Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/F5ED0DA04D7E11F1841FD20ECF1D38B0.roa
File: F5ED0DA04D7E11F1841FD20ECF1D38B0.roa (raw, json)
Hash identifier: oEUd1BdQ4h8SlMS9rr6IITgSdjGWARvpJYNAzue0L1Q=
Subject key identifier: C0:0D:EA:7B:3D:E1:9D:03:01:07:72:A0:2B:01:DD:38:E6:8B:82:79
Certificate issuer: /CN=F36F8F4FAF/serialNumber=DC17A0EC58652D31896123A65610C3A32046556B
Certificate serial: 06F7
Authority key identifier: DC:17:A0:EC:58:65:2D:31:89:61:23:A6:56:10:C3:A3:20:46:55:6B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/3Beg7FhlLTGJYSOmVhDDoyBGVWs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/F5ED0DA04D7E11F1841FD20ECF1D38B0.roa
Signing time: Mon 11 May 2026 21:18:31 +0000
ROA not before: Mon 11 May 2026 21:18:26 +0000
ROA not after: Sun 11 May 2031 21:18:26 +0000
asID: 21003
IP address blocks: 2c0f:fb10:9::/48 maxlen: 48
2c0f:fb10:a::/48 maxlen: 48
2c0f:fb10:b::/48 maxlen: 48
2c0f:fb10:c::/48 maxlen: 48
2c0f:fb10:d::/48 maxlen: 48
2c0f:fb10:e::/48 maxlen: 48
2c0f:fb10:f::/48 maxlen: 48
2c0f:fb10:10::/48 maxlen: 48
2c0f:fb10:11::/48 maxlen: 48
2c0f:fb10:12::/48 maxlen: 48
2c0f:fb10:13::/48 maxlen: 48
2c0f:fb10:14::/48 maxlen: 48
2c0f:fb10:15::/48 maxlen: 48
2c0f:fb10:16::/48 maxlen: 48
2c0f:fb10:17::/48 maxlen: 48
2c0f:fb10:18::/48 maxlen: 48
2c0f:fb10:19::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/3Beg7FhlLTGJYSOmVhDDoyBGVWs.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/3Beg7FhlLTGJYSOmVhDDoyBGVWs.mft
rsync://rpki.afrinic.net/repository/afrinic/3Beg7FhlLTGJYSOmVhDDoyBGVWs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 14 May 2026 10:38:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1783 (0x6f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F8F4FAF, serialNumber=DC17A0EC58652D31896123A65610C3A32046556B
Validity
Not Before: May 11 21:18:26 2026 GMT
Not After : May 11 21:18:26 2031 GMT
Subject: CN=6a0247a7-6aa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:83:9a:a1:9b:d3:0a:32:b3:8d:8b:b4:22:b4:
6b:cc:af:e8:9d:ca:45:28:db:ad:31:68:b0:5f:4b:
fb:7e:51:8c:30:16:2d:b8:e0:ba:21:ed:6c:dc:d7:
30:ba:7f:16:a5:59:07:59:89:64:2b:05:eb:27:e1:
92:80:da:26:e0:50:0f:28:02:37:3e:3b:8d:81:73:
54:d6:20:3b:2b:2e:21:6b:53:ee:f5:06:92:96:d6:
ea:d4:c3:15:37:e4:78:1a:50:2a:37:01:5a:19:a2:
2b:49:ad:54:29:0f:8d:bc:45:94:30:f7:ee:62:46:
f3:23:c8:cc:75:90:11:cf:0a:e5:f3:23:e3:3c:41:
e3:3c:c5:79:f5:ed:c6:fc:d5:d8:74:2a:a3:5b:3c:
f8:ab:8b:95:ab:7a:1d:06:e7:8b:b3:4c:e6:98:20:
c4:9a:10:6b:24:4e:40:1c:41:e2:37:f4:27:0e:cc:
e5:8c:33:ca:46:7e:28:2b:2c:77:5f:37:ca:6d:c9:
18:26:2b:a7:06:dc:f0:f9:58:78:85:b5:a5:fc:ef:
e9:44:90:44:e0:ca:67:36:20:72:da:43:df:99:ce:
9e:7f:53:d9:59:90:9d:b3:4c:d4:ae:a3:88:b0:41:
86:21:62:a6:d2:fe:4c:57:98:a8:40:1d:6d:dd:b3:
c3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:0D:EA:7B:3D:E1:9D:03:01:07:72:A0:2B:01:DD:38:E6:8B:82:79
X509v3 Authority Key Identifier:
keyid:DC:17:A0:EC:58:65:2D:31:89:61:23:A6:56:10:C3:A3:20:46:55:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/3Beg7FhlLTGJYSOmVhDDoyBGVWs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3Beg7FhlLTGJYSOmVhDDoyBGVWs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/F5ED0DA04D7E11F1841FD20ECF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:fb10:9::-2c0f:fb10:19:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
51:37:45:8d:d3:4f:0e:1b:7b:6a:99:de:42:40:74:e0:1e:35:
b1:0d:0d:9b:4e:3d:97:4f:d5:83:ed:a1:43:cd:66:9f:35:6a:
e1:23:ef:bb:c1:78:8b:97:7c:eb:df:9c:b3:92:29:3f:2a:a5:
96:2d:4d:2d:b6:e1:8d:87:a8:20:36:bd:5f:e7:d0:85:be:3e:
0d:7f:4b:79:01:d1:06:7a:f6:1a:83:f2:c3:9e:c3:ba:ba:84:
e1:df:9a:65:56:07:78:d5:f5:cf:39:33:d5:fc:d4:c4:46:52:
18:bc:e9:08:5b:e2:36:03:9a:8d:df:57:3a:ed:1f:4a:ce:0d:
ec:24:37:f9:63:7a:63:93:da:1c:e2:9a:0b:12:4c:43:e7:c5:
e7:1a:0e:cb:13:72:12:f0:f5:4c:a6:6f:8c:de:52:48:5b:5c:
ec:94:78:53:59:1f:2b:c0:6f:31:d4:27:73:dd:a9:cf:ed:0a:
a3:86:a8:ce:90:69:28:55:23:67:69:8e:90:a9:ca:ec:db:f4:
3e:fb:38:57:97:e3:ee:41:ea:53:f1:b5:ae:b6:c3:64:59:6a:
d1:a6:76:73:94:be:1f:e1:e8:3b:e5:a8:07:af:88:d6:82:6e:
4b:67:84:51:36:85:ce:c9:f2:19:d4:0f:d1:5c:36:b3:95:2d:
e1:ba:cb:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:17:21 2026 by rpki-client