Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/8629771C875B11F18DE458D3CE1D38B0.roa
File: 8629771C875B11F18DE458D3CE1D38B0.roa (raw, json)
Hash identifier: +c1WVbaXCOvFd1mPAF6lYCfFqnPGUtNU2UESIjYcysA=
Subject key identifier: C6:5B:F4:A5:DA:B2:E6:31:AB:00:63:08:9E:55:08:9D:5C:83:07:C0
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 0C4A
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/8629771C875B11F18DE458D3CE1D38B0.roa
Signing time: Fri 24 Jul 2026 12:30:59 +0000
ROA not before: Fri 24 Jul 2026 12:30:55 +0000
ROA not after: Thu 24 Jul 2036 12:30:55 +0000
asID: 36916
IP address blocks: 2c0f:fcb0:2000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3146 (0xc4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF, serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Jul 24 12:30:55 2026 GMT
Not After : Jul 24 12:30:55 2036 GMT
Subject: CN=6a635b03-c9be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a2:9f:05:5b:56:19:80:09:2d:54:14:9e:91:
07:3c:a8:af:1c:60:9b:ef:8c:94:f6:85:77:8c:03:
e4:d2:f5:44:fe:89:e8:06:e8:b6:69:ed:87:c4:46:
47:2a:80:df:37:a5:91:97:da:97:a7:c8:a8:0a:ad:
56:bb:f4:60:9a:13:0d:d3:ba:5c:39:cf:de:f7:b9:
be:39:90:fa:aa:fc:53:3e:cc:aa:80:5e:e0:71:fe:
63:d7:ab:3d:ae:9c:66:f8:ce:a0:f2:6a:99:81:c9:
c3:cc:e1:a2:72:4a:15:3f:77:3f:c0:7b:73:dc:ed:
65:e3:cf:a7:28:e2:c4:5a:13:f6:68:cc:3b:58:2e:
c7:00:4b:fc:b9:72:65:94:fa:5a:25:db:db:a3:dd:
31:3d:4a:68:9e:ea:03:4c:94:4f:fc:eb:b4:9a:26:
70:64:0c:c7:7b:48:9f:16:3d:a7:34:fa:c6:9c:01:
35:e1:c8:b8:e9:e7:8d:ff:8b:e0:f2:fc:11:3f:28:
3c:d0:a8:8b:08:98:e2:1b:d8:26:d5:c6:3d:c6:83:
5f:b3:74:bf:d3:3f:bc:62:64:ec:0e:d7:9a:2a:65:
6c:65:39:28:9e:dc:c5:59:2d:74:eb:f2:7a:29:91:
02:dd:2f:81:54:81:a4:27:eb:8e:a8:00:ca:09:36:
d1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:5B:F4:A5:DA:B2:E6:31:AB:00:63:08:9E:55:08:9D:5C:83:07:C0
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/8629771C875B11F18DE458D3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:fcb0:2000::/36
Signature Algorithm: sha256WithRSAEncryption
18:2e:21:01:19:04:ac:73:b7:a4:99:d0:5b:ce:2e:18:bb:2f:
44:9a:39:97:af:3d:bf:bf:7d:af:32:bb:62:c7:ba:06:ad:d2:
1c:5c:0c:1b:d2:75:41:41:e5:50:35:34:c2:ff:f3:74:d9:8f:
82:39:e9:cc:2e:0f:bf:c3:30:5a:2d:a0:68:61:95:8c:24:c1:
6c:6f:fa:90:29:a7:ce:b8:5a:f8:99:6f:17:9d:cf:9c:02:58:
35:fe:69:8a:2b:4e:59:2f:b2:00:92:7d:85:14:54:e0:85:50:
7b:fe:81:b1:86:30:30:9a:e8:d9:7e:ae:24:00:ec:e3:55:78:
01:17:e7:f1:fe:fe:f4:90:a3:e3:e9:70:a9:5d:01:c3:b7:3e:
09:92:c0:0e:0c:e2:ca:c1:bb:fd:80:4a:be:7f:6d:03:c1:3a:
92:0d:7d:a6:10:ed:68:8c:c7:a9:1f:56:cc:d3:4c:a0:7d:6c:
37:18:33:6e:6a:8e:2b:d5:9a:bf:68:ac:fc:f9:28:0c:d7:2a:
1d:2b:af:8c:3f:72:d7:03:6b:c4:18:dc:d7:24:e4:1b:c6:81:
16:ed:04:8f:d3:2f:92:e5:a1:48:af:11:ba:13:04:8c:58:75:
f5:f0:99:06:84:ac:27:a2:f0:e2:3c:2b:22:b4:94:86:da:1e:
3c:f2:fc:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:36:58 2026 by rpki-client