Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/20FC07BA876011F184CDC2EDCE1D38B0.roa
File: 20FC07BA876011F184CDC2EDCE1D38B0.roa (raw, json)
Hash identifier: heapVvnDJ5bFGGGmK/Kc68IreXaE7gbDDY1R7VG4x00=
Subject key identifier: A0:06:A4:A6:B4:F1:E6:5B:42:D3:F7:FD:BE:C4:39:80:F9:30:30:8D
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 0C52
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/20FC07BA876011F184CDC2EDCE1D38B0.roa
Signing time: Fri 24 Jul 2026 13:03:57 +0000
ROA not before: Fri 24 Jul 2026 13:03:53 +0000
ROA not after: Thu 24 Jul 2036 13:03:53 +0000
asID: 36916
IP address blocks: 2c0f:fcb0:9000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3154 (0xc52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF, serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Jul 24 13:03:53 2026 GMT
Not After : Jul 24 13:03:53 2036 GMT
Subject: CN=6a6362bd-4503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e5:b7:a4:be:90:fb:6a:0a:25:11:c8:38:be:
31:22:11:b9:b7:58:f4:f2:b7:f9:9f:4a:1e:9f:79:
2d:2e:b2:e0:20:bb:4a:33:5d:ee:39:18:a5:f3:3d:
95:47:e8:c0:a9:d7:10:90:62:1f:22:b9:14:e0:51:
1a:97:84:da:7f:34:f8:7e:ed:88:4f:64:43:97:cf:
5b:2d:08:cf:84:2e:14:19:c0:ac:3d:74:9b:37:c3:
c1:70:7e:36:1d:be:10:5d:0b:64:47:ac:50:20:33:
0c:68:2c:84:ea:b3:84:b7:fd:73:a1:a7:e7:0a:fc:
0d:8c:e7:89:9b:c1:af:10:35:dc:7a:cd:7e:ec:c4:
2d:af:60:db:ea:ed:d6:8f:36:1f:55:6c:9c:e7:c6:
6e:24:85:4d:55:b6:d4:bd:02:9c:27:f2:f9:11:d2:
22:39:4d:03:6e:55:5a:c1:e9:6c:77:0b:1d:2d:55:
f2:67:44:c6:27:17:7a:20:5f:3d:d5:92:e7:cc:fe:
0b:45:ac:1d:50:67:7b:03:66:29:7a:ac:2a:af:94:
4b:b6:32:9d:ff:4b:5c:ba:a0:d8:97:73:54:4b:a5:
95:4a:ef:4b:33:3c:d4:d4:b2:53:4e:c6:eb:ec:ec:
cf:c7:b3:be:59:e8:92:90:3b:02:2f:44:dd:a4:24:
e9:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:06:A4:A6:B4:F1:E6:5B:42:D3:F7:FD:BE:C4:39:80:F9:30:30:8D
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/20FC07BA876011F184CDC2EDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:fcb0:9000::/36
Signature Algorithm: sha256WithRSAEncryption
90:2a:c4:6a:d1:2d:0d:0d:a6:61:d9:f7:cd:6a:09:00:d6:bb:
ac:b4:29:cd:f6:bc:ba:f6:3c:f6:56:5d:cc:1e:8e:bf:70:e2:
37:87:06:6a:7b:cd:f5:b9:c2:45:3e:f3:a3:c8:b0:e8:3f:0d:
f5:b4:55:1d:0b:75:2f:79:4a:10:33:c3:66:6d:de:dc:88:1d:
08:8e:36:96:43:a2:ff:f8:26:b6:88:e9:2b:d8:98:f0:ab:ca:
ff:1d:d2:84:35:ba:76:88:42:02:37:cd:09:f0:54:0c:5c:6b:
82:06:50:b0:20:43:3e:6e:b2:bc:7e:f5:29:98:2f:b7:57:36:
5b:37:2f:c5:3c:83:b9:ac:8f:6f:74:e7:60:47:e1:d7:b8:0f:
60:99:f0:21:53:32:72:b4:18:0f:1b:15:08:17:94:1d:7d:89:
5d:64:4c:74:ce:87:50:2a:2c:82:8a:67:ca:24:2b:45:97:36:
87:b7:02:75:37:fa:04:5f:50:9f:79:85:3a:64:16:9a:8b:b4:
09:e4:09:29:29:c3:f9:19:b0:7d:42:4a:b3:5a:46:0b:f6:5d:
27:05:5a:16:25:1a:20:e4:8a:fa:86:ef:f8:4d:3c:36:b4:f9:
7d:14:3c:04:58:74:e8:24:e7:d6:27:bc:b8:a9:5b:58:fd:26:
1d:96:13:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:44:31 2026 by rpki-client