Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3651254/A1B323EE033511E6A6751974F8AEA228/F51E9D565D8E11F1BF85BDDCCE1D38B0.roa
File: F51E9D565D8E11F1BF85BDDCCE1D38B0.roa (raw, json)
Hash identifier: Cq1X1pSuZq05T1uvF/WP9w2h8895z8HWN/Vt7STbcSg=
Subject key identifier: 28:DC:C7:3F:89:C8:06:85:2A:DE:59:2F:AB:05:98:DA:58:A4:B2:4D
Certificate issuer: /CN=F3651254AF/serialNumber=E555DD940F3150185D591C2DAAE29F28EAEAF575
Certificate serial: 0EE2
Authority key identifier: E5:55:DD:94:0F:31:50:18:5D:59:1C:2D:AA:E2:9F:28:EA:EA:F5:75
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/5VXdlA8xUBhdWRwtquKfKOrq9XU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3651254/A1B323EE033511E6A6751974F8AEA228/F51E9D565D8E11F1BF85BDDCCE1D38B0.roa
Signing time: Mon 01 Jun 2026 07:53:21 +0000
ROA not before: Mon 01 Jun 2026 07:53:16 +0000
ROA not after: Sun 01 Jun 2036 07:53:16 +0000
asID: 37670
IP address blocks: 2c0f:fbc0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3651254/A1B323EE033511E6A6751974F8AEA228/5VXdlA8xUBhdWRwtquKfKOrq9XU.crl
rsync://rpki.afrinic.net/repository/member_repository/F3651254/A1B323EE033511E6A6751974F8AEA228/5VXdlA8xUBhdWRwtquKfKOrq9XU.mft
rsync://rpki.afrinic.net/repository/afrinic/5VXdlA8xUBhdWRwtquKfKOrq9XU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3810 (0xee2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3651254AF, serialNumber=E555DD940F3150185D591C2DAAE29F28EAEAF575
Validity
Not Before: Jun 1 07:53:16 2026 GMT
Not After : Jun 1 07:53:16 2036 GMT
Subject: CN=6a1d3a71-1869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:df:d6:0b:a1:6f:dd:a5:ac:a0:91:f1:54:7d:
5b:f5:1a:cb:4a:61:6d:a2:b9:f8:74:42:aa:fe:f5:
86:13:b0:8a:55:f0:9e:28:cc:f9:37:17:1d:61:28:
b2:65:5c:54:25:0c:5d:fd:6d:e7:c4:6e:88:68:6d:
ec:dd:90:ba:05:a3:d2:eb:0f:81:a7:db:d4:ab:bb:
de:7f:e2:e1:68:e2:68:61:e7:54:30:d2:fa:51:f4:
ae:ff:ec:15:74:ed:18:71:18:f1:0e:b7:6d:0f:0b:
e6:9f:6e:a4:49:40:f6:c5:58:a1:eb:ac:78:d1:4a:
dd:4c:97:88:10:20:33:46:7e:07:ae:f5:68:9c:f2:
31:f0:24:36:99:1a:08:f0:5a:fb:9d:06:af:e9:31:
77:1f:e6:b0:14:7e:eb:34:27:24:c4:4e:1b:ed:00:
15:aa:40:45:73:f5:b6:c6:ff:f1:8f:23:d9:4b:10:
93:f6:4f:0e:c1:dc:f8:d4:ab:99:a9:f4:32:9b:92:
25:15:86:cb:63:b7:a3:c9:82:e5:16:84:b3:ef:e7:
bf:86:ab:e9:13:61:2c:05:3b:94:87:ea:e9:43:89:
11:b3:cc:53:85:cc:80:e0:61:66:90:35:57:fb:da:
de:0d:7c:35:5b:6c:8d:35:6d:5a:77:19:94:8f:a6:
40:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:DC:C7:3F:89:C8:06:85:2A:DE:59:2F:AB:05:98:DA:58:A4:B2:4D
X509v3 Authority Key Identifier:
keyid:E5:55:DD:94:0F:31:50:18:5D:59:1C:2D:AA:E2:9F:28:EA:EA:F5:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3651254/A1B323EE033511E6A6751974F8AEA228/5VXdlA8xUBhdWRwtquKfKOrq9XU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5VXdlA8xUBhdWRwtquKfKOrq9XU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3651254/A1B323EE033511E6A6751974F8AEA228/F51E9D565D8E11F1BF85BDDCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:fbc0::/32
Signature Algorithm: sha256WithRSAEncryption
33:71:b3:e2:65:aa:59:3a:a5:ff:91:dd:59:a9:12:5a:df:8c:
f0:62:af:d0:7c:2b:3b:03:24:af:b3:03:5c:63:f0:42:ae:7a:
ee:d3:e0:f1:a7:7c:ab:53:cb:e5:84:4f:6b:0b:a4:2c:82:5e:
8c:e6:2e:e4:d1:85:35:82:7e:c7:67:b4:44:1c:49:52:6d:94:
8e:c4:87:f9:0a:1f:1b:e0:33:7a:9b:bd:37:ae:db:dd:e7:2b:
89:b7:24:ad:2c:32:a1:7b:92:af:fa:2f:4e:36:ac:89:aa:be:
e6:2a:15:d4:45:38:7f:fc:d6:6a:41:b5:f6:4a:fb:7e:a1:55:
21:3e:cf:99:02:fa:0a:8d:db:44:f7:62:b6:8b:b5:aa:0c:48:
7d:b6:83:98:ca:48:f9:e6:1b:7f:a0:ed:9c:43:96:a0:5d:49:
e6:1d:67:cd:e2:da:38:77:42:46:e4:ca:d0:9b:2f:46:8b:9e:
8f:f5:5e:17:09:92:77:38:27:2d:dc:33:58:59:07:88:5f:e5:
99:05:5e:99:69:d9:40:73:fd:b9:00:2f:38:0d:f8:f5:a8:4c:
03:a0:9f:54:71:4f:f6:71:ed:f7:c5:35:80:22:25:25:cb:b9:
78:4b:14:83:60:6d:72:97:fd:aa:c2:60:c1:e2:ca:38:6e:ef:
6c:9a:bc:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:26:50 2026 by rpki-client