Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3670369/691565D27E7811ECB77461CB5A40D577/615F683284E611F1AB42B3D5CE1D38B0.roa
File: 615F683284E611F1AB42B3D5CE1D38B0.roa (raw, json)
Hash identifier: Rwiymxl+gzzR6gzEBzteCvpbPYriPshX9t+Q/e9SKWc=
Subject key identifier: 22:A9:C7:94:47:6B:6F:4F:B4:AD:94:93:AB:E8:9D:3E:C7:B5:05:51
Certificate issuer: /CN=F3670369AF/serialNumber=C8BB884D04BABC1605AB7DF7958796059C92C26A
Certificate serial: 0693
Authority key identifier: C8:BB:88:4D:04:BA:BC:16:05:AB:7D:F7:95:87:96:05:9C:92:C2:6A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/yLuITQS6vBYFq333lYeWBZySwmo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3670369/691565D27E7811ECB77461CB5A40D577/615F683284E611F1AB42B3D5CE1D38B0.roa
Signing time: Tue 21 Jul 2026 09:27:24 +0000
ROA not before: Tue 21 Jul 2026 09:27:20 +0000
ROA not after: Thu 31 Jul 2036 09:27:20 +0000
asID: 37611
IP address blocks: 2c0f:ef20::/32 maxlen: 44
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3670369/691565D27E7811ECB77461CB5A40D577/yLuITQS6vBYFq333lYeWBZySwmo.crl
rsync://rpki.afrinic.net/repository/member_repository/F3670369/691565D27E7811ECB77461CB5A40D577/yLuITQS6vBYFq333lYeWBZySwmo.mft
rsync://rpki.afrinic.net/repository/afrinic/yLuITQS6vBYFq333lYeWBZySwmo.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1683 (0x693)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3670369AF, serialNumber=C8BB884D04BABC1605AB7DF7958796059C92C26A
Validity
Not Before: Jul 21 09:27:20 2026 GMT
Not After : Jul 31 09:27:20 2036 GMT
Subject: CN=6a5f3b7c-04f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:db:d3:e8:7e:ce:1e:fc:2f:7b:d9:97:bd:7a:
f2:7f:55:21:12:5f:ad:98:57:4a:46:92:ee:b1:4a:
0a:0d:33:88:02:26:b4:ef:7d:56:1f:83:84:37:8c:
77:ab:cf:16:3d:f5:93:70:79:42:19:fd:2b:a6:d0:
06:15:a7:6b:87:d2:17:be:5d:c6:fc:04:8e:40:8b:
2c:c5:90:67:87:86:0d:76:7f:8a:fa:f7:ea:28:69:
f2:4a:ce:04:2d:42:b4:b7:fc:1c:23:12:f5:4b:01:
e1:f0:9a:a3:75:3c:0d:cf:82:e9:eb:e2:7e:92:88:
b9:a4:5b:e5:dc:47:20:fb:df:75:1b:1f:d5:d2:47:
48:b9:1c:8d:09:47:c4:af:b4:82:2e:7b:b9:8a:13:
30:1d:43:7d:61:86:35:bc:92:b1:a5:97:c0:d0:39:
88:46:96:60:c5:3e:ed:cf:95:94:56:87:8a:49:7c:
d0:49:4a:3b:ba:be:5c:01:18:a4:fe:d3:65:8b:95:
12:60:ed:26:b3:19:61:b6:cf:7a:33:37:01:8c:a6:
f7:c8:e0:63:7a:7b:d2:2f:7f:3e:19:a7:d2:c1:e6:
26:28:29:d3:2b:fe:51:3d:27:fd:4a:4f:e2:1c:e1:
06:c9:1c:6e:e7:82:16:1f:20:5f:9c:7f:37:07:94:
59:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:A9:C7:94:47:6B:6F:4F:B4:AD:94:93:AB:E8:9D:3E:C7:B5:05:51
X509v3 Authority Key Identifier:
keyid:C8:BB:88:4D:04:BA:BC:16:05:AB:7D:F7:95:87:96:05:9C:92:C2:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3670369/691565D27E7811ECB77461CB5A40D577/yLuITQS6vBYFq333lYeWBZySwmo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yLuITQS6vBYFq333lYeWBZySwmo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3670369/691565D27E7811ECB77461CB5A40D577/615F683284E611F1AB42B3D5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:ef20::/32
Signature Algorithm: sha256WithRSAEncryption
27:1b:15:a2:29:64:28:f2:26:df:fb:24:29:62:6b:da:88:14:
20:5d:85:38:23:7d:3a:d0:6b:d5:77:2c:17:49:d5:fd:16:a7:
11:25:86:e4:5f:88:d7:fd:90:44:7b:7f:af:b2:e4:60:3b:4c:
bb:84:a1:21:65:b0:b1:88:77:14:e0:21:98:18:b2:d1:24:9b:
54:b8:2e:7d:6d:62:ec:3e:6b:0c:79:19:eb:e7:05:b1:80:8c:
ae:f1:f5:48:65:dd:79:92:ec:c6:67:d3:90:36:2c:3d:95:b1:
4c:8d:01:b8:b4:c7:ab:b3:f7:ac:6d:0a:2b:34:16:9b:55:fb:
16:75:37:66:4a:81:da:79:c9:3f:86:28:54:2d:3c:67:6e:95:
08:e5:c8:41:c4:5d:e7:2f:c5:5e:79:9a:90:42:d7:14:29:58:
2a:fc:23:dd:ad:4a:9d:68:43:5e:5f:6c:ed:c8:ea:e2:88:55:
ab:5e:98:ef:df:02:db:f2:c2:77:8b:d4:9f:74:c7:7e:8f:b2:
43:3b:7c:dc:e7:03:f1:72:08:73:c0:16:0a:a5:4e:5b:46:af:
a8:a0:37:e9:fa:88:1e:24:42:68:c8:ad:e5:e2:de:90:d1:48:
b7:aa:14:71:b5:50:76:10:0f:41:24:f8:f4:ab:95:9a:3e:bc:
84:17:91:e7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBpMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NzAzNjlBRjExMC8GA1UEBRMoQzhCQjg4NEQwNEJBQkMxNjA1QUI3REY3OTU4Nzk2
MDU5QzkyQzI2QTAeFw0yNjA3MjEwOTI3MjBaFw0zNjA3MzEwOTI3MjBaMBgxFjAU
BgNVBAMTDTZhNWYzYjdjLTA0ZjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDJ29Pofs4e/C972Ze9evJ/VSESX62YV0pGku6xSgoNM4gCJrTvfVYfg4Q3
jHerzxY99ZNweUIZ/Sum0AYVp2uH0he+Xcb8BI5AiyzFkGeHhg12f4r69+ooafJK
zgQtQrS3/BwjEvVLAeHwmqN1PA3Pgunr4n6SiLmkW+XcRyD733UbH9XSR0i5HI0J
R8SvtIIue7mKEzAdQ31hhjW8krGll8DQOYhGlmDFPu3PlZRWh4pJfNBJSju6vlwB
GKT+02WLlRJg7SazGWG2z3ozNwGMpvfI4GN6e9Ivfz4Zp9LB5iYoKdMr/lE9J/1K
T+Ic4QbJHG7nghYfIF+cfzcHlFn1AgMBAAGjggKmMIICojAdBgNVHQ4EFgQUIqnH
lEdrb0+0rZSTq+idPse1BVEwHwYDVR0jBBgwFoAUyLuITQS6vBYFq333lYeWBZyS
wmowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjcwMzY5LzY5MTU2NUQyN0U3ODExRUNCNzc0NjFDQjVBNDBENTc3L3lMdUlU
UVM2dkJZRnEzMzNsWWVXQlp5U3dtby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3lMdUlUUVM2dkJZRnEzMzNsWWVXQlp5U3dtby5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjcwMzY5LzY5MTU2NUQyN0U3ODExRUNCNzc0NjFDQjVB
NDBENTc3LzYxNUY2ODMyODRFNjExRjFBQjQyQjNENUNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAsD+8gMA0GCSqGSIb3DQEB
CwUAA4IBAQAnGxWiKWQo8ibf+yQpYmvaiBQgXYU4I3060GvVdywXSdX9FqcRJYbk
X4jX/ZBEe3+vsuRgO0y7hKEhZbCxiHcU4CGYGLLRJJtUuC59bWLsPmsMeRnr5wWx
gIyu8fVIZd15kuzGZ9OQNiw9lbFMjQG4tMers/esbQorNBabVfsWdTdmSoHaeck/
hihULTxnbpUI5chBxF3nL8VeeZqQQtcUKVgq/CPdrUqdaENeX2ztyOriiFWrXpjv
3wLb8sJ3i9SfdMd+j7JDO3zc5wPxcghzwBYKpU5bRq+ooDfp+ogeJEJoyK3l4t6Q
0Ui3qhRxtVB2EA9BJPj0q5WaPryEF5Hn
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:09:52 2026 by rpki-client