Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614D1D/58CF30E4292811ED8E68E8F8F1222468/1642FE7A8AC911F1A47447B5CE1D38B0.roa
File: 1642FE7A8AC911F1A47447B5CE1D38B0.roa (raw, json)
Hash identifier: FNM19ZjkMFO84jFscTN4Bb3t+zjkVvUyMhpR+gcZsmg=
Subject key identifier: 43:BF:9E:F9:D0:E6:AC:AA:FE:72:F2:32:4D:E6:1A:CA:B5:3B:B0:E5
Certificate issuer: /CN=F3614D1DAF/serialNumber=27793D215F08805DB8D0BA892D336F29AB7BB05B
Certificate serial: 05EA
Authority key identifier: 27:79:3D:21:5F:08:80:5D:B8:D0:BA:89:2D:33:6F:29:AB:7B:B0:5B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/J3k9IV8IgF240LqJLTNvKat7sFs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614D1D/58CF30E4292811ED8E68E8F8F1222468/1642FE7A8AC911F1A47447B5CE1D38B0.roa
Signing time: Tue 28 Jul 2026 21:12:49 +0000
ROA not before: Tue 28 Jul 2026 21:12:45 +0000
ROA not after: Mon 28 Jul 2036 21:12:45 +0000
asID: 329063
IP address blocks: 2c0f:7680:8000::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3614D1D/58CF30E4292811ED8E68E8F8F1222468/J3k9IV8IgF240LqJLTNvKat7sFs.crl
rsync://rpki.afrinic.net/repository/member_repository/F3614D1D/58CF30E4292811ED8E68E8F8F1222468/J3k9IV8IgF240LqJLTNvKat7sFs.mft
rsync://rpki.afrinic.net/repository/afrinic/J3k9IV8IgF240LqJLTNvKat7sFs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 21:19:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1514 (0x5ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3614D1DAF, serialNumber=27793D215F08805DB8D0BA892D336F29AB7BB05B
Validity
Not Before: Jul 28 21:12:45 2026 GMT
Not After : Jul 28 21:12:45 2036 GMT
Subject: CN=6a691b51-8b2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a4:8c:09:ab:6c:fc:a9:47:f8:72:4b:11:e7:
bb:ef:62:f4:ad:47:36:47:e1:77:f2:e7:41:71:78:
66:48:28:0e:41:58:07:98:d0:c6:07:e8:b3:8f:cb:
40:7d:da:29:a2:e6:93:cf:cf:71:08:40:6f:c2:a7:
c6:ef:f1:0b:b6:42:f4:23:f2:75:e6:87:2b:bf:dd:
a1:84:8b:1f:e4:4e:30:89:d4:5d:6b:00:7b:94:e6:
c5:f9:da:6f:3f:9f:5d:7a:91:57:a9:be:48:54:8b:
30:93:b9:2c:11:00:79:38:21:55:50:eb:72:79:65:
90:cf:7e:2e:65:7e:c1:a1:3a:15:b1:f6:55:af:b4:
19:75:39:41:a6:fd:26:4f:c5:2d:e2:7f:66:bb:ca:
f9:bf:af:53:e0:3d:16:c7:67:31:4f:0f:13:4b:1f:
90:6d:14:c7:69:f7:51:17:e4:b3:5e:55:d8:e5:2a:
ac:3f:57:c1:28:ac:aa:3c:85:db:56:d8:d6:5b:83:
11:5e:cb:31:54:40:93:ce:dc:85:58:9c:6e:89:58:
62:5e:c4:fb:3d:1b:20:57:55:e1:b9:56:0a:39:b1:
a1:59:21:03:70:fb:33:5f:ba:00:36:e7:56:6e:fc:
c0:03:ee:fa:0a:2d:4f:5d:64:5d:41:2d:90:ad:92:
03:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:BF:9E:F9:D0:E6:AC:AA:FE:72:F2:32:4D:E6:1A:CA:B5:3B:B0:E5
X509v3 Authority Key Identifier:
keyid:27:79:3D:21:5F:08:80:5D:B8:D0:BA:89:2D:33:6F:29:AB:7B:B0:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3614D1D/58CF30E4292811ED8E68E8F8F1222468/J3k9IV8IgF240LqJLTNvKat7sFs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/J3k9IV8IgF240LqJLTNvKat7sFs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614D1D/58CF30E4292811ED8E68E8F8F1222468/1642FE7A8AC911F1A47447B5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:7680:8000::/33
Signature Algorithm: sha256WithRSAEncryption
07:47:89:ce:3b:c5:34:1d:3e:ae:f2:51:1c:43:ff:60:14:40:
4d:91:1b:c6:8c:7f:1a:00:d2:a2:6b:0a:56:a4:6c:d0:b4:2a:
08:ab:59:64:a8:f4:5b:77:c1:30:08:96:83:02:e3:1a:e5:99:
18:df:b2:c7:e3:1d:17:04:bd:57:7e:20:21:5a:e0:dc:b3:9a:
a5:99:2c:bf:db:54:fd:ba:e9:69:ae:05:73:b2:f3:f3:8d:48:
fb:a4:4c:ed:90:18:3d:75:a4:81:a8:c0:03:56:e0:39:d8:05:
7f:cc:b6:d0:83:3f:79:d2:e9:f3:c1:09:11:ef:cb:9b:03:eb:
b7:54:1a:44:dc:e9:9e:ef:79:16:49:2e:81:01:52:43:db:82:
dd:3e:da:ce:b3:59:86:07:de:5d:13:f2:7c:a1:91:23:5d:34:
80:da:80:6e:9e:93:68:09:96:4e:47:d5:a6:83:58:3f:9f:35:
33:81:f8:59:8a:08:8f:94:c7:f6:f4:15:ae:1b:a4:19:ad:b4:
91:f9:3f:44:77:0e:91:a3:1f:9b:6d:dc:cd:56:ed:6b:8e:ca:
b0:dd:61:da:f8:7c:6a:ff:78:bc:95:31:e5:24:c5:45:d7:00:
03:05:0d:01:63:dc:f6:18:22:c0:e2:03:4a:7e:e1:4d:c8:87:
a0:10:66:34
-----BEGIN CERTIFICATE-----
MIIFhTCCBG2gAwIBAgICBeowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MTREMURBRjExMC8GA1UEBRMoMjc3OTNEMjE1RjA4ODA1REI4RDBCQTg5MkQzMzZG
MjlBQjdCQjA1QjAeFw0yNjA3MjgyMTEyNDVaFw0zNjA3MjgyMTEyNDVaMBgxFjAU
BgNVBAMTDTZhNjkxYjUxLThiMmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDCpIwJq2z8qUf4cksR57vvYvStRzZH4Xfy50FxeGZIKA5BWAeY0MYH6LOP
y0B92imi5pPPz3EIQG/Cp8bv8Qu2QvQj8nXmhyu/3aGEix/kTjCJ1F1rAHuU5sX5
2m8/n116kVepvkhUizCTuSwRAHk4IVVQ63J5ZZDPfi5lfsGhOhWx9lWvtBl1OUGm
/SZPxS3if2a7yvm/r1PgPRbHZzFPDxNLH5BtFMdp91EX5LNeVdjlKqw/V8EorKo8
hdtW2NZbgxFeyzFUQJPO3IVYnG6JWGJexPs9GyBXVeG5Vgo5saFZIQNw+zNfugA2
51Zu/MAD7voKLU9dZF1BLZCtkgP9AgMBAAGjggKnMIICozAdBgNVHQ4EFgQUQ7+e
+dDmrKr+cvIyTeYayrU7sOUwHwYDVR0jBBgwFoAUJ3k9IV8IgF240LqJLTNvKat7
sFswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjE0RDFELzU4Q0YzMEU0MjkyODExRUQ4RTY4RThGOEYxMjIyNDY4L0ozazlJ
VjhJZ0YyNDBMcUpMVE52S2F0N3NGcy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0ozazlJVjhJZ0YyNDBMcUpMVE52S2F0N3NGcy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjE0RDFELzU4Q0YzMEU0MjkyODExRUQ4RTY4RThGOEYx
MjIyNDY4LzE2NDJGRTdBOEFDOTExRjFBNDc0NDdCNUNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgcsD3aAgDANBgkqhkiG9w0B
AQsFAAOCAQEAB0eJzjvFNB0+rvJRHEP/YBRATZEbxox/GgDSomsKVqRs0LQqCKtZ
ZKj0W3fBMAiWgwLjGuWZGN+yx+MdFwS9V34gIVrg3LOapZksv9tU/brpaa4Fc7Lz
841I+6RM7ZAYPXWkgajAA1bgOdgFf8y20IM/edLp88EJEe/LmwPrt1QaRNzpnu95
FkkugQFSQ9uC3T7azrNZhgfeXRPyfKGRI100gNqAbp6TaAmWTkfVpoNYP581M4H4
WYoIj5TH9vQVrhukGa20kfk/RHcOkaMfm23czVbta47KsN1h2vh8av94vJUx5STF
RdcAAwUNAWPc9hgiwOIDSn7hTciHoBBmNA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 01:53:37 2026 by rpki-client