Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/F61EA0164D8511F1812018BACE1D38B0.roa
File: F61EA0164D8511F1812018BACE1D38B0.roa (raw, json)
Hash identifier: Ab9rIz1detylRD5j7+jES2KsDtf7UxmgzAMTiEbWGbc=
Subject key identifier: 9D:E2:B0:73:BA:AB:B6:19:CF:8C:07:1F:08:8F:C7:DC:31:9B:C3:8B
Certificate issuer: /CN=F36F8F4FAF/serialNumber=DC17A0EC58652D31896123A65610C3A32046556B
Certificate serial: 06F9
Authority key identifier: DC:17:A0:EC:58:65:2D:31:89:61:23:A6:56:10:C3:A3:20:46:55:6B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/3Beg7FhlLTGJYSOmVhDDoyBGVWs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/F61EA0164D8511F1812018BACE1D38B0.roa
Signing time: Mon 11 May 2026 22:08:38 +0000
ROA not before: Tue 12 May 2026 22:08:33 +0000
ROA not after: Mon 12 May 2031 22:08:33 +0000
asID: 21003
IP address blocks: 2c0f:fb10:200::/48 maxlen: 48
2c0f:fb10:202::/48 maxlen: 48
2c0f:fb10:203::/48 maxlen: 48
2c0f:fb10:204::/48 maxlen: 48
2c0f:fb10:205::/48 maxlen: 48
2c0f:fb10:206::/48 maxlen: 48
2c0f:fb10:207::/48 maxlen: 48
2c0f:fb10:208::/48 maxlen: 48
2c0f:fb10:209::/48 maxlen: 48
2c0f:fb10:20a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/3Beg7FhlLTGJYSOmVhDDoyBGVWs.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/3Beg7FhlLTGJYSOmVhDDoyBGVWs.mft
rsync://rpki.afrinic.net/repository/afrinic/3Beg7FhlLTGJYSOmVhDDoyBGVWs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 14 May 2026 10:38:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1785 (0x6f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F8F4FAF, serialNumber=DC17A0EC58652D31896123A65610C3A32046556B
Validity
Not Before: May 12 22:08:33 2026 GMT
Not After : May 12 22:08:33 2031 GMT
Subject: CN=6a025366-6464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:21:83:48:09:e8:04:25:51:d7:21:3f:aa:66:
39:87:4a:d3:98:57:2c:42:d6:e2:d0:69:c9:17:09:
9c:72:8b:36:a9:d3:fb:98:51:a7:12:d8:87:b4:f7:
4d:f3:43:b1:11:f7:ed:62:c2:ec:74:02:90:a1:3b:
b9:f2:af:12:6b:7e:54:d9:58:7e:71:f8:55:85:28:
2d:2f:35:b9:0d:c5:1f:23:5e:6e:36:2a:20:10:bd:
24:6d:d1:39:69:e6:9a:9e:81:6e:a2:82:de:e7:ea:
07:be:60:55:50:66:0f:18:dd:97:d4:d5:44:6a:e2:
85:48:61:d1:5e:f5:60:58:57:4e:d2:fa:47:a2:97:
fa:50:d0:17:ea:22:ea:b3:d6:52:80:21:d3:37:13:
98:c0:3b:7c:8e:d6:70:fe:be:c9:b9:26:15:1b:f2:
71:b6:d8:21:62:64:16:d2:17:ba:ae:27:09:a4:ef:
6a:be:fe:f6:15:ee:d8:35:1c:19:8d:7b:16:c3:37:
44:60:54:c6:a4:5b:13:bc:3c:a0:e1:09:ca:61:1d:
68:d6:59:af:ad:66:57:79:71:5f:16:95:82:ee:57:
fa:3d:11:80:e9:61:6e:e7:c5:dd:e5:e3:d9:55:4c:
03:56:0d:8a:7c:0c:af:77:ab:8c:dc:ce:66:3f:a7:
2c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:E2:B0:73:BA:AB:B6:19:CF:8C:07:1F:08:8F:C7:DC:31:9B:C3:8B
X509v3 Authority Key Identifier:
keyid:DC:17:A0:EC:58:65:2D:31:89:61:23:A6:56:10:C3:A3:20:46:55:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/3Beg7FhlLTGJYSOmVhDDoyBGVWs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3Beg7FhlLTGJYSOmVhDDoyBGVWs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/F61EA0164D8511F1812018BACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:fb10:200::/48
2c0f:fb10:202::-2c0f:fb10:20a:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
04:3a:01:10:db:26:44:5b:41:24:6c:98:3b:70:c2:a1:63:8e:
a2:07:9a:f0:c4:5b:cf:82:4b:b6:b7:e5:dd:15:c0:b9:9b:87:
53:b8:89:53:ef:84:64:6e:ab:4e:fc:bd:a4:69:d5:39:09:7e:
eb:d4:5e:70:8c:87:1d:15:2c:32:ae:05:eb:29:8f:be:2d:9c:
90:90:38:7c:83:4e:10:96:b8:a1:07:63:69:f9:b1:48:cd:d1:
a1:0a:10:a4:9f:c1:dc:2e:3d:b4:79:7a:a5:93:13:f6:ca:f6:
ea:68:90:e1:10:39:8a:00:f1:4e:85:d7:d9:5e:f0:da:7f:de:
e1:b1:6d:41:fc:30:41:55:2a:30:ea:98:49:ac:71:e1:6c:88:
b9:23:21:fe:62:15:e4:a4:d7:74:34:55:2b:78:97:ee:d7:08:
a2:5b:f2:0f:95:db:04:9e:d8:6f:c0:04:e4:63:f8:a8:69:7b:
8c:21:7c:bb:c9:74:a2:c2:f7:72:15:68:7f:ac:f2:a3:f0:15:
b2:5b:5f:f5:aa:6b:a9:89:fc:e7:43:dd:25:65:98:7d:10:68:
90:bf:81:d9:65:e1:c5:6b:d7:4b:45:93:46:bd:16:a4:d7:e8:
00:53:37:7e:62:12:17:15:56:a5:01:7c:60:7d:4a:39:80:32:
8b:a5:59:33
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 03:17:15 2026 by rpki-client