Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36252A7/89497A60E38311E99E55F585F8AEA228/EEEB7AEC898211F1B9EC1CF8CE1D38B0.roa
File: EEEB7AEC898211F1B9EC1CF8CE1D38B0.roa (raw, json)
Hash identifier: EEMiRic6eiGFwQMNVZ3YgP27u1hj13H7oPGSRRE9IQA=
Subject key identifier: BE:F2:C6:D4:D7:51:C2:1C:EE:F4:7B:E1:23:F0:A9:77:81:FF:52:B0
Certificate issuer: /CN=F36252A7AF/serialNumber=027E1A4463C685FBD63863F9D3B23BAC2D93B168
Certificate serial: 09FF
Authority key identifier: 02:7E:1A:44:63:C6:85:FB:D6:38:63:F9:D3:B2:3B:AC:2D:93:B1:68
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/An4aRGPGhfvWOGP507I7rC2TsWg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36252A7/89497A60E38311E99E55F585F8AEA228/EEEB7AEC898211F1B9EC1CF8CE1D38B0.roa
Signing time: Mon 27 Jul 2026 06:18:07 +0000
ROA not before: Mon 27 Jul 2026 06:18:04 +0000
ROA not after: Mon 20 Feb 2034 06:18:04 +0000
asID: 36985
IP address blocks: 2c0f:f150::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36252A7/89497A60E38311E99E55F585F8AEA228/An4aRGPGhfvWOGP507I7rC2TsWg.crl
rsync://rpki.afrinic.net/repository/member_repository/F36252A7/89497A60E38311E99E55F585F8AEA228/An4aRGPGhfvWOGP507I7rC2TsWg.mft
rsync://rpki.afrinic.net/repository/afrinic/An4aRGPGhfvWOGP507I7rC2TsWg.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 31 Jul 2026 00:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2559 (0x9ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36252A7AF, serialNumber=027E1A4463C685FBD63863F9D3B23BAC2D93B168
Validity
Not Before: Jul 27 06:18:04 2026 GMT
Not After : Feb 20 06:18:04 2034 GMT
Subject: CN=6a66f81f-c82d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d6:2e:10:ed:43:0f:55:90:c2:7b:21:37:6f:
9a:1c:e4:22:f8:ec:45:d1:6b:8f:6b:70:ac:64:56:
de:bb:e1:14:94:79:3c:b5:58:2c:66:4b:4c:67:9c:
c0:0e:33:68:4a:02:45:78:27:53:0d:72:34:59:4c:
8e:2f:84:94:23:35:be:16:dd:9b:55:87:a3:71:1d:
57:82:41:6a:13:44:00:66:5d:23:5b:61:76:9a:ba:
72:67:23:e6:2b:62:53:54:03:3a:0f:d4:c3:84:de:
4a:56:d3:05:90:3f:65:cd:c5:bb:34:43:ed:ef:99:
1c:f8:a4:e1:19:1b:b2:a0:46:0e:09:d5:f6:d5:b8:
57:fd:6a:a2:c5:a2:53:d7:09:4e:cc:c7:05:41:6d:
18:a5:df:40:7f:85:4d:11:af:55:7f:e0:ba:bf:bc:
8b:f3:b6:29:50:7e:00:39:66:9c:da:e9:69:2d:73:
00:2b:d1:b6:cb:f7:1a:fe:f9:f9:ef:49:bb:a5:1a:
62:d8:3d:05:d3:76:a3:7f:f8:64:81:ce:28:8b:4f:
85:21:fe:ec:f3:a5:1d:04:38:f4:b3:1c:67:47:dd:
65:13:6d:fd:d5:7b:70:a7:5e:e8:89:8a:17:de:74:
09:b5:e8:2c:e4:c6:59:ff:9a:b5:5d:ea:ad:f0:67:
04:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:F2:C6:D4:D7:51:C2:1C:EE:F4:7B:E1:23:F0:A9:77:81:FF:52:B0
X509v3 Authority Key Identifier:
keyid:02:7E:1A:44:63:C6:85:FB:D6:38:63:F9:D3:B2:3B:AC:2D:93:B1:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36252A7/89497A60E38311E99E55F585F8AEA228/An4aRGPGhfvWOGP507I7rC2TsWg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/An4aRGPGhfvWOGP507I7rC2TsWg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36252A7/89497A60E38311E99E55F585F8AEA228/EEEB7AEC898211F1B9EC1CF8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:f150::/32
Signature Algorithm: sha256WithRSAEncryption
51:ed:90:78:84:77:34:cb:f1:ff:a8:4b:98:fc:fb:90:bf:15:
56:1d:73:93:bc:02:17:fa:17:2b:8b:52:0b:58:3c:d6:25:81:
4f:50:d6:c9:c3:83:69:11:18:64:38:e8:a4:a2:db:21:cc:2c:
8f:cc:6b:50:f7:71:e2:28:9d:25:ed:5f:5f:b7:74:4d:a5:1b:
00:2d:22:d8:75:6e:68:7e:cc:c7:81:4b:45:23:86:b0:e6:57:
6c:f6:ce:a7:9a:42:3c:de:da:d9:63:71:64:7c:c0:80:be:96:
91:fe:92:ad:dd:33:85:29:54:59:ea:4b:71:6f:5b:19:03:8b:
90:d9:e6:77:7e:7e:38:cd:39:4a:10:3b:38:60:10:a7:44:ed:
dd:40:03:4a:5b:77:c0:be:eb:22:bc:42:30:c4:bd:19:a7:b8:
e8:56:6b:e1:af:2d:ed:5d:d9:26:8f:63:e6:ae:d9:3d:16:04:
c9:f5:82:ac:8d:2e:44:2e:49:4d:d7:b1:e5:2a:c8:5f:9d:d0:
64:95:92:17:3c:c4:4c:fa:95:1a:b0:6a:79:67:fb:12:9b:54:
f1:af:2e:02:98:dd:06:d2:05:bb:2a:e1:9a:16:78:42:07:17:
e5:0e:90:3e:62:04:2d:9b:1f:ca:a2:01:29:d8:b6:bc:7b:4a:
25:19:b5:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:16:47 2026 by rpki-client