Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/6FD074F64D8711F1A4EC49C2CE1D38B0.roa
File: 6FD074F64D8711F1A4EC49C2CE1D38B0.roa (raw, json)
Hash identifier: zxcsbgaRBJy457Rvci+coU8tsua7eVRsu1+gKbjYR7U=
Subject key identifier: E7:2B:C7:F4:6F:8E:D5:FD:73:78:51:86:F3:FE:B4:49:93:3F:56:D2
Certificate issuer: /CN=F36F8F4FAF/serialNumber=DC17A0EC58652D31896123A65610C3A32046556B
Certificate serial: 06FD
Authority key identifier: DC:17:A0:EC:58:65:2D:31:89:61:23:A6:56:10:C3:A3:20:46:55:6B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/3Beg7FhlLTGJYSOmVhDDoyBGVWs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/6FD074F64D8711F1A4EC49C2CE1D38B0.roa
Signing time: Mon 11 May 2026 22:19:12 +0000
ROA not before: Tue 12 May 2026 22:19:06 +0000
ROA not after: Mon 12 May 2031 22:19:06 +0000
asID: 21003
IP address blocks: 2c0f:fb10:600::/48 maxlen: 48
2c0f:fb10:601::/48 maxlen: 48
2c0f:fb10:602::/48 maxlen: 48
2c0f:fb10:603::/48 maxlen: 48
2c0f:fb10:604::/48 maxlen: 48
2c0f:fb10:605::/48 maxlen: 48
2c0f:fb10:606::/48 maxlen: 48
2c0f:fb10:607::/48 maxlen: 48
2c0f:fb10:608::/48 maxlen: 48
2c0f:fb10:609::/48 maxlen: 48
2c0f:fb10:60a::/48 maxlen: 48
2c0f:fb10:60b::/48 maxlen: 48
2c0f:fb10:60c::/48 maxlen: 48
2c0f:fb10:60d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/3Beg7FhlLTGJYSOmVhDDoyBGVWs.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/3Beg7FhlLTGJYSOmVhDDoyBGVWs.mft
rsync://rpki.afrinic.net/repository/afrinic/3Beg7FhlLTGJYSOmVhDDoyBGVWs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 14 May 2026 10:38:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1789 (0x6fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F8F4FAF, serialNumber=DC17A0EC58652D31896123A65610C3A32046556B
Validity
Not Before: May 12 22:19:06 2026 GMT
Not After : May 12 22:19:06 2031 GMT
Subject: CN=6a0255e0-fc7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4f:75:aa:cd:b8:ba:22:c2:f1:6b:47:21:62:
0f:d1:fc:41:ec:d9:e3:97:57:f8:34:f9:21:3e:d4:
1c:bc:b5:0d:d4:e0:8b:03:c9:8f:85:f2:8b:5b:9a:
e3:0c:71:6b:d3:02:49:cf:f4:d7:ff:90:b5:49:bc:
9e:77:95:83:94:b4:2a:74:21:99:32:b9:8f:63:d3:
d9:03:c0:23:53:5f:57:47:f7:26:47:13:ac:37:70:
39:3a:04:15:b8:8e:2a:24:73:98:ca:72:ee:a6:5a:
30:7b:f0:01:22:2b:1a:f6:b7:5d:6e:3e:04:ee:fb:
38:a5:8f:de:4a:c8:f1:9a:67:6e:3c:e4:16:c0:64:
d9:85:de:7e:36:f1:e4:86:c9:cd:01:17:95:f2:0a:
d4:e1:f8:02:0e:71:83:75:b9:90:8b:bd:c3:fe:fd:
f5:30:c9:0c:5b:b5:bf:e9:83:2f:c3:32:34:26:ab:
32:1a:c7:2e:66:02:db:11:b7:e3:08:60:34:07:5e:
b8:d0:9b:6b:25:91:dd:fa:be:12:ce:3f:a9:8b:b8:
d1:e1:62:83:46:94:15:79:f6:5f:9c:23:4d:2b:e9:
d5:4b:2d:fb:ab:de:2d:6b:20:db:0f:f3:a9:a5:8e:
60:67:c5:dc:53:52:24:4e:7c:69:ee:1c:02:6b:9d:
8f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:2B:C7:F4:6F:8E:D5:FD:73:78:51:86:F3:FE:B4:49:93:3F:56:D2
X509v3 Authority Key Identifier:
keyid:DC:17:A0:EC:58:65:2D:31:89:61:23:A6:56:10:C3:A3:20:46:55:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/3Beg7FhlLTGJYSOmVhDDoyBGVWs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3Beg7FhlLTGJYSOmVhDDoyBGVWs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/6FD074F64D8711F1A4EC49C2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:fb10:600::-2c0f:fb10:60d:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
38:e4:9c:f3:b1:b0:c5:f3:fa:6c:09:69:4c:7a:4c:a5:91:99:
38:3a:d5:9a:9b:80:10:f1:98:9d:53:c6:e7:c7:8a:6e:05:87:
d2:c7:7c:1c:e0:f4:eb:16:53:66:fe:fd:00:9d:c0:7e:0a:34:
a9:72:dc:09:a8:0e:3b:f2:1b:57:3d:fc:de:df:8b:5c:88:cc:
3c:d9:04:0d:3d:dd:4f:6b:73:26:db:9e:d3:55:60:56:1b:5d:
97:f1:ec:b5:70:9d:52:9c:57:98:e2:88:fc:70:cd:1b:97:2b:
71:0a:4f:54:76:d0:2e:05:bc:b6:32:7a:a2:68:7b:f2:c9:17:
17:1e:dc:77:f8:24:e5:5d:bd:aa:6e:6c:22:ec:7a:c0:84:53:
d1:37:f2:3d:fa:02:6f:2a:d1:2b:58:ab:cc:cc:6d:33:82:aa:
fa:42:ac:6c:b8:f7:16:c7:52:85:d0:52:3d:6b:98:46:a8:0b:
73:56:5f:36:18:f0:ec:df:b3:af:d3:4b:a7:42:76:53:5d:cc:
56:cb:9f:b4:06:d9:95:e4:47:9e:cf:2f:02:f3:c9:36:c7:0f:
10:94:7a:8b:66:e7:7b:86:7f:b3:ec:59:d9:56:c8:44:9f:29:
4b:cb:c0:2a:f0:04:2e:b1:84:39:74:63:1c:27:e2:ca:6b:ed:
b9:08:96:e5
-----BEGIN CERTIFICATE-----
MIIFkDCCBHigAwIBAgICBv0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RjhGNEZBRjExMC8GA1UEBRMoREMxN0EwRUM1ODY1MkQzMTg5NjEyM0E2NTYxMEMz
QTMyMDQ2NTU2QjAeFw0yNjA1MTIyMjE5MDZaFw0zMTA1MTIyMjE5MDZaMBgxFjAU
BgNVBAMTDTZhMDI1NWUwLWZjN2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDMT3Wqzbi6IsLxa0chYg/R/EHs2eOXV/g0+SE+1By8tQ3U4IsDyY+F8otb
muMMcWvTAknP9Nf/kLVJvJ53lYOUtCp0IZkyuY9j09kDwCNTX1dH9yZHE6w3cDk6
BBW4jiokc5jKcu6mWjB78AEiKxr2t11uPgTu+zilj95KyPGaZ2485BbAZNmF3n42
8eSGyc0BF5XyCtTh+AIOcYN1uZCLvcP+/fUwyQxbtb/pgy/DMjQmqzIaxy5mAtsR
t+MIYDQHXrjQm2slkd36vhLOP6mLuNHhYoNGlBV59l+cI00r6dVLLfur3i1rINsP
86mljmBnxdxTUiROfGnuHAJrnY+7AgMBAAGjggKyMIICrjAdBgNVHQ4EFgQU5yvH
9G+O1f1zeFGG8/60SZM/VtIwHwYDVR0jBBgwFoAU3Beg7FhlLTGJYSOmVhDDoyBG
VWswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkY4RjRGLzhBMzc3QkJDMkE3NTExRUM5MDgxNzU1OUQ4QTAxNENFLzNCZWc3
RmhsTFRHSllTT21WaEREb3lCR1ZXcy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzNCZWc3RmhsTFRHSllTT21WaEREb3lCR1ZXcy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkY4RjRGLzhBMzc3QkJDMkE3NTExRUM5MDgxNzU1OUQ4
QTAxNENFLzZGRDA3NEY2NEQ4NzExRjFBNEVDNDlDMkNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwLAYIKwYBBQUHAQcBAf8EHTAbMBkEAgACMBMwEQMGASwP+xAGAwcBLA/7EAYM
MA0GCSqGSIb3DQEBCwUAA4IBAQA45JzzsbDF8/psCWlMekylkZk4OtWam4AQ8Zid
U8bnx4puBYfSx3wc4PTrFlNm/v0AncB+CjSpctwJqA478htXPfze34tciMw82QQN
Pd1Pa3Mm257TVWBWG12X8ey1cJ1SnFeY4oj8cM0blytxCk9UdtAuBby2MnqiaHvy
yRcXHtx3+CTlXb2qbmwi7HrAhFPRN/I9+gJvKtErWKvMzG0zgqr6QqxsuPcWx1KF
0FI9a5hGqAtzVl82GPDs37Ov00unQnZTXcxWy5+0BtmV5Eeezy8C88k2xw8QlHqL
Zud7hn+z7FnZVshEnylLy8Aq8AQusYQ5dGMcJ+LKa+25CJbl
-----END CERTIFICATE-----
Generated at Wed May 13 03:17:20 2026 by rpki-client