Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DA6FB/42AEAED8FE6011EF8424817E762E951A/186A261E6EE611F19A57FD00CF1D38B0.roa
File: 186A261E6EE611F19A57FD00CF1D38B0.roa (raw, json)
Hash identifier: xAWYoSxpWYZMxcb1kJT35Bivi41+IMGlrVrYofRUoZM=
Subject key identifier: A3:4A:79:A9:7D:AA:88:16:B6:40:97:94:30:D9:12:DD:47:9D:92:46
Certificate issuer: /CN=F36DA6FBAF/serialNumber=4CDC3B3D6D06081120DBD6EC236351C75EF64CCC
Certificate serial: 01EB
Authority key identifier: 4C:DC:3B:3D:6D:06:08:11:20:DB:D6:EC:23:63:51:C7:5E:F6:4C:CC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/TNw7PW0GCBEg29bsI2NRx172TMw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DA6FB/42AEAED8FE6011EF8424817E762E951A/186A261E6EE611F19A57FD00CF1D38B0.roa
Signing time: Tue 23 Jun 2026 09:29:56 +0000
ROA not before: Tue 23 Jun 2026 09:29:52 +0000
ROA not after: Sun 30 Jun 2030 09:29:52 +0000
asID: 329393
IP address blocks: 2c0f:17c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DA6FB/42AEAED8FE6011EF8424817E762E951A/TNw7PW0GCBEg29bsI2NRx172TMw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DA6FB/42AEAED8FE6011EF8424817E762E951A/TNw7PW0GCBEg29bsI2NRx172TMw.mft
rsync://rpki.afrinic.net/repository/afrinic/TNw7PW0GCBEg29bsI2NRx172TMw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 491 (0x1eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DA6FBAF, serialNumber=4CDC3B3D6D06081120DBD6EC236351C75EF64CCC
Validity
Not Before: Jun 23 09:29:52 2026 GMT
Not After : Jun 30 09:29:52 2030 GMT
Subject: CN=6a3a5214-d983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:77:07:5f:59:8f:c0:a8:af:e1:de:7d:9c:f4:
cb:8a:e6:3e:73:a2:56:d6:de:c6:dc:5e:c2:17:3a:
5c:52:95:6a:a9:66:5a:b6:b0:22:73:c9:7b:71:aa:
a7:17:e9:fd:07:0e:03:52:83:34:c8:66:d9:a4:d8:
0c:7a:c3:07:29:f4:40:d3:5a:c4:92:d9:b8:02:84:
34:70:30:82:76:0e:c3:af:a9:2b:4b:fe:42:f9:a7:
3e:83:b8:8a:38:cf:e8:50:df:42:04:f9:39:45:f5:
4c:3f:86:29:8c:2a:c7:d1:86:76:4f:3c:98:13:6a:
e0:fa:8e:1a:22:0e:20:e8:73:fc:f1:28:3e:83:da:
26:ee:37:b7:62:8a:21:97:3c:c7:03:51:6c:9c:f0:
1c:d1:da:32:10:88:48:d8:7f:a2:d5:16:10:d4:c6:
27:b5:4d:10:69:22:24:a0:1a:1b:85:37:17:6c:05:
7c:fc:2c:1f:be:4c:9f:da:e0:bc:1f:f3:ed:0b:ba:
66:e9:a8:9c:64:d4:ae:f6:64:c7:c6:f7:ac:9f:54:
38:8c:64:22:69:8e:3e:45:6a:7c:4c:fe:be:02:03:
2b:f3:de:ad:5a:0d:65:33:17:7d:00:65:24:b9:00:
d1:a0:9e:35:30:78:60:75:15:ba:4c:d1:da:b2:0c:
8d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:4A:79:A9:7D:AA:88:16:B6:40:97:94:30:D9:12:DD:47:9D:92:46
X509v3 Authority Key Identifier:
keyid:4C:DC:3B:3D:6D:06:08:11:20:DB:D6:EC:23:63:51:C7:5E:F6:4C:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA6FB/42AEAED8FE6011EF8424817E762E951A/TNw7PW0GCBEg29bsI2NRx172TMw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/TNw7PW0GCBEg29bsI2NRx172TMw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA6FB/42AEAED8FE6011EF8424817E762E951A/186A261E6EE611F19A57FD00CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:17c0::/32
Signature Algorithm: sha256WithRSAEncryption
1f:86:7c:24:fb:d0:ab:5c:b0:35:d9:5b:a6:8d:9e:71:af:46:
6d:96:66:3b:91:5e:80:29:ac:a5:03:b0:5f:78:21:93:41:23:
82:e1:e4:06:0d:89:79:f9:86:73:b1:76:23:00:7b:5e:27:a4:
c5:c6:61:80:ca:52:12:3d:82:4b:b8:c4:53:c0:21:82:61:03:
87:a9:02:3b:44:1e:80:6a:e5:35:dd:4f:6f:78:db:9a:1f:25:
26:92:85:2b:9f:80:70:52:95:11:e1:d1:2c:75:18:77:5c:ce:
3d:3d:6f:80:9d:70:ca:b3:3a:f2:40:75:dd:b2:05:06:0a:e1:
a7:b0:0b:5c:2a:e0:0d:ac:f3:3b:cc:e9:17:ef:9c:a2:2d:4c:
18:0e:bd:23:31:b9:bd:e1:9d:0c:78:24:e2:ac:f5:fb:cb:cb:
e3:5f:cb:3d:1a:f0:5a:cd:a4:b2:68:43:5f:29:e0:fc:86:1c:
70:82:cc:0a:59:3b:6c:2d:60:fd:c7:a6:49:90:bf:71:00:01:
8b:8c:b3:f0:f6:c0:ab:d0:09:52:e4:e3:d8:b3:d4:48:39:0a:
99:9a:25:eb:8e:73:b2:d5:45:c4:88:11:e3:68:c4:58:05:6d:
0f:86:29:51:2f:10:44:51:53:2c:14:7a:49:d9:39:f5:b2:35:
64:bf:bd:58
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAeswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
REE2RkJBRjExMC8GA1UEBRMoNENEQzNCM0Q2RDA2MDgxMTIwREJENkVDMjM2MzUx
Qzc1RUY2NENDQzAeFw0yNjA2MjMwOTI5NTJaFw0zMDA2MzAwOTI5NTJaMBgxFjAU
BgNVBAMTDTZhM2E1MjE0LWQ5ODMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCtdwdfWY/AqK/h3n2c9MuK5j5zolbW3sbcXsIXOlxSlWqpZlq2sCJzyXtx
qqcX6f0HDgNSgzTIZtmk2Ax6wwcp9EDTWsSS2bgChDRwMIJ2DsOvqStL/kL5pz6D
uIo4z+hQ30IE+TlF9Uw/himMKsfRhnZPPJgTauD6jhoiDiDoc/zxKD6D2ibuN7di
iiGXPMcDUWyc8BzR2jIQiEjYf6LVFhDUxie1TRBpIiSgGhuFNxdsBXz8LB++TJ/a
4Lwf8+0LumbpqJxk1K72ZMfG96yfVDiMZCJpjj5FanxM/r4CAyvz3q1aDWUzF30A
ZSS5ANGgnjUweGB1FbpM0dqyDI3PAgMBAAGjggKmMIICojAdBgNVHQ4EFgQUo0p5
qX2qiBa2QJeUMNkS3UedkkYwHwYDVR0jBBgwFoAUTNw7PW0GCBEg29bsI2NRx172
TMwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkRBNkZCLzQyQUVBRUQ4RkU2MDExRUY4NDI0ODE3RTc2MkU5NTFBL1ROdzdQ
VzBHQ0JFZzI5YnNJMk5SeDE3MlRNdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1ROdzdQVzBHQ0JFZzI5YnNJMk5SeDE3MlRNdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkRBNkZCLzQyQUVBRUQ4RkU2MDExRUY4NDI0ODE3RTc2
MkU5NTFBLzE4NkEyNjFFNkVFNjExRjE5QTU3RkQwMENGMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAsDxfAMA0GCSqGSIb3DQEB
CwUAA4IBAQAfhnwk+9CrXLA12VumjZ5xr0ZtlmY7kV6AKaylA7BfeCGTQSOC4eQG
DYl5+YZzsXYjAHteJ6TFxmGAylISPYJLuMRTwCGCYQOHqQI7RB6AauU13U9veNua
HyUmkoUrn4BwUpUR4dEsdRh3XM49PW+AnXDKszryQHXdsgUGCuGnsAtcKuANrPM7
zOkX75yiLUwYDr0jMbm94Z0MeCTirPX7y8vjX8s9GvBazaSyaENfKeD8hhxwgswK
WTtsLWD9x6ZJkL9xAAGLjLPw9sCr0AlS5OPYs9RIOQqZmiXrjnOy1UXEiBHjaMRY
BW0PhilRLxBEUVMsFHpJ2Tn1sjVkv71Y
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:26:49 2026 by rpki-client