Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BF1B7/71F44CFCEE9F11E8946A735DF8AEA228/3B78D754847B11F1A500B6B7CE1D38B0.roa
File: 3B78D754847B11F1A500B6B7CE1D38B0.roa (raw, json)
Hash identifier: pvmPFAS+cuIJr6wNm8N+udknD9ftXiZh97mVDPera3k=
Subject key identifier: 92:E6:D3:88:57:A5:CD:5A:F2:89:1F:C3:EA:4D:BF:51:0C:A9:46:B2
Certificate issuer: /CN=F36BF1B7AF/serialNumber=56D926DFE14B5414EAB59375D94CF01FA548D316
Certificate serial: 0B31
Authority key identifier: 56:D9:26:DF:E1:4B:54:14:EA:B5:93:75:D9:4C:F0:1F:A5:48:D3:16
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Vtkm3-FLVBTqtZN12UzwH6VI0xY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BF1B7/71F44CFCEE9F11E8946A735DF8AEA228/3B78D754847B11F1A500B6B7CE1D38B0.roa
Signing time: Mon 20 Jul 2026 20:40:24 +0000
ROA not before: Mon 20 Jul 2026 20:40:20 +0000
ROA not after: Fri 18 Jul 2036 20:40:20 +0000
asID: 13335
IP address blocks: 2c0f:f248::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36BF1B7/71F44CFCEE9F11E8946A735DF8AEA228/Vtkm3-FLVBTqtZN12UzwH6VI0xY.crl
rsync://rpki.afrinic.net/repository/member_repository/F36BF1B7/71F44CFCEE9F11E8946A735DF8AEA228/Vtkm3-FLVBTqtZN12UzwH6VI0xY.mft
rsync://rpki.afrinic.net/repository/afrinic/Vtkm3-FLVBTqtZN12UzwH6VI0xY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 01:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2865 (0xb31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BF1B7AF, serialNumber=56D926DFE14B5414EAB59375D94CF01FA548D316
Validity
Not Before: Jul 20 20:40:20 2026 GMT
Not After : Jul 18 20:40:20 2036 GMT
Subject: CN=6a5e87b8-8ebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:43:e9:8d:13:ee:f3:4d:75:73:fa:f1:b7:4b:
d4:9b:19:82:0d:3d:ac:26:c3:a9:8b:47:28:9b:d6:
a6:04:85:91:8f:15:eb:71:01:8e:bd:45:e2:58:77:
a7:d0:43:8e:bb:6a:0a:44:05:eb:7e:59:09:3c:0b:
40:ed:32:18:db:78:93:2a:87:31:d4:51:42:ac:75:
e2:05:25:3d:10:aa:9a:88:60:f6:54:b4:8d:48:1c:
11:b9:2e:e1:51:c4:d4:1e:de:c0:9a:ed:ca:99:c1:
9f:ff:f4:8b:96:d9:94:7a:de:cb:73:9e:aa:51:1f:
26:4e:87:0c:7b:1e:c7:11:14:43:c0:d9:09:1a:a9:
ea:ba:cb:f6:a5:5a:ac:a9:e8:43:df:3e:76:df:fb:
ca:02:87:41:cf:96:82:aa:04:87:24:41:9c:bf:3d:
ab:ab:f5:47:5d:f2:89:b6:e2:18:0f:bf:01:d3:9e:
d5:2f:d4:8f:85:01:36:f1:25:27:20:13:46:c9:5f:
c8:ee:b6:08:b4:b6:26:ef:6d:de:ba:ed:05:81:ff:
a5:7d:f3:53:18:3c:6e:f1:58:f1:7a:53:0c:0b:86:
68:91:57:51:8a:26:25:da:d2:76:d1:83:06:8a:19:
bf:07:5c:07:45:2e:1d:14:8d:ed:a5:b6:d9:fa:ea:
b8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:E6:D3:88:57:A5:CD:5A:F2:89:1F:C3:EA:4D:BF:51:0C:A9:46:B2
X509v3 Authority Key Identifier:
keyid:56:D9:26:DF:E1:4B:54:14:EA:B5:93:75:D9:4C:F0:1F:A5:48:D3:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BF1B7/71F44CFCEE9F11E8946A735DF8AEA228/Vtkm3-FLVBTqtZN12UzwH6VI0xY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Vtkm3-FLVBTqtZN12UzwH6VI0xY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BF1B7/71F44CFCEE9F11E8946A735DF8AEA228/3B78D754847B11F1A500B6B7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:f248::/32
Signature Algorithm: sha256WithRSAEncryption
4d:ee:f3:37:37:56:18:e2:4a:82:71:8e:4c:ea:5d:23:d7:8a:
01:7e:04:75:7f:20:b9:90:12:b7:3f:ef:be:1b:ff:37:3b:8e:
c2:55:f5:ca:e6:e3:47:9e:3a:30:d2:15:8d:b3:55:07:c3:80:
fd:45:13:e2:d0:b5:f7:3d:ac:fa:01:22:bb:6a:c1:4a:0e:35:
23:0e:ef:3d:92:5a:54:74:65:d5:97:32:57:d7:88:44:40:e2:
67:36:96:70:64:db:4c:eb:8a:2c:68:66:0e:74:a0:0d:6c:4d:
9f:a8:a6:5f:a8:fd:d4:99:91:09:17:cb:1e:13:15:5d:c7:ee:
f8:39:4b:05:10:f9:a5:7f:14:f6:b8:f9:47:13:4d:e5:39:50:
42:df:24:be:09:d3:f5:f7:7d:0d:09:95:7d:05:c8:58:b5:49:
fe:fc:7f:cd:dc:99:69:bc:e3:d7:0f:c3:f6:4a:54:8c:4d:f5:
62:a2:93:cf:7c:e3:a1:3b:ab:e3:c5:cc:89:ea:d6:21:24:c4:
a4:44:63:68:f1:8c:a9:76:35:a5:8f:b4:00:50:87:f9:13:de:
1b:7b:75:44:b5:13:7c:cf:72:d1:50:db:ad:61:d9:e5:fa:67:
0b:c8:7c:a2:86:cc:4a:61:29:21:69:31:f9:ad:d8:bb:5d:94:
98:50:b9:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:05:28 2026 by rpki-client