Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/6C92F8926EE111F1BE935CE6CE1D38B0.roa
File: 6C92F8926EE111F1BE935CE6CE1D38B0.roa (raw, json)
Hash identifier: 4lwcOgnzLzEB/E9hUs2QzeevDs6EAMCI/rEoNCniIAc=
Subject key identifier: 4A:B0:EA:99:AC:84:13:AD:5D:74:E6:93:97:02:E6:9C:5E:03:05:37
Certificate issuer: /CN=F36FEA6BAF/serialNumber=93C2C99AF0EC4D1A4643497F5F8CBDC7EC45748F
Certificate serial: 0A62
Authority key identifier: 93:C2:C9:9A:F0:EC:4D:1A:46:43:49:7F:5F:8C:BD:C7:EC:45:74:8F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/6C92F8926EE111F1BE935CE6CE1D38B0.roa
Signing time: Tue 23 Jun 2026 08:56:30 +0000
ROA not before: Tue 23 Jun 2026 08:56:25 +0000
ROA not after: Mon 23 Jun 2036 08:56:25 +0000
asID: 327852
IP address blocks: 196.49.12.0/24 maxlen: 24
2001:43f8:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.mft
rsync://rpki.afrinic.net/repository/afrinic/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2658 (0xa62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FEA6BAF, serialNumber=93C2C99AF0EC4D1A4643497F5F8CBDC7EC45748F
Validity
Not Before: Jun 23 08:56:25 2026 GMT
Not After : Jun 23 08:56:25 2036 GMT
Subject: CN=6a3a4a3d-2ab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0f:a6:32:76:06:70:8f:07:dd:23:5f:c1:76:
9b:b6:73:71:76:fc:bd:0e:92:9b:c8:18:c1:a6:6f:
9d:08:b9:95:15:e1:40:ab:b6:44:25:3f:39:63:a6:
02:93:f6:99:e1:75:a3:b3:55:37:7a:15:13:4c:e6:
78:d6:11:a1:a2:1b:57:85:bd:68:79:32:36:48:d3:
20:98:ee:4c:e2:13:45:82:a5:fc:6b:21:69:e6:b9:
e7:c1:aa:85:7f:0b:ca:5f:41:02:a7:09:39:f5:22:
c3:45:68:54:5f:d5:bc:9d:fa:2c:29:82:92:2a:aa:
ee:e5:0e:89:5a:b2:fd:95:09:63:5a:4e:f2:d3:9d:
87:ef:59:8f:67:ac:9a:2e:da:6f:fe:a4:64:45:7a:
0d:53:98:70:da:f1:94:b2:8c:00:9b:82:e1:01:d8:
9c:81:8b:f6:bf:dd:24:9e:ba:f4:65:01:35:67:fc:
f6:99:f6:20:91:a0:b2:3c:f6:ef:3e:1d:30:2c:2c:
20:ae:ca:79:73:d0:52:7f:fc:72:34:a9:ca:5b:8f:
2b:23:bf:19:74:6a:cc:d5:11:2f:27:21:41:60:24:
fb:95:77:41:a2:e4:82:42:16:7a:fb:0d:ff:cd:6d:
9b:ef:94:78:9d:37:6c:29:e9:e3:00:ca:e5:e0:e2:
d5:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B0:EA:99:AC:84:13:AD:5D:74:E6:93:97:02:E6:9C:5E:03:05:37
X509v3 Authority Key Identifier:
keyid:93:C2:C9:9A:F0:EC:4D:1A:46:43:49:7F:5F:8C:BD:C7:EC:45:74:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/6C92F8926EE111F1BE935CE6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.49.12.0/24
IPv6:
2001:43f8:2::/48
Signature Algorithm: sha256WithRSAEncryption
af:92:fb:8a:3d:87:be:a8:1a:93:bc:71:97:a5:8c:f1:cf:d8:
ca:9a:96:ae:bc:84:55:ad:e9:2d:df:ff:3a:3c:77:7e:c6:b7:
22:35:73:59:05:92:ac:80:e7:21:4c:fd:87:07:83:44:3a:35:
64:b9:88:03:1c:49:f7:c8:17:eb:dc:7e:90:71:87:1f:fb:a8:
d1:cd:90:a2:5f:60:86:f3:81:6c:78:1e:13:c2:a1:1c:5b:9f:
6b:5d:b0:5d:c5:f2:d4:9a:3f:3c:09:0f:44:64:b7:73:09:c7:
7b:91:21:25:4d:97:eb:87:27:97:66:41:56:32:ac:22:92:b7:
09:22:df:55:58:75:51:16:16:9d:9f:a5:c5:cd:b7:15:18:18:
8d:05:41:51:05:70:ab:e1:ac:68:0a:7a:2c:d2:9a:4b:21:62:
9e:61:03:cd:6d:9f:14:95:65:1b:13:40:cc:ea:18:d4:35:5b:
ac:aa:23:c0:39:35:8e:16:b5:40:e9:75:b5:b8:fd:9d:e5:37:
8a:00:c7:e7:ec:9e:23:4e:3c:26:8b:18:5f:41:f7:f9:f6:5c:
21:da:1d:de:0a:69:a6:38:6d:01:ea:e8:c2:74:b8:23:80:b5:
e0:d9:aa:de:a6:41:ac:7d:3e:24:f9:ff:3b:4b:86:b8:77:c7:
19:1e:d5:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:25:03 2026 by rpki-client