:d7:45:01:06:00:73:13:57:6d:3c:
e2:30:4c:e8:07:99:a7:4b:e5:9c:05:69:bd:9d:a9:e6:38:04:
e9:42:ff:66:e7:99:6c:f1:49:af:26:a9:7a:d5:2c:77:90:c8:
8f:dc:68:a6:22:2a:b1:6e:78:8d:0a:dc:2a:c2:1f:72:9d:88:
cf:30:fe:66:a7:3a:a3:5d:d0:1e:dd:a6:06:1a:30:08:88:28:
dc:c5:30:f6:3c:9d:2c:ac:90:37:ad:39:69:0a:20:c3:be:27:
14:79:db:88:ec:f7:fc:1a:0b:1b:64:4c:2d:1c:00:d5:2d:52:
1c:f8:1f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 08:37:02 2026 by rpki-client