Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362CE41/A31F43E6D79711ED9219CAD9F1222468/8CD9ED3E5F2A11F1B06F131ECF1D38B0.roa
File: 8CD9ED3E5F2A11F1B06F131ECF1D38B0.roa (raw, json)
Hash identifier: 2Y0TOuGuUxq1MVzlA1RieYuFzvqEZTMK5R5VwT07uTs=
Subject key identifier: BF:20:3F:95:F5:6C:09:DE:F5:EA:A9:96:F4:77:EC:4B:C3:5E:E0:C1
Certificate issuer: /CN=F362CE41AF/serialNumber=6CFD0875438CBE20C3202A4C53CDAC23C4E1373F
Certificate serial: 04A9
Authority key identifier: 6C:FD:08:75:43:8C:BE:20:C3:20:2A:4C:53:CD:AC:23:C4:E1:37:3F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/bP0IdUOMviDDICpMU82sI8ThNz8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362CE41/A31F43E6D79711ED9219CAD9F1222468/8CD9ED3E5F2A11F1B06F131ECF1D38B0.roa
Signing time: Wed 03 Jun 2026 08:59:38 +0000
ROA not before: Mon 29 Jun 2026 08:59:34 +0000
ROA not after: Fri 30 Jun 2028 08:59:34 +0000
asID: 17400
IP address blocks: 2001:4250::/32 maxlen: 32
Validation: Failed, certificate is not yet valid
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1193 (0x4a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362CE41AF, serialNumber=6CFD0875438CBE20C3202A4C53CDAC23C4E1373F
Validity
Not Before: Jun 29 08:59:34 2026 GMT
Not After : Jun 30 08:59:34 2028 GMT
Subject: CN=6a1fecfa-e5df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8e:bb:f8:0f:27:6e:a4:d9:5a:a6:13:c2:29:
ab:ba:fc:89:28:77:c2:84:d1:0c:e7:ca:6b:b1:8c:
eb:3d:e6:28:3a:3e:98:5c:bd:80:3b:84:a7:b2:bd:
ae:de:2c:49:93:bb:d1:30:9e:d0:fb:32:6a:b4:1e:
0f:d4:c3:22:a1:e9:a7:ee:b9:d8:42:5f:7e:c1:d2:
40:f0:84:c5:11:5e:16:e6:91:62:be:05:50:27:59:
bf:7c:3a:3b:c4:1b:b8:3f:91:fb:2f:c0:8c:0e:d1:
aa:ce:94:b4:80:ea:ff:8a:01:af:ac:d9:06:54:de:
c5:05:96:06:c3:4f:0e:e1:2a:62:ab:6c:45:30:bb:
33:bc:13:f6:49:75:d1:a5:56:4f:9d:01:97:1c:5b:
68:d5:18:80:67:f4:69:ab:61:33:23:c9:2e:f0:f0:
19:c2:88:8c:cf:df:e6:b4:e1:05:a5:be:0c:6f:a2:
0e:23:a2:26:a0:76:9b:4a:82:b8:2c:c8:92:85:0b:
11:b9:28:0a:aa:b5:e2:a8:83:bd:0c:6b:92:7f:ca:
42:76:41:c7:a0:13:73:af:2b:77:3b:7b:9f:ff:93:
e7:51:8b:3d:a7:7a:28:2c:10:65:3f:e5:5d:39:e4:
52:5e:af:67:44:04:44:61:27:d2:7e:20:35:ff:7e:
2f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:20:3F:95:F5:6C:09:DE:F5:EA:A9:96:F4:77:EC:4B:C3:5E:E0:C1
X509v3 Authority Key Identifier:
keyid:6C:FD:08:75:43:8C:BE:20:C3:20:2A:4C:53:CD:AC:23:C4:E1:37:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362CE41/A31F43E6D79711ED9219CAD9F1222468/bP0IdUOMviDDICpMU82sI8ThNz8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/bP0IdUOMviDDICpMU82sI8ThNz8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362CE41/A31F43E6D79711ED9219CAD9F1222468/8CD9ED3E5F2A11F1B06F131ECF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:4250::/32
Signature Algorithm: sha256WithRSAEncryption
8d:b7:6e:fd:2c:a1:cf:88:92:5a:6a:26:0f:4f:13:83:9f:0f:
41:68:5e:53:58:57:3e:b5:6e:20:b2:6e:54:41:62:d6:22:48:
42:0b:6f:13:3a:b1:a7:e4:a5:3b:67:f9:9f:70:e2:d0:fe:d5:
17:cb:5b:ec:ec:24:80:2c:d9:03:f9:18:e9:b4:4c:b5:33:ac:
7b:90:fc:70:9c:0e:21:80:50:77:09:d9:d4:70:9d:dc:bd:47:
d6:6f:c4:e9:7c:3f:83:59:f3:91:78:c1:8e:32:b7:e8:4a:06:
35:e5:c6:d8:ce:0f:66:da:5d:ad:ef:66:bf:ae:9e:d6:d6:61:
64:9d:6a:09:c2:76:9b:06:f5:e2:6e:67:06:ac:54:db:59:fe:
47:a5:cf:9d:23:66:33:c6:53:d5:1f:56:77:5c:d7:3e:70:3e:
76:61:a6:59:0e:15:74:6a:18:2a:f8:73:d8:e9:d4:31:dc:74:
9c:0b:44:e6:65:31:99:cc:c7:01:9c:50:d2:a1:42:e2:4a:20:
fd:4a:b2:7e:05:ce:cf:d8:55:3f:41:56:ad:b4:b6:fc:64:bb:
13:85:1b:9e:7a:82:52:6a:fe:6d:3a:d7:06:11:b0:60:bf:f6:
e1:0f:fa:56:1c:58:55:99:8d:7a:17:81:f0:f6:80:79:f4:d0:
29:3c:24:a5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBKkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MkNFNDFBRjExMC8GA1UEBRMoNkNGRDA4NzU0MzhDQkUyMEMzMjAyQTRDNTNDREFD
MjNDNEUxMzczRjAeFw0yNjA2MjkwODU5MzRaFw0yODA2MzAwODU5MzRaMBgxFjAU
BgNVBAMTDTZhMWZlY2ZhLWU1ZGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCzjrv4DydupNlaphPCKau6/Ikod8KE0QznymuxjOs95ig6PphcvYA7hKey
va7eLEmTu9EwntD7Mmq0Hg/UwyKh6afuudhCX37B0kDwhMURXhbmkWK+BVAnWb98
OjvEG7g/kfsvwIwO0arOlLSA6v+KAa+s2QZU3sUFlgbDTw7hKmKrbEUwuzO8E/ZJ
ddGlVk+dAZccW2jVGIBn9GmrYTMjyS7w8BnCiIzP3+a04QWlvgxvog4joiagdptK
grgsyJKFCxG5KAqqteKog70Ma5J/ykJ2QcegE3OvK3c7e5//k+dRiz2neigsEGU/
5V055FJer2dEBERhJ9J+IDX/fi8LAgMBAAGjggKmMIICojAdBgNVHQ4EFgQUvyA/
lfVsCd716qmW9HfsS8Ne4MEwHwYDVR0jBBgwFoAUbP0IdUOMviDDICpMU82sI8Th
Nz8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjJDRTQxL0EzMUY0M0U2RDc5NzExRUQ5MjE5Q0FEOUYxMjIyNDY4L2JQMElk
VU9NdmlERElDcE1VODJzSThUaE56OC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2JQMElkVU9NdmlERElDcE1VODJzSThUaE56OC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjJDRTQxL0EzMUY0M0U2RDc5NzExRUQ5MjE5Q0FEOUYx
MjIyNDY4LzhDRDlFRDNFNUYyQTExRjFCMDZGMTMxRUNGMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAgAUJQMA0GCSqGSIb3DQEB
CwUAA4IBAQCNt279LKHPiJJaaiYPTxODnw9BaF5TWFc+tW4gsm5UQWLWIkhCC28T
OrGn5KU7Z/mfcOLQ/tUXy1vs7CSALNkD+RjptEy1M6x7kPxwnA4hgFB3CdnUcJ3c
vUfWb8TpfD+DWfOReMGOMrfoSgY15cbYzg9m2l2t72a/rp7W1mFknWoJwnabBvXi
bmcGrFTbWf5Hpc+dI2YzxlPVH1Z3XNc+cD52YaZZDhV0ahgq+HPY6dQx3HScC0Tm
ZTGZzMcBnFDSoULiSiD9SrJ+Bc7P2FU/QVattLb8ZLsThRueeoJSav5tOtcGEbBg
v/bhD/pWHFhVmY16F4Hw9oB59NApPCSl
-----END CERTIFICATE-----
Generated at Sat Jun 13 06:38:37 2026 by rpki-client