Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/CF2B6C9C4DED11F18455B9BCCE1D38B0.roa
File: CF2B6C9C4DED11F18455B9BCCE1D38B0.roa (raw, json)
Hash identifier: zO7OG6eEHPwr6j/HSsWNv1nMchvBsohwY9RpbxKAxGU=
Subject key identifier: 63:7A:DF:9D:E5:1A:8F:52:FF:19:DB:23:B9:4B:5F:0F:4D:76:F2:CD
Certificate issuer: /CN=F36F8F4FAF/serialNumber=DC17A0EC58652D31896123A65610C3A32046556B
Certificate serial: 0700
Authority key identifier: DC:17:A0:EC:58:65:2D:31:89:61:23:A6:56:10:C3:A3:20:46:55:6B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/3Beg7FhlLTGJYSOmVhDDoyBGVWs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/CF2B6C9C4DED11F18455B9BCCE1D38B0.roa
Signing time: Tue 12 May 2026 10:32:01 +0000
ROA not before: Tue 12 May 2026 10:31:55 +0000
ROA not after: Mon 12 May 2031 10:31:55 +0000
asID: 21003
IP address blocks: 2c0f:fb10:800::/48 maxlen: 48
2c0f:fb10:801::/48 maxlen: 48
2c0f:fb10:802::/48 maxlen: 48
2c0f:fb10:803::/48 maxlen: 48
2c0f:fb10:804::/48 maxlen: 48
2c0f:fb10:805::/48 maxlen: 48
2c0f:fb10:806::/48 maxlen: 48
2c0f:fb10:807::/48 maxlen: 48
2c0f:fb10:808::/48 maxlen: 48
2c0f:fb10:809::/48 maxlen: 48
2c0f:fb10:80a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/3Beg7FhlLTGJYSOmVhDDoyBGVWs.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/3Beg7FhlLTGJYSOmVhDDoyBGVWs.mft
rsync://rpki.afrinic.net/repository/afrinic/3Beg7FhlLTGJYSOmVhDDoyBGVWs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 14 May 2026 10:38:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1792 (0x700)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F8F4FAF, serialNumber=DC17A0EC58652D31896123A65610C3A32046556B
Validity
Not Before: May 12 10:31:55 2026 GMT
Not After : May 12 10:31:55 2031 GMT
Subject: CN=6a0301a1-1cd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:88:ed:82:98:ba:dd:94:72:52:08:c0:8c:c4:
7e:93:fc:8d:2c:6a:80:78:fe:79:9d:f1:ee:c4:a6:
59:c5:77:a9:27:02:16:e1:ea:f1:59:d5:34:5f:8f:
26:e2:dd:c7:9d:4d:9c:c1:0b:dd:cd:8e:eb:56:41:
67:8c:59:99:bc:91:e4:61:7d:f7:e4:49:80:34:1a:
5b:2d:44:22:56:0d:7d:35:c4:25:1a:43:f4:98:7d:
f2:8a:d1:55:7d:2d:99:88:a5:84:03:6c:8a:39:7c:
d3:7a:72:5a:12:e7:46:e5:6a:9a:ce:b7:da:5f:36:
23:64:66:2e:4e:b1:05:e9:9d:2f:48:58:d3:2f:3b:
21:3e:6c:3c:78:da:b2:64:a4:8c:bf:38:4f:27:70:
a6:a1:76:4d:42:4e:79:a0:10:c1:ef:1e:4e:53:1d:
73:a7:bd:cb:92:d1:b4:aa:8c:46:49:bf:27:a0:96:
4d:bb:ee:77:51:35:4f:65:de:3d:70:0f:e9:ee:85:
49:39:b2:25:fe:8f:70:50:d3:0e:a9:a6:e1:ba:a9:
13:e8:c6:54:3b:03:54:8f:f3:7f:30:1c:80:c4:44:
75:94:c4:91:60:6c:c2:87:80:d3:c6:d8:f0:65:79:
e9:c7:9a:0d:0b:5b:19:b4:46:c5:a1:ba:8d:98:30:
ae:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:7A:DF:9D:E5:1A:8F:52:FF:19:DB:23:B9:4B:5F:0F:4D:76:F2:CD
X509v3 Authority Key Identifier:
keyid:DC:17:A0:EC:58:65:2D:31:89:61:23:A6:56:10:C3:A3:20:46:55:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/3Beg7FhlLTGJYSOmVhDDoyBGVWs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3Beg7FhlLTGJYSOmVhDDoyBGVWs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/CF2B6C9C4DED11F18455B9BCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:fb10:800::-2c0f:fb10:80a:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
61:8c:a1:ba:af:3e:3a:f5:9c:19:77:07:d0:c7:a0:e0:83:ba:
ce:a2:68:a0:68:85:89:43:25:e1:bd:b3:f8:06:18:05:dd:94:
03:1a:5f:72:b0:49:68:64:63:d4:04:80:21:47:b7:89:fd:23:
11:f3:02:7d:03:fc:14:a4:c0:b4:27:f7:63:7c:c0:4a:f9:e2:
f1:11:0a:ea:b5:4f:9e:e8:b5:55:ea:f5:a6:c1:dc:79:f5:1a:
3f:ca:f9:f7:bd:51:16:20:8a:70:67:ca:f2:7e:0d:1d:42:a5:
27:66:a0:07:42:63:da:83:0f:af:13:b6:de:64:0b:42:39:bf:
20:bf:ea:4e:a6:2d:5b:96:5b:b0:3f:7c:f3:51:c3:19:5d:72:
b7:2d:54:89:38:85:bb:76:ba:59:c0:55:e3:5e:ad:85:e7:aa:
79:e3:a4:9c:37:39:22:8d:c2:51:0d:f7:2a:34:b4:74:15:4a:
58:03:cf:1d:0a:81:00:22:99:0e:25:e0:41:69:a6:0f:df:a7:
6d:84:5b:c2:04:b7:bf:4a:9a:7c:ec:d6:e7:5c:f8:5b:85:39:
8f:c1:54:a4:52:e0:0d:87:97:d6:0b:20:0e:30:0d:03:c5:b8:
93:69:e7:c4:5e:e3:8d:be:aa:29:c7:e0:18:6d:96:02:06:aa:
61:ba:41:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:17:15 2026 by rpki-client