Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/C66E300C4DEE11F19B3077C4CE1D38B0.roa
File: C66E300C4DEE11F19B3077C4CE1D38B0.roa (raw, json)
Hash identifier: 16rkfSs+t576hxwFyafItM6LVAcNfwbY0/MmDqPh9yE=
Subject key identifier: 30:8D:04:07:E5:F2:2F:24:62:6A:FA:BF:85:5E:16:57:5C:14:9F:6B
Certificate issuer: /CN=F36F8F4FAF/serialNumber=DC17A0EC58652D31896123A65610C3A32046556B
Certificate serial: 0702
Authority key identifier: DC:17:A0:EC:58:65:2D:31:89:61:23:A6:56:10:C3:A3:20:46:55:6B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/3Beg7FhlLTGJYSOmVhDDoyBGVWs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/C66E300C4DEE11F19B3077C4CE1D38B0.roa
Signing time: Tue 12 May 2026 10:38:55 +0000
ROA not before: Tue 12 May 2026 10:38:51 +0000
ROA not after: Mon 12 May 2031 10:38:51 +0000
asID: 21003
IP address blocks: 2c0f:fb10:a00::/48 maxlen: 48
2c0f:fb10:a01::/48 maxlen: 48
2c0f:fb10:a02::/48 maxlen: 48
2c0f:fb10:a03::/48 maxlen: 48
2c0f:fb10:a04::/48 maxlen: 48
2c0f:fb10:a05::/48 maxlen: 48
2c0f:fb10:a06::/48 maxlen: 48
2c0f:fb10:a07::/48 maxlen: 48
2c0f:fb10:a08::/48 maxlen: 48
2c0f:fb10:a09::/48 maxlen: 48
2c0f:fb10:a0a::/48 maxlen: 48
2c0f:fb10:a0b::/48 maxlen: 48
2c0f:fb10:a0c::/48 maxlen: 48
2c0f:fb10:a0d::/48 maxlen: 48
2c0f:fb10:a0e::/48 maxlen: 48
2c0f:fb10:a0f::/48 maxlen: 48
2c0f:fb10:a10::/48 maxlen: 48
2c0f:fb10:a11::/48 maxlen: 48
2c0f:fb10:a12::/48 maxlen: 48
2c0f:fb10:a13::/48 maxlen: 48
2c0f:fb10:a14::/48 maxlen: 48
2c0f:fb10:a15::/48 maxlen: 48
2c0f:fb10:a16::/48 maxlen: 48
2c0f:fb10:a17::/48 maxlen: 48
2c0f:fb10:a18::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/3Beg7FhlLTGJYSOmVhDDoyBGVWs.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/3Beg7FhlLTGJYSOmVhDDoyBGVWs.mft
rsync://rpki.afrinic.net/repository/afrinic/3Beg7FhlLTGJYSOmVhDDoyBGVWs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 14 May 2026 10:38:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1794 (0x702)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F8F4FAF, serialNumber=DC17A0EC58652D31896123A65610C3A32046556B
Validity
Not Before: May 12 10:38:51 2026 GMT
Not After : May 12 10:38:51 2031 GMT
Subject: CN=6a03033f-0a13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:07:cf:5c:1f:52:0f:59:48:26:43:5d:e7:c9:
c4:7a:5e:4e:f0:bb:18:dd:74:97:23:e5:5b:bf:47:
99:95:30:94:60:4d:90:6c:c1:6a:63:a8:93:09:a4:
f8:dc:88:2b:ae:2f:f2:8a:f6:9e:1b:e3:30:34:18:
25:01:ba:47:0c:8d:ce:6e:0a:89:fe:bb:8d:36:a4:
93:9c:44:10:e9:bc:1e:2c:3e:b1:d3:18:ab:e6:90:
a0:05:c6:40:a2:44:d8:4e:dc:73:50:1e:f7:e7:09:
1e:f9:ed:a8:d1:93:65:6b:d7:e5:de:88:45:14:b0:
1d:2a:f1:f5:54:d8:20:d6:70:ac:85:cf:bd:cb:21:
99:81:89:29:15:4a:97:dd:01:e7:05:8b:83:98:ed:
fc:d6:dc:65:ee:33:b9:e1:28:22:a0:38:30:b6:64:
05:53:43:ae:d1:1b:e8:c4:a2:ca:f9:e8:4a:28:9e:
59:83:d3:27:4c:97:cd:f9:22:10:f1:66:3f:b5:24:
e3:87:8c:6e:01:e1:ce:6a:3d:f3:df:25:74:03:32:
4c:88:11:58:06:b6:b2:b9:3e:07:c9:12:88:75:1b:
cd:38:0f:1c:1b:6a:24:d8:01:fb:fd:b7:1b:b7:1d:
5a:33:18:64:15:ad:83:c6:61:d7:dd:1d:bc:32:dd:
af:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:8D:04:07:E5:F2:2F:24:62:6A:FA:BF:85:5E:16:57:5C:14:9F:6B
X509v3 Authority Key Identifier:
keyid:DC:17:A0:EC:58:65:2D:31:89:61:23:A6:56:10:C3:A3:20:46:55:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/3Beg7FhlLTGJYSOmVhDDoyBGVWs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3Beg7FhlLTGJYSOmVhDDoyBGVWs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/C66E300C4DEE11F19B3077C4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:fb10:a00::-2c0f:fb10:a18:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
95:86:7c:7c:08:ba:c1:33:9a:c7:e4:16:7b:9d:38:d9:e8:a2:
91:25:44:e4:33:99:48:f5:76:19:86:34:48:dd:5c:3a:0d:22:
0d:b7:31:14:9b:90:ed:a4:ae:20:36:fd:00:5f:5e:0f:65:99:
dc:34:3d:72:d2:f0:3c:6c:2a:0b:f7:d9:ed:f9:e1:08:09:99:
26:7e:ff:99:b9:af:16:7e:e0:99:90:f6:71:eb:9d:31:4e:4c:
61:9c:f3:d7:60:52:ca:95:dd:42:d1:fc:3f:32:97:6f:4f:37:
f4:26:6a:2c:d6:3b:0f:c6:36:92:ed:ff:15:d0:69:f8:9d:c6:
e6:7b:9e:70:87:fd:c0:23:b7:09:3e:a3:60:df:7e:09:4c:23:
5b:fe:4e:8a:25:52:08:4a:b0:99:1f:6f:15:6c:58:ea:8c:46:
46:56:01:aa:46:cf:14:d6:55:b1:ac:83:7e:70:7f:79:c2:22:
17:26:68:f5:97:dc:e6:6e:e4:f0:f2:9f:2d:c7:2c:85:9b:25:
df:85:8a:92:c9:6e:67:4a:87:ce:aa:f7:20:a9:f5:35:6b:9e:
1e:ac:6b:3c:83:18:52:b9:fa:1f:0d:09:e2:7f:a4:50:62:04:
64:33:ae:f6:65:c6:5d:49:35:d8:1a:5d:24:be:ee:54:e3:16:
84:83:23:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:17:11 2026 by rpki-client