Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614D1D/58CF30E4292811ED8E68E8F8F1222468/C64E95D28AC811F184603AB5CE1D38B0.roa
File: C64E95D28AC811F184603AB5CE1D38B0.roa (raw, json)
Hash identifier: 7YEuA2VOavsPvBxjsk4vEJsovfUYi9Dd9ZYLz3aRjrQ=
Subject key identifier: 13:5E:20:C4:B7:F7:0C:C5:E8:F9:87:EE:A5:5A:D8:C5:0D:82:21:30
Certificate issuer: /CN=F3614D1DAF/serialNumber=27793D215F08805DB8D0BA892D336F29AB7BB05B
Certificate serial: 05E8
Authority key identifier: 27:79:3D:21:5F:08:80:5D:B8:D0:BA:89:2D:33:6F:29:AB:7B:B0:5B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/J3k9IV8IgF240LqJLTNvKat7sFs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614D1D/58CF30E4292811ED8E68E8F8F1222468/C64E95D28AC811F184603AB5CE1D38B0.roa
Signing time: Tue 28 Jul 2026 21:10:35 +0000
ROA not before: Tue 28 Jul 2026 21:10:31 +0000
ROA not after: Mon 28 Jul 2036 21:10:31 +0000
asID: 329063
IP address blocks: 2c0f:7680::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3614D1D/58CF30E4292811ED8E68E8F8F1222468/J3k9IV8IgF240LqJLTNvKat7sFs.crl
rsync://rpki.afrinic.net/repository/member_repository/F3614D1D/58CF30E4292811ED8E68E8F8F1222468/J3k9IV8IgF240LqJLTNvKat7sFs.mft
rsync://rpki.afrinic.net/repository/afrinic/J3k9IV8IgF240LqJLTNvKat7sFs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 21:19:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1512 (0x5e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3614D1DAF, serialNumber=27793D215F08805DB8D0BA892D336F29AB7BB05B
Validity
Not Before: Jul 28 21:10:31 2026 GMT
Not After : Jul 28 21:10:31 2036 GMT
Subject: CN=6a691acb-c0a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:95:39:a2:06:b6:2d:dd:b5:86:e6:a9:0f:57:
36:fb:0c:7c:03:c2:b0:d4:f5:8b:ab:24:99:60:72:
02:8d:c5:47:58:b4:f1:d0:8d:bb:00:22:15:08:57:
1e:8b:3b:ad:70:c9:b9:32:a6:19:f9:94:19:c0:47:
84:25:7f:3e:ce:18:94:82:19:2f:18:c2:e1:88:52:
ff:9f:52:a9:f5:e7:70:59:74:60:c3:bf:76:3e:52:
16:49:4c:2e:ab:e7:ae:3e:6d:d7:b0:c3:26:f7:6d:
41:f7:f8:b0:57:28:fc:8b:df:c1:00:3f:02:ee:69:
4d:f2:e8:ef:c5:49:bf:b7:ff:87:a0:2c:a2:5e:dc:
43:4f:b4:2a:71:e9:91:71:ad:18:ec:72:25:5c:25:
2b:ec:7f:46:0f:0d:f3:26:7a:4c:35:bf:da:b5:bd:
0e:de:55:23:22:90:be:5e:6b:fd:12:84:d0:2a:3f:
4d:e1:68:ee:5a:a6:3a:28:7b:18:79:87:fa:e2:80:
c1:68:8a:21:c4:d1:fd:9b:47:89:1e:62:ec:2a:f0:
30:b6:73:16:4f:cf:6e:fb:75:c5:e5:a6:d3:1d:b0:
ef:a0:da:5e:3d:2e:5b:2a:a3:d4:d3:c4:a4:0b:f8:
1a:40:1a:90:4a:b4:28:66:80:96:c7:0b:24:28:7d:
7e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:5E:20:C4:B7:F7:0C:C5:E8:F9:87:EE:A5:5A:D8:C5:0D:82:21:30
X509v3 Authority Key Identifier:
keyid:27:79:3D:21:5F:08:80:5D:B8:D0:BA:89:2D:33:6F:29:AB:7B:B0:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3614D1D/58CF30E4292811ED8E68E8F8F1222468/J3k9IV8IgF240LqJLTNvKat7sFs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/J3k9IV8IgF240LqJLTNvKat7sFs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614D1D/58CF30E4292811ED8E68E8F8F1222468/C64E95D28AC811F184603AB5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:7680::/33
Signature Algorithm: sha256WithRSAEncryption
12:e9:5f:ea:41:3b:c5:ad:d3:6b:71:54:10:09:c0:2c:d5:39:
31:08:4a:6c:dc:43:62:10:94:7d:8c:11:a4:06:70:45:f0:f1:
34:b6:0c:31:47:b3:6c:91:10:09:c0:8b:dd:db:7e:ef:1f:8a:
1d:8d:42:40:a5:f8:2b:1f:84:73:d8:cf:5e:e9:0b:07:27:73:
2c:2f:6b:2a:40:e8:09:cf:c0:97:7e:14:00:c4:c4:d7:10:fc:
e7:da:cc:ae:73:9d:e1:d4:a7:da:70:18:19:eb:0c:39:3a:0c:
e3:0b:af:c7:f9:4e:bc:3d:68:43:88:b9:07:b3:63:67:8a:90:
b6:93:d1:e5:4b:4d:6c:34:01:ed:14:39:1c:9f:6f:d7:23:13:
1f:6a:66:2d:90:be:97:90:87:0b:75:d0:3b:4f:dc:87:7a:2a:
ee:19:5e:aa:c9:cf:d7:67:16:35:eb:21:5d:61:aa:4b:24:72:
29:e5:ff:10:f8:65:d6:2a:51:8e:6c:f7:2a:c1:70:11:21:2e:
0f:20:38:93:ce:0b:68:79:ac:0a:94:03:ff:ce:c1:fc:2d:c4:
81:8b:c8:f3:6b:e9:3e:c9:f5:ad:19:3c:39:c2:86:81:4c:df:
3e:4f:1d:fa:8a:d5:6f:be:ff:1f:8e:a2:7d:cb:f5:83:18:11:
71:ed:45:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:14:27 2026 by rpki-client