Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A6479/AB9C3F72734611F09CF009B9DAE4EC9C/B177409E197D11F1891FCAB1DAE4EC9C.roa
File: B177409E197D11F1891FCAB1DAE4EC9C.roa (raw, json)
Hash identifier: oJM5riwTTw47G+aPvRoCqTaKUBHOKzqcOeNm+3lWbog=
Subject key identifier: 56:4E:DE:A9:27:EE:BF:0D:3C:50:78:CF:FC:BC:FB:B7:0F:D5:6B:B2
Certificate issuer: /CN=F36A6479AF/serialNumber=7153C5AF5226196F3210CCF067BFB03979ABE16A
Certificate serial: F1
Authority key identifier: 71:53:C5:AF:52:26:19:6F:32:10:CC:F0:67:BF:B0:39:79:AB:E1:6A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/cVPFr1ImGW8yEMzwZ7-wOXmr4Wo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A6479/AB9C3F72734611F09CF009B9DAE4EC9C/B177409E197D11F1891FCAB1DAE4EC9C.roa
Signing time: Fri 06 Mar 2026 16:58:27 +0000
ROA not before: Fri 06 Mar 2026 16:58:21 +0000
ROA not after: Fri 05 Mar 2027 16:58:21 +0000
asID: 6517
IP address blocks: 2c0f:2cc0:500a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A6479/AB9C3F72734611F09CF009B9DAE4EC9C/cVPFr1ImGW8yEMzwZ7-wOXmr4Wo.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A6479/AB9C3F72734611F09CF009B9DAE4EC9C/cVPFr1ImGW8yEMzwZ7-wOXmr4Wo.mft
rsync://rpki.afrinic.net/repository/afrinic/cVPFr1ImGW8yEMzwZ7-wOXmr4Wo.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 241 (0xf1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A6479AF, serialNumber=7153C5AF5226196F3210CCF067BFB03979ABE16A
Validity
Not Before: Mar 6 16:58:21 2026 GMT
Not After : Mar 5 16:58:21 2027 GMT
Subject: CN=69ab07b3-05b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:59:ae:d6:8e:df:e4:3b:81:99:18:3c:ed:68:
b9:9e:e4:51:8f:60:64:6f:33:d2:92:ea:9d:cc:66:
a8:87:4d:76:1a:57:bc:6c:fd:0e:a9:13:23:e2:5a:
7e:75:55:70:85:42:21:29:38:3e:ca:10:de:98:c7:
0f:f9:e8:46:0a:a7:51:7b:7c:c9:c9:f6:e2:7f:65:
4f:36:a2:0d:c9:01:7a:d8:22:11:31:e4:85:8e:76:
15:2b:26:ec:d1:dd:a9:2a:4a:e2:17:19:4d:e1:47:
64:82:a2:45:c8:53:db:e8:7b:55:91:c3:ab:6a:04:
c3:97:66:00:d6:b0:1f:cf:b8:3a:d5:ed:3b:a4:2b:
b4:5b:ff:19:98:f0:40:0c:4b:ea:3c:c3:b9:c8:ab:
89:f8:8a:d1:02:72:33:7d:ec:09:83:4e:45:5e:b6:
f7:33:2f:82:c8:22:c4:14:0e:5f:b7:60:11:90:75:
95:2d:76:28:4c:60:aa:43:f5:c8:80:4c:1b:a6:fc:
10:72:16:f8:75:c6:9c:2c:2e:80:f9:26:e4:9d:f6:
47:ef:6f:90:2d:30:a5:05:d1:2b:99:90:89:bb:8c:
64:00:3c:01:69:2a:10:34:d4:87:db:6f:cd:e1:54:
fa:31:80:37:be:e9:f2:aa:19:19:00:ee:31:33:72:
d2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:4E:DE:A9:27:EE:BF:0D:3C:50:78:CF:FC:BC:FB:B7:0F:D5:6B:B2
X509v3 Authority Key Identifier:
keyid:71:53:C5:AF:52:26:19:6F:32:10:CC:F0:67:BF:B0:39:79:AB:E1:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6479/AB9C3F72734611F09CF009B9DAE4EC9C/cVPFr1ImGW8yEMzwZ7-wOXmr4Wo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/cVPFr1ImGW8yEMzwZ7-wOXmr4Wo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6479/AB9C3F72734611F09CF009B9DAE4EC9C/B177409E197D11F1891FCAB1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:2cc0:500a::/48
Signature Algorithm: sha256WithRSAEncryption
1b:ec:27:c8:6f:3e:22:75:63:43:11:23:1c:5f:a6:46:c5:d2:
51:5b:d5:e5:4a:72:7f:f0:2a:11:96:8d:3e:a1:1d:1d:13:2a:
18:77:f3:aa:96:fe:43:5b:dc:07:7b:c8:88:00:89:47:4e:f4:
e3:46:01:16:bd:7c:3f:ea:85:4d:e1:d2:1b:53:15:20:15:b2:
5f:67:20:0a:ef:2b:1b:b9:9d:e0:fb:5e:9f:e5:06:bf:4d:76:
c1:8d:cb:dc:58:49:22:98:b5:44:aa:71:77:e8:f2:f2:b4:d0:
ce:dd:68:47:0c:5e:b5:aa:fe:9c:81:05:df:f1:78:56:4c:5f:
20:92:38:cf:04:25:78:47:09:9f:ae:26:eb:2a:6f:20:56:2d:
d0:c4:6b:c6:e5:aa:c8:33:a2:21:ed:78:26:97:9e:56:87:50:
48:f4:34:be:18:f6:99:f6:ea:0d:7b:b4:0d:e8:dd:b6:1f:40:
cf:ca:db:05:7f:b1:4e:5a:49:75:dd:de:e4:b5:6a:fd:6f:80:
d3:08:3a:28:c4:11:da:7b:da:23:88:ca:c6:6e:42:e5:cb:e0:
66:0b:a2:65:43:d5:19:62:17:15:f0:f4:8e:e4:ed:d7:37:c3:
97:3b:62:c6:d2:ed:94:82:b2:70:4f:62:ba:55:dd:7c:cc:b9:
06:9a:c4:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:43:42 2026 by rpki-client