Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/3EE804EA876011F19E9F9CEFCE1D38B0.roa
File: 3EE804EA876011F19E9F9CEFCE1D38B0.roa (raw, json)
Hash identifier: vUeUXq/YIl6LdQ/NYg9CnzEU9vqwCvn+fEvoE4jMIbc=
Subject key identifier: 79:63:57:A4:5F:6A:89:E4:13:62:84:D7:4F:8C:2A:60:F7:D0:3A:B4
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 0C54
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/3EE804EA876011F19E9F9CEFCE1D38B0.roa
Signing time: Fri 24 Jul 2026 13:04:47 +0000
ROA not before: Fri 24 Jul 2026 13:04:43 +0000
ROA not after: Thu 24 Jul 2036 13:04:43 +0000
asID: 36916
IP address blocks: 2c0f:fcb0:c000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3156 (0xc54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF, serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Jul 24 13:04:43 2026 GMT
Not After : Jul 24 13:04:43 2036 GMT
Subject: CN=6a6362ef-0401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:07:fd:19:aa:99:db:1f:66:0a:da:e1:e3:b9:
60:88:53:aa:2d:6c:72:87:5a:b5:19:2a:19:66:ed:
0c:e3:d3:97:13:1e:53:28:59:af:cb:48:fc:c5:a4:
29:6c:87:2e:23:ac:67:f8:f3:55:3f:79:da:4a:37:
33:31:82:c9:e4:ff:60:95:ae:37:5b:59:6b:ee:c4:
a4:fc:40:5b:46:b2:5d:63:e8:85:b4:11:92:bd:2b:
35:e0:90:fc:74:40:5e:c5:8c:6d:f8:e1:b6:33:39:
e3:33:e9:ef:fe:63:9a:48:da:77:9b:6d:12:19:4c:
a7:50:22:47:07:de:88:9f:17:a1:ec:15:8a:97:7f:
a3:32:4e:cf:c3:ad:12:cc:7d:84:3c:28:f6:de:87:
0a:02:ca:6c:0c:7c:21:25:56:7b:9c:dd:60:9c:20:
90:97:b7:ef:d4:db:67:b5:f5:1f:95:a1:05:3c:39:
b5:c4:43:74:9a:83:60:c1:69:dc:c5:f0:26:aa:de:
aa:26:82:f3:8c:18:80:85:e1:9d:a7:6a:37:bc:11:
6e:40:ec:d5:d6:09:e6:34:52:b6:6e:bd:c5:f8:b2:
24:40:53:a5:4b:33:b1:04:70:a5:cc:85:ed:8f:0f:
9b:f2:64:38:ba:60:bb:57:90:6a:c2:a6:e6:a3:15:
9d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:63:57:A4:5F:6A:89:E4:13:62:84:D7:4F:8C:2A:60:F7:D0:3A:B4
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/3EE804EA876011F19E9F9CEFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:fcb0:c000::/36
Signature Algorithm: sha256WithRSAEncryption
14:ca:ed:fb:c9:87:44:f4:e3:d2:f0:84:b6:d4:66:a9:70:fd:
b4:a2:ac:de:e3:24:79:47:be:60:c1:a3:83:52:c3:4c:8d:b0:
83:ea:86:5e:39:60:4b:1c:d6:c2:9e:ad:06:24:39:50:74:c5:
1a:e8:6b:48:e7:d7:84:22:60:2e:8e:f1:7d:50:89:81:6f:19:
b0:83:38:91:53:76:d7:1f:3b:9c:2c:6b:1c:38:62:ba:1a:17:
65:97:ab:9a:bd:7e:1b:9d:ec:16:e0:48:0a:a6:eb:99:ad:cb:
2f:82:b0:86:5e:a8:b0:d6:ae:ea:6e:a2:aa:a7:cc:f5:ab:ca:
fb:ca:d4:7c:6a:95:50:83:3a:2b:02:d0:9d:8a:2e:8c:fb:d6:
b2:30:96:8c:62:e2:6d:e6:54:d3:82:0f:e0:41:02:8c:8a:a0:
9c:47:d5:55:45:1a:26:f3:f7:ee:21:58:f5:e5:bb:62:2f:ce:
f3:ba:4a:72:ac:29:1f:4d:89:25:6a:58:c7:f3:78:66:ad:b2:
7c:cc:15:50:7f:60:17:fb:79:b4:be:b0:e9:85:5a:87:2e:87:
56:c4:5b:ef:2b:98:14:c5:89:01:c2:6c:18:32:92:a2:43:0b:
38:c3:43:3f:0a:3e:77:f8:f6:a0:82:c7:ac:1e:05:b1:fa:ee:
43:4d:bd:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:40:15 2026 by rpki-client