Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/D567663C875F11F1A009DBEBCE1D38B0.roa
File: D567663C875F11F1A009DBEBCE1D38B0.roa (raw, json)
Hash identifier: f0zwsV29ZHCarEXao43NE9Y/0IR72GacQ799oOBpkc8=
Subject key identifier: 0D:77:27:3C:74:27:F0:65:6F:CE:C5:3C:71:AF:9C:C5:F7:9B:3F:7A
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 0C4E
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/D567663C875F11F1A009DBEBCE1D38B0.roa
Signing time: Fri 24 Jul 2026 13:01:50 +0000
ROA not before: Fri 24 Jul 2026 13:01:46 +0000
ROA not after: Thu 24 Jul 2036 13:01:46 +0000
asID: 36916
IP address blocks: 2c0f:fcb0:5000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3150 (0xc4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF, serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Jul 24 13:01:46 2026 GMT
Not After : Jul 24 13:01:46 2036 GMT
Subject: CN=6a63623e-9ad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bb:34:dc:5f:89:2a:a9:9e:d0:17:19:0a:9a:
1f:07:92:77:18:c1:b8:a8:39:30:6e:ff:b7:22:14:
d8:a0:fe:88:d3:38:6e:4d:2d:14:80:63:e4:4e:b9:
86:7b:31:32:53:ba:71:d6:b2:0d:b7:a9:91:a0:45:
69:06:74:7c:c6:8e:33:ce:a5:bd:43:2e:65:69:6a:
5a:b9:7d:ae:4b:95:77:0c:1e:fe:c3:c9:15:23:85:
df:86:1d:fa:ca:9a:9c:d6:b1:f2:33:4a:76:4b:99:
56:1b:bc:11:08:1f:38:5e:b5:c7:4d:1c:f4:fd:51:
1e:3c:b7:50:e5:b0:ad:7c:ea:39:48:49:7c:31:55:
b6:f2:2b:3f:10:f1:32:e2:8f:d0:4f:60:71:0b:4a:
cb:9f:cc:32:4d:2f:9d:1b:65:47:1f:96:9c:e8:68:
4b:cd:9d:38:3d:3c:c6:c1:34:87:71:00:7b:a1:c3:
b3:52:30:2c:1f:49:62:aa:9e:e4:bb:a4:bc:c0:0e:
79:68:64:a1:49:8a:b7:e2:37:e0:eb:79:0e:53:82:
e8:2d:d2:dd:c6:f6:4c:97:08:c5:6d:f0:c6:3c:ad:
4d:70:0b:fa:64:f6:20:0a:11:9d:a1:e1:3e:a4:75:
5a:0f:34:d7:0f:8c:61:83:cc:3c:fd:5c:ed:b7:cd:
1f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:77:27:3C:74:27:F0:65:6F:CE:C5:3C:71:AF:9C:C5:F7:9B:3F:7A
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/D567663C875F11F1A009DBEBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:fcb0:5000::/36
Signature Algorithm: sha256WithRSAEncryption
1c:97:db:72:51:28:ae:91:a7:de:ca:cf:a8:33:1e:5a:3a:9b:
72:11:ef:17:ee:4a:03:45:17:1a:00:af:6c:a0:17:c3:1d:65:
a5:7a:3d:1c:f9:c3:7b:38:df:81:6f:48:fa:a3:6d:7f:c2:c6:
a9:be:5f:b7:de:c5:f3:8c:93:b5:dc:96:d8:6f:52:8f:93:48:
ce:77:c8:d8:c7:d3:59:bf:50:e3:7c:67:28:a8:2a:bf:19:27:
fe:b0:e2:c6:90:48:a3:88:b1:d9:84:5a:06:35:44:19:26:41:
88:00:d4:e7:37:5c:8d:d5:e7:be:cf:81:52:2c:62:bb:15:7d:
ac:35:a4:2a:c4:c8:08:74:38:c9:ad:7b:ee:19:92:d8:f3:6d:
4a:15:ea:0d:68:e8:e1:e3:20:ec:2a:48:ce:93:6b:c7:46:2e:
42:2a:5f:9a:f0:64:d4:92:7a:ce:44:8d:e2:1a:f7:75:75:b8:
48:79:5e:d5:6c:0a:7e:74:2a:77:ac:f8:32:2c:97:b0:49:97:
f0:5b:3f:47:bd:0a:a4:ae:3e:7a:85:1d:51:6d:a1:8f:97:d9:
27:43:42:6f:e4:02:94:78:0f:d6:1e:c0:75:df:84:60:75:45:
38:00:10:38:8d:be:23:b2:10:d3:2b:6e:db:5d:f2:e9:32:82:
b8:51:09:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:46:03 2026 by rpki-client