Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/B7AB802E875F11F1BD70C4EBCE1D38B0.roa
File: B7AB802E875F11F1BD70C4EBCE1D38B0.roa (raw, json)
Hash identifier: PAvAARD4G7WkAGII2YZhiU4UZaSuyJFXo44UMlbaMaE=
Subject key identifier: 02:45:AC:60:74:F0:50:8B:FF:E3:95:52:3D:92:AE:09:8D:80:B9:A3
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 0C4C
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/B7AB802E875F11F1BD70C4EBCE1D38B0.roa
Signing time: Fri 24 Jul 2026 13:01:00 +0000
ROA not before: Fri 24 Jul 2026 13:00:56 +0000
ROA not after: Thu 24 Jul 2036 13:00:56 +0000
asID: 36916
IP address blocks: 2c0f:fcb0:3000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3148 (0xc4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF, serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Jul 24 13:00:56 2026 GMT
Not After : Jul 24 13:00:56 2036 GMT
Subject: CN=6a63620c-6f40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:59:b7:49:13:5c:d4:84:56:06:94:62:c4:fb:
ce:f5:d9:d8:ca:e4:5b:07:fa:cd:ec:1d:15:52:7a:
85:56:98:be:bd:19:ac:9d:9b:4c:1b:fc:74:f5:51:
fd:b7:13:88:94:55:fd:b8:a7:7c:d5:cb:11:e3:7d:
e1:ef:d5:44:44:5b:08:30:d5:d6:af:ed:2c:4d:28:
b8:5b:c8:e8:7f:86:70:c1:57:41:a9:e9:b9:b5:cb:
69:a0:ab:80:c1:f4:21:87:e8:ae:02:92:df:6d:b4:
5e:9a:35:43:6b:b1:43:52:4c:96:f3:ab:58:86:43:
25:16:81:45:68:bd:59:9d:57:38:4b:36:7e:ae:74:
cc:dc:7d:3a:a1:d4:f2:8a:86:d4:67:ed:22:a4:5e:
96:8c:72:c1:46:de:96:24:d6:76:ef:25:72:49:1b:
5c:ec:d1:04:16:50:f6:60:6e:56:26:14:7b:12:19:
f6:d3:b9:3e:36:ed:ca:82:a1:62:38:73:bc:46:af:
ca:28:08:6c:68:7d:95:81:fa:4a:7c:3d:0a:d4:5e:
6a:2b:cf:62:a9:ad:93:1f:61:fb:28:1f:71:62:ee:
d3:e4:1b:6a:c6:88:4f:fd:a8:3e:e1:28:d0:19:59:
b9:ef:96:26:2f:97:1a:97:f8:3a:10:3b:c1:b1:fe:
98:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:45:AC:60:74:F0:50:8B:FF:E3:95:52:3D:92:AE:09:8D:80:B9:A3
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/B7AB802E875F11F1BD70C4EBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:fcb0:3000::/36
Signature Algorithm: sha256WithRSAEncryption
38:0c:63:12:04:be:79:70:c1:2c:41:8b:6b:ac:8d:07:49:22:
21:52:f4:44:08:7f:79:a4:35:98:77:b1:ee:32:9a:77:18:a3:
41:7e:0a:7a:c1:e3:d1:78:f7:b2:ac:61:18:f6:63:42:dc:55:
f1:df:47:47:7d:29:ac:c0:9e:e5:af:fb:92:d0:db:38:e8:f4:
93:f4:9f:75:eb:73:42:0d:f9:e6:a0:ea:88:3c:09:f1:76:cd:
e8:d8:e5:9a:bc:55:f3:d8:b4:1d:5f:61:8f:2d:04:3c:fa:ac:
08:c0:cc:58:57:fa:9f:a3:28:c2:cc:a9:c9:f6:9c:41:3b:29:
89:80:c5:5d:c6:7f:79:7f:af:9c:2b:61:7a:db:63:42:f7:f1:
89:8b:10:32:2b:47:51:4d:16:f3:f9:82:16:9f:ad:a7:23:1c:
0d:d6:02:2b:54:5a:83:3c:4a:4a:11:87:42:8c:e9:9c:c9:7c:
7d:1f:c9:33:7e:26:a8:7e:f9:ab:0a:5e:08:21:74:c4:62:81:
7b:13:d5:ba:cf:29:b3:36:67:d7:b4:7a:69:f8:14:e7:be:c8:
62:94:33:8d:6b:f3:7f:b5:4d:14:3c:2b:1a:9c:96:5d:67:08:
4f:e4:10:b0:a7:33:8e:bd:08:0a:94:88:6c:ed:13:86:0e:98:
47:e2:88:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:47:07 2026 by rpki-client