Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/F747E33A875F11F198D6E7EBCE1D38B0.roa
File: F747E33A875F11F198D6E7EBCE1D38B0.roa (raw, json)
Hash identifier: fPkJT1suVu+fmHooEPCltOvMTrgF4Dcj7LTqcvePPGM=
Subject key identifier: 9E:9D:EA:39:7B:71:76:34:34:3D:21:17:5B:88:85:8B:51:E2:38:4B
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 0C50
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/F747E33A875F11F198D6E7EBCE1D38B0.roa
Signing time: Fri 24 Jul 2026 13:02:47 +0000
ROA not before: Fri 24 Jul 2026 13:02:43 +0000
ROA not after: Thu 24 Jul 2036 13:02:43 +0000
asID: 36916
IP address blocks: 2c0f:fcb0:6000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3152 (0xc50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF, serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Jul 24 13:02:43 2026 GMT
Not After : Jul 24 13:02:43 2036 GMT
Subject: CN=6a636277-75a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ab:f2:10:62:24:16:ad:b3:f1:59:6a:13:94:
b4:03:27:71:62:3c:d1:97:1f:82:46:62:f8:a4:8d:
f5:e3:58:40:7d:c4:b4:95:11:80:0b:1a:30:0c:f0:
9d:66:52:94:b0:db:f9:75:d5:c0:0e:57:28:1a:15:
36:8b:cc:69:5d:28:3b:9b:f2:c1:da:4a:3f:61:79:
ff:41:2f:da:40:44:50:c0:b7:ef:8f:c6:57:2d:a9:
77:3c:c9:a2:3a:37:d3:30:83:b7:6a:7d:c0:a7:3e:
ec:71:25:e1:61:3c:9e:d9:a5:eb:d5:32:6d:be:e1:
ea:75:9e:a7:0c:6d:67:14:66:9d:a3:4b:2c:8f:20:
ea:08:0c:b2:b8:7a:98:94:e6:15:bb:08:be:77:98:
ec:b8:79:98:1c:bb:8b:66:5a:81:ca:1d:5d:bf:4d:
5e:45:48:8c:18:3f:34:b6:b5:26:40:a0:af:6d:f9:
88:4e:83:f0:4c:c9:9d:b1:fb:ca:38:69:b7:cb:ae:
e2:7b:b2:51:8d:f7:0e:d6:86:61:74:e4:83:07:9a:
87:01:3c:c3:fe:cd:33:11:55:0c:55:79:bc:7f:1c:
7e:81:94:bc:c4:83:4a:13:af:fa:d3:16:1b:4c:1e:
76:fa:c2:28:7b:c7:9e:a9:e7:e6:1a:66:9e:25:f4:
62:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:9D:EA:39:7B:71:76:34:34:3D:21:17:5B:88:85:8B:51:E2:38:4B
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/F747E33A875F11F198D6E7EBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:fcb0:6000::/36
Signature Algorithm: sha256WithRSAEncryption
8c:06:ac:f0:f1:00:32:d3:67:5c:07:fb:6c:e4:d5:91:a4:07:
80:53:15:4e:04:53:2c:be:af:a8:05:c6:d6:de:20:b7:7f:c1:
d9:17:be:ea:dd:ee:c7:bf:6c:1b:e0:45:ba:9c:e6:c6:6a:e5:
e4:4d:d8:99:27:cd:a8:32:27:d5:bb:20:de:4d:c3:63:ea:c4:
a0:56:0d:90:08:73:df:13:f7:ba:39:99:6f:e3:bc:d7:68:75:
54:bc:e9:74:cf:05:a6:3c:61:18:87:d3:8d:c2:04:31:f9:4f:
8d:91:45:b5:e2:76:3c:60:b5:44:7f:26:86:ad:fd:b8:9d:d7:
74:d4:d1:6f:a3:a9:1f:ce:20:2b:3b:cb:c4:c0:6c:a0:b0:67:
d7:ef:96:e5:81:21:db:0e:20:66:95:be:f4:09:23:ea:d5:20:
f1:69:b5:0a:24:7d:07:a4:a8:55:71:30:3d:37:85:8a:b8:bb:
b3:a0:75:5c:d4:98:74:cb:cc:80:fe:62:5e:43:f9:aa:1c:d1:
ee:66:e8:50:a5:80:da:fe:b5:75:49:5b:0e:66:eb:2d:aa:ab:
6e:bd:a6:23:2d:50:0e:1b:a3:12:f0:3b:4d:cb:3f:f2:75:df:
7b:65:57:38:a7:e4:85:f5:25:6c:b0:43:7b:58:9f:28:8c:a1:
bf:75:fa:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:40:03 2026 by rpki-client