Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364C329/E383A4E0048D11EEA39B4C6A4AD9E6FC/1C76C5A02A1211F1AA077E8EDAE4EC9C.roa
File: 1C76C5A02A1211F1AA077E8EDAE4EC9C.roa (raw, json)
Hash identifier: /VACYuxoqTTaL5gmeBG07ODh6HS3FM68Nf+7j7dfxrk=
Subject key identifier: 5B:7F:E7:21:20:F9:F7:5C:80:F1:99:B2:5A:4D:FA:11:2A:DB:08:D9
Certificate issuer: /CN=F364C329AF/serialNumber=ED7665290D13123EBD2C11CF087D83FF50CB724F
Certificate serial: 0425
Authority key identifier: ED:76:65:29:0D:13:12:3E:BD:2C:11:CF:08:7D:83:FF:50:CB:72:4F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/7XZlKQ0TEj69LBHPCH2D_1DLck8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364C329/E383A4E0048D11EEA39B4C6A4AD9E6FC/1C76C5A02A1211F1AA077E8EDAE4EC9C.roa
Signing time: Fri 27 Mar 2026 19:21:10 +0000
ROA not before: Fri 27 Mar 2026 19:21:05 +0000
ROA not after: Thu 27 Mar 2042 19:21:05 +0000
asID: 328858
IP address blocks: 2c0f:b40::/32 maxlen: 32
2c0f:b40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364C329/E383A4E0048D11EEA39B4C6A4AD9E6FC/7XZlKQ0TEj69LBHPCH2D_1DLck8.crl
rsync://rpki.afrinic.net/repository/member_repository/F364C329/E383A4E0048D11EEA39B4C6A4AD9E6FC/7XZlKQ0TEj69LBHPCH2D_1DLck8.mft
rsync://rpki.afrinic.net/repository/afrinic/7XZlKQ0TEj69LBHPCH2D_1DLck8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 03:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1061 (0x425)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364C329AF, serialNumber=ED7665290D13123EBD2C11CF087D83FF50CB724F
Validity
Not Before: Mar 27 19:21:05 2026 GMT
Not After : Mar 27 19:21:05 2042 GMT
Subject: CN=69c6d8a6-e193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:4c:de:9e:17:5b:51:82:e0:1d:17:98:21:0e:
d5:93:c0:eb:ae:2b:10:4c:6c:fb:13:56:f2:f0:5d:
f6:99:e3:c1:ce:e1:f2:bb:1d:8b:d7:a0:48:e2:05:
15:19:f5:16:2d:01:01:fc:15:3a:d0:fc:fc:03:be:
0f:e5:ed:5c:0e:7a:f6:93:5f:3a:8e:5e:a6:2a:d8:
c9:22:7d:1d:e9:84:18:c0:5e:ee:4f:2c:1a:bd:59:
76:6c:04:1c:b3:57:dd:b9:09:11:70:74:76:a6:f9:
40:17:2e:2d:5e:25:97:bd:f7:fd:4b:2d:f6:10:2d:
e3:d1:ce:bb:7d:d5:df:41:ca:fc:94:dc:f4:52:bd:
f8:4a:72:e3:08:d8:96:5a:90:63:d7:d3:7d:40:45:
13:37:65:61:05:56:97:68:d4:b5:f7:e5:e5:75:76:
dc:50:fd:06:94:99:e3:18:85:9e:1b:f3:7d:1d:ce:
ad:ef:0f:6f:2d:c2:0a:d0:05:b9:65:1a:d3:61:77:
43:6a:a4:c7:82:47:08:01:9a:ca:bb:cd:6e:7c:87:
24:62:ba:81:e8:dc:89:ea:11:9e:ea:3d:59:12:6e:
24:ad:e5:20:b2:d0:a1:09:4a:40:74:10:93:e2:f6:
9d:d9:ed:8a:aa:15:9a:4b:72:c9:81:52:d3:48:f6:
f8:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:7F:E7:21:20:F9:F7:5C:80:F1:99:B2:5A:4D:FA:11:2A:DB:08:D9
X509v3 Authority Key Identifier:
keyid:ED:76:65:29:0D:13:12:3E:BD:2C:11:CF:08:7D:83:FF:50:CB:72:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364C329/E383A4E0048D11EEA39B4C6A4AD9E6FC/7XZlKQ0TEj69LBHPCH2D_1DLck8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/7XZlKQ0TEj69LBHPCH2D_1DLck8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364C329/E383A4E0048D11EEA39B4C6A4AD9E6FC/1C76C5A02A1211F1AA077E8EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:b40::/32
Signature Algorithm: sha256WithRSAEncryption
c2:ac:fc:2d:d7:fe:78:de:cc:51:b5:c5:6e:9d:11:9e:14:f1:
ba:3a:a6:7e:d0:3c:b9:40:e1:4b:88:0b:c2:d4:44:71:a3:91:
78:bb:3b:33:32:26:e3:27:78:34:6b:bf:75:e5:80:92:24:6f:
b3:b0:8e:84:05:87:ba:15:c2:a2:1d:84:ea:80:2d:2c:89:de:
c8:46:0e:f9:09:e9:10:18:9e:ae:d6:05:98:2d:50:6e:ad:3b:
ab:fc:14:1b:e1:d7:4d:4f:bd:9b:3a:c6:78:39:a1:81:36:e5:
f0:5a:f9:85:4b:ba:4e:9f:8b:3e:cb:26:ea:d8:ad:ef:76:42:
27:e4:05:6c:a9:8c:a8:b0:2e:f5:ae:bd:e4:74:1b:34:b8:d5:
30:3f:69:0a:d9:c3:e8:3d:4a:a6:03:72:18:ac:da:ad:57:52:
34:2a:fd:78:91:5d:a2:9a:30:55:d1:34:c5:65:02:5e:c6:54:
ad:6c:4e:5d:f6:98:5c:d0:21:e2:32:8f:48:dc:86:b5:98:07:
6d:b6:41:ae:06:fb:89:4c:23:90:72:0f:73:d7:67:f4:e3:83:
92:25:44:c1:34:cc:74:64:bd:44:54:75:b7:ad:fd:83:1f:4c:
07:26:57:84:ee:7f:2c:a3:37:47:05:be:96:c3:95:b4:e1:6e:
24:8f:2f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:59:12 2026 by rpki-client