Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36455FB/157D54F455CB11ED97DF9691F1222468/148BCB9E8A5511F1951213FDCE1D38B0.roa
File: 148BCB9E8A5511F1951213FDCE1D38B0.roa (raw, json)
Hash identifier: J+tkhNUxLX7cRuis8AunqQjdW/I75K6IIxqcvuvvwDs=
Subject key identifier: 6D:32:B8:0D:56:21:46:31:AA:7B:2A:45:2E:AE:20:ED:AD:C5:8F:50
Certificate issuer: /CN=F36455FBAF/serialNumber=4462A2E3D1536684A6AD23280CFDA18585BA46E8
Certificate serial: 0599
Authority key identifier: 44:62:A2:E3:D1:53:66:84:A6:AD:23:28:0C:FD:A1:85:85:BA:46:E8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/RGKi49FTZoSmrSMoDP2hhYW6Rug.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36455FB/157D54F455CB11ED97DF9691F1222468/148BCB9E8A5511F1951213FDCE1D38B0.roa
Signing time: Tue 28 Jul 2026 07:22:25 +0000
ROA not before: Tue 28 Jul 2026 07:22:21 +0000
ROA not after: Wed 31 Dec 2036 07:22:21 +0000
asID: 328785
IP address blocks: 2c0f:5980::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36455FB/157D54F455CB11ED97DF9691F1222468/RGKi49FTZoSmrSMoDP2hhYW6Rug.crl
rsync://rpki.afrinic.net/repository/member_repository/F36455FB/157D54F455CB11ED97DF9691F1222468/RGKi49FTZoSmrSMoDP2hhYW6Rug.mft
rsync://rpki.afrinic.net/repository/afrinic/RGKi49FTZoSmrSMoDP2hhYW6Rug.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 31 Jul 2026 00:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1433 (0x599)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36455FBAF, serialNumber=4462A2E3D1536684A6AD23280CFDA18585BA46E8
Validity
Not Before: Jul 28 07:22:21 2026 GMT
Not After : Dec 31 07:22:21 2036 GMT
Subject: CN=6a6858b1-afb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3b:b2:a0:e1:6f:8e:e4:a7:f7:b8:f0:da:6b:
55:68:33:8d:b3:e4:ef:95:d9:b3:de:20:32:13:d5:
73:cf:9c:3d:e4:b1:03:a2:fa:73:16:17:46:5b:7b:
d4:19:f5:41:48:26:34:4a:16:fa:88:3b:53:83:38:
a1:4d:6f:14:aa:f2:5d:95:8f:b1:bf:a1:54:d0:98:
3e:f8:c2:94:69:6a:70:99:00:4a:60:6f:f2:d6:84:
1d:30:75:27:e1:cf:40:2a:a7:f7:fa:e9:87:91:49:
ec:dc:cc:35:5f:80:e0:42:e3:a3:97:93:31:e2:6a:
ff:b7:89:ea:19:88:69:bc:0f:17:0c:6c:68:ff:20:
72:51:91:99:df:bf:9b:5a:c5:11:f7:09:0e:46:03:
d2:c0:5c:83:c5:a9:b2:24:81:0c:f6:f2:aa:0d:4d:
19:a9:5e:3e:59:4e:fc:83:aa:1b:b3:fb:7d:32:a2:
7a:a3:0a:07:4d:3d:cb:74:bb:e4:e8:7b:47:9c:7c:
b8:59:f8:56:4b:00:13:1d:41:b1:ee:82:5e:e0:dd:
fe:ab:a5:87:1e:e0:ff:1e:1f:1f:b1:27:1a:1d:75:
e5:37:8a:14:38:3b:20:e0:0d:c2:b5:be:24:d2:09:
b2:ef:7a:54:cd:76:8f:93:bd:af:f2:46:91:6b:b2:
87:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:32:B8:0D:56:21:46:31:AA:7B:2A:45:2E:AE:20:ED:AD:C5:8F:50
X509v3 Authority Key Identifier:
keyid:44:62:A2:E3:D1:53:66:84:A6:AD:23:28:0C:FD:A1:85:85:BA:46:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36455FB/157D54F455CB11ED97DF9691F1222468/RGKi49FTZoSmrSMoDP2hhYW6Rug.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/RGKi49FTZoSmrSMoDP2hhYW6Rug.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36455FB/157D54F455CB11ED97DF9691F1222468/148BCB9E8A5511F1951213FDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:5980::/32
Signature Algorithm: sha256WithRSAEncryption
8b:c5:42:78:e3:7d:9b:21:b3:76:72:90:25:53:8c:66:8d:9d:
9b:9c:ed:f0:69:73:eb:67:70:c0:6b:3b:08:8b:ee:63:37:37:
c1:60:3f:59:aa:10:48:66:5c:12:4b:be:a1:4b:d8:ff:0a:7d:
fb:d3:2f:e6:81:a1:72:70:d8:e9:91:41:e1:d0:02:4f:9a:5a:
65:16:20:fe:14:66:66:69:2a:ef:a6:be:db:71:56:24:25:e1:
bd:1e:c3:3b:f3:84:1c:0e:e9:8b:bf:11:7d:44:a3:f4:03:e9:
a5:d2:3a:7c:73:72:7c:6a:1e:ac:c6:7c:08:db:33:9f:86:f5:
24:82:3a:0d:69:74:a4:40:30:25:9f:61:bf:74:5d:c1:99:84:
6c:d2:79:cf:5a:89:c7:f4:d5:d1:04:2a:e9:df:94:1b:ca:7b:
58:09:42:38:58:90:7f:32:0c:12:d3:9e:02:a7:3e:e9:fb:6f:
70:44:ab:11:86:07:22:98:88:f2:24:fa:88:5a:32:ac:87:01:
7c:28:d7:d8:14:b9:7a:f1:5b:f4:68:f7:a4:b9:5d:f1:a5:c6:
e4:51:bb:34:f0:b2:59:86:d3:02:97:dd:d7:03:08:5d:ef:75:
33:66:12:82:e2:6d:4b:a2:9b:64:32:f6:bc:99:36:85:25:7e:
e2:f8:0c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:16:28 2026 by rpki-client