Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/04D8EA84873411F192C0F7E3CE1D38B0.roa
File: 04D8EA84873411F192C0F7E3CE1D38B0.roa (raw, json)
Hash identifier: 0W5gaxdOwk+b6dfWlmRPJjKXBz2u49fbrmDgcDEqrHI=
Subject key identifier: 11:AC:B0:53:A7:08:D5:38:23:15:72:99:D4:14:A1:17:D7:7C:E6:33
Certificate issuer: /CN=F3683A54AF/serialNumber=91733293FC6350AEDFBA75A916FFF41B515ECF4C
Certificate serial: 0719
Authority key identifier: 91:73:32:93:FC:63:50:AE:DF:BA:75:A9:16:FF:F4:1B:51:5E:CF:4C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/kXMyk_xjUK7funWpFv_0G1Fez0w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/04D8EA84873411F192C0F7E3CE1D38B0.roa
Signing time: Fri 24 Jul 2026 07:48:12 +0000
ROA not before: Fri 24 Jul 2026 07:48:08 +0000
ROA not after: Thu 24 Jul 2036 07:48:08 +0000
asID: 36924
IP address blocks: 2c0f:3d00::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/kXMyk_xjUK7funWpFv_0G1Fez0w.crl
rsync://rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/kXMyk_xjUK7funWpFv_0G1Fez0w.mft
rsync://rpki.afrinic.net/repository/afrinic/kXMyk_xjUK7funWpFv_0G1Fez0w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1817 (0x719)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3683A54AF, serialNumber=91733293FC6350AEDFBA75A916FFF41B515ECF4C
Validity
Not Before: Jul 24 07:48:08 2026 GMT
Not After : Jul 24 07:48:08 2036 GMT
Subject: CN=6a6318bc-69ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ba:6d:27:4b:45:e9:e0:45:ac:68:1b:74:18:
82:dd:56:c0:cc:16:8e:d1:59:3d:47:44:c5:b3:71:
7c:c3:7c:b4:1e:ce:a3:66:84:6c:e4:51:79:62:71:
52:c8:8d:64:34:e9:30:42:97:9c:15:ed:56:ff:ec:
1f:17:cb:f9:33:6a:f6:f3:7d:a3:d4:4d:99:c6:75:
ab:af:99:32:96:cc:87:a9:5d:98:ed:f1:a3:6e:1e:
d4:23:c8:d2:42:41:1f:b8:04:a9:87:3c:dc:8c:6c:
d5:ff:d6:c3:70:40:32:09:d7:4c:39:35:e0:ae:df:
99:6f:86:33:ee:3c:e8:7e:83:88:d8:f2:0c:10:ef:
24:68:40:82:0e:99:43:a6:c6:76:a1:c0:f2:c9:0b:
2e:3e:8e:88:59:8f:c5:f4:1b:32:82:80:55:6b:af:
13:42:02:ac:dc:5a:4e:13:5c:96:fd:fe:9f:1b:af:
3e:54:36:7b:15:02:e6:3b:3e:c1:ab:32:ea:f1:c6:
c5:d1:b0:dd:48:e2:79:51:eb:1b:0a:c3:26:00:a5:
82:74:0a:f7:03:e2:b1:d6:99:a5:3d:3c:0c:42:cf:
13:23:85:4a:bd:ea:21:76:48:87:af:44:4c:7e:35:
84:b3:9c:9d:6a:e4:46:fc:f3:f9:b0:04:e8:05:78:
5d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:AC:B0:53:A7:08:D5:38:23:15:72:99:D4:14:A1:17:D7:7C:E6:33
X509v3 Authority Key Identifier:
keyid:91:73:32:93:FC:63:50:AE:DF:BA:75:A9:16:FF:F4:1B:51:5E:CF:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/kXMyk_xjUK7funWpFv_0G1Fez0w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kXMyk_xjUK7funWpFv_0G1Fez0w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/04D8EA84873411F192C0F7E3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:3d00::/32
Signature Algorithm: sha256WithRSAEncryption
48:2f:05:dc:ae:62:97:86:58:e9:d5:6e:77:0e:f8:e8:f7:7a:
3e:d6:ee:ed:06:10:70:05:a5:ed:51:df:32:38:b7:ef:cd:97:
a7:d9:f7:3c:2f:41:7f:ad:9d:20:15:a0:74:92:32:95:d3:1d:
1a:c9:93:3c:bd:2e:2a:12:d2:a3:05:69:e4:9e:3f:26:28:f6:
e5:66:20:34:a0:d9:f6:61:a6:f4:7c:19:33:ed:4d:77:68:48:
82:f1:5a:7d:9f:ec:2f:e7:84:03:25:02:32:03:81:51:79:48:
35:6a:56:2a:d2:d2:b1:ca:d3:4d:11:c0:34:cf:dd:6c:ab:bb:
6d:79:37:b7:ea:f0:85:ca:60:18:a1:02:89:a1:f0:7b:c2:ba:
cd:a0:a3:d2:df:83:39:91:f8:eb:11:84:86:ff:3f:a9:37:68:
11:3e:a5:cf:06:c4:54:68:c2:81:ac:26:18:0a:82:20:8d:93:
c7:4c:d6:50:14:36:66:f2:88:93:1d:05:d9:c4:20:60:9e:5f:
4a:c3:17:7c:e2:13:b5:be:00:bf:d7:cf:8c:25:fb:5e:26:a8:
5a:70:41:90:3e:18:ac:4d:0a:02:cf:1f:25:fa:3e:9b:82:e5:
39:30:c0:11:1b:d3:b7:45:a9:01:b5:88:f8:f4:d4:19:8d:91:
01:03:45:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:45:19 2026 by rpki-client