Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3652210/010E0928F53C11F094A518DBDAE4EC9C/BDE8381464EC11F1B9F46B16CF1D38B0.roa
File: BDE8381464EC11F1B9F46B16CF1D38B0.roa (raw, json)
Hash identifier: dS50hNM0vgmUvFRZP+I95nVGs2EGX7v3v33q0mKTgXM=
Subject key identifier: 47:F5:29:E3:A5:29:2F:07:B6:9A:75:E0:6E:F2:42:EF:3F:81:10:9E
Certificate issuer: /CN=F3652210AF/serialNumber=75519AF48BCFD3BA46851652DF54B8B7EB88EDFF
Certificate serial: 96
Authority key identifier: 75:51:9A:F4:8B:CF:D3:BA:46:85:16:52:DF:54:B8:B7:EB:88:ED:FF
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/dVGa9IvP07pGhRZS31S4t-uI7f8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3652210/010E0928F53C11F094A518DBDAE4EC9C/BDE8381464EC11F1B9F46B16CF1D38B0.roa
Signing time: Wed 10 Jun 2026 16:52:19 +0000
ROA not before: Wed 10 Jun 2026 16:52:14 +0000
ROA not after: Tue 10 Jun 2036 16:52:14 +0000
asID: 37049
IP address blocks: 2c0e:7e00::/28 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3652210/010E0928F53C11F094A518DBDAE4EC9C/dVGa9IvP07pGhRZS31S4t-uI7f8.crl
rsync://rpki.afrinic.net/repository/member_repository/F3652210/010E0928F53C11F094A518DBDAE4EC9C/dVGa9IvP07pGhRZS31S4t-uI7f8.mft
rsync://rpki.afrinic.net/repository/afrinic/dVGa9IvP07pGhRZS31S4t-uI7f8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150 (0x96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3652210AF, serialNumber=75519AF48BCFD3BA46851652DF54B8B7EB88EDFF
Validity
Not Before: Jun 10 16:52:14 2026 GMT
Not After : Jun 10 16:52:14 2036 GMT
Subject: CN=6a299643-7b0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3e:d2:74:91:0d:a6:ee:b7:84:dd:79:85:2d:
91:01:c0:5c:bb:47:a8:e2:c4:3e:72:7b:da:fe:7f:
5a:5b:f1:ff:a6:a3:8e:dd:ea:80:50:0e:98:dc:0a:
e8:b6:aa:23:28:a3:4d:4e:be:32:67:07:e3:ac:3c:
22:ba:9f:78:0e:14:88:88:6f:45:28:d7:28:82:fd:
c1:dd:86:f3:33:ff:2e:6f:f0:5b:a6:e5:6d:a2:f4:
80:ff:d0:2f:dd:e0:be:7f:d9:7e:d3:e4:1e:77:bd:
c4:da:bf:d9:6c:bf:ce:0e:67:3f:5b:3c:39:40:8b:
96:49:14:32:31:d4:45:43:3d:a1:09:84:b8:6c:df:
b3:f4:a9:a6:73:29:db:54:1f:0c:d8:1a:0b:51:8d:
9f:eb:95:ec:90:75:a2:49:bb:f2:73:3d:44:01:83:
07:f0:f1:44:e0:4e:a2:53:e9:b4:15:b4:40:ea:46:
05:57:b4:0f:d0:7d:47:cd:ee:7b:3c:13:24:88:20:
70:7d:90:be:aa:70:4e:ed:41:f3:1b:b0:b7:d1:8f:
ce:25:8f:f3:7e:82:d1:74:e2:52:e4:a6:8e:44:ca:
d3:fd:8b:18:b0:2b:88:3d:3b:5f:c8:3f:ea:d6:70:
9d:1b:06:9b:ef:5c:d5:b2:b3:8f:65:d2:3f:4f:1a:
09:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:F5:29:E3:A5:29:2F:07:B6:9A:75:E0:6E:F2:42:EF:3F:81:10:9E
X509v3 Authority Key Identifier:
keyid:75:51:9A:F4:8B:CF:D3:BA:46:85:16:52:DF:54:B8:B7:EB:88:ED:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3652210/010E0928F53C11F094A518DBDAE4EC9C/dVGa9IvP07pGhRZS31S4t-uI7f8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/dVGa9IvP07pGhRZS31S4t-uI7f8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3652210/010E0928F53C11F094A518DBDAE4EC9C/BDE8381464EC11F1B9F46B16CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0e:7e00::/28
Signature Algorithm: sha256WithRSAEncryption
23:10:fe:e2:c4:cc:75:94:ed:17:40:46:8c:f8:05:a3:87:ec:
25:7f:e8:14:2c:32:72:17:b8:39:32:cd:93:89:ca:da:f1:d2:
fc:6d:39:b6:05:71:49:39:84:77:74:2a:e0:78:26:73:e9:6a:
85:ca:93:0a:f9:3c:2a:9e:48:9f:88:b3:c9:dd:d8:f6:da:bd:
15:32:ac:29:67:bb:ee:89:aa:aa:a9:ee:dc:6c:66:88:f5:52:
72:17:6e:bd:ec:1b:bd:18:e5:82:3c:93:25:e6:39:bd:44:bd:
63:48:fb:ab:d2:1c:42:ec:b0:b8:1f:af:19:79:cf:b7:c8:ef:
cc:5a:06:27:1b:86:1b:47:2a:ad:0a:07:69:ee:10:b6:c4:83:
1c:bd:12:d2:9d:9a:d4:4d:94:66:ab:33:cb:b9:57:78:f0:e5:
06:8e:3b:c2:e0:60:48:53:27:ff:72:6e:90:2e:10:3e:34:47:
87:cb:16:73:3a:4c:bb:1b:ad:f9:62:14:e2:01:5d:80:1c:27:
16:8a:3f:12:b4:06:d8:b8:3c:15:42:73:99:13:d1:c1:6a:dd:
cd:d6:4e:f0:6b:d0:bf:a0:63:36:de:02:02:38:68:dc:89:6b:
85:7b:f8:b7:cb:31:20:e1:c5:b1:05:0b:9d:87:92:4a:80:41:
8d:2c:75:8b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAJYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTIyMTBBRjExMC8GA1UEBRMoNzU1MTlBRjQ4QkNGRDNCQTQ2ODUxNjUyREY1NEI4
QjdFQjg4RURGRjAeFw0yNjA2MTAxNjUyMTRaFw0zNjA2MTAxNjUyMTRaMBgxFjAU
BgNVBAMTDTZhMjk5NjQzLTdiMGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCpPtJ0kQ2m7reE3XmFLZEBwFy7R6jixD5ye9r+f1pb8f+mo47d6oBQDpjc
Cui2qiMoo01OvjJnB+OsPCK6n3gOFIiIb0Uo1yiC/cHdhvMz/y5v8Fum5W2i9ID/
0C/d4L5/2X7T5B53vcTav9lsv84OZz9bPDlAi5ZJFDIx1EVDPaEJhLhs37P0qaZz
KdtUHwzYGgtRjZ/rleyQdaJJu/JzPUQBgwfw8UTgTqJT6bQVtEDqRgVXtA/QfUfN
7ns8EySIIHB9kL6qcE7tQfMbsLfRj84lj/N+gtF04lLkpo5EytP9ixiwK4g9O1/I
P+rWcJ0bBpvvXNWys49l0j9PGgmTAgMBAAGjggKmMIICojAdBgNVHQ4EFgQUR/Up
46UpLwe2mnXgbvJC7z+BEJ4wHwYDVR0jBBgwFoAUdVGa9IvP07pGhRZS31S4t+uI
7f8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjUyMjEwLzAxMEUwOTI4RjUzQzExRjA5NEE1MThEQkRBRTRFQzlDL2RWR2E5
SXZQMDdwR2hSWlMzMVM0dC11STdmOC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2RWR2E5SXZQMDdwR2hSWlMzMVM0dC11STdmOC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjUyMjEwLzAxMEUwOTI4RjUzQzExRjA5NEE1MThEQkRB
RTRFQzlDL0JERTgzODE0NjRFQzExRjFCOUY0NkIxNkNGMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQQsDn4AMA0GCSqGSIb3DQEB
CwUAA4IBAQAjEP7ixMx1lO0XQEaM+AWjh+wlf+gULDJyF7g5Ms2Ticra8dL8bTm2
BXFJOYR3dCrgeCZz6WqFypMK+TwqnkifiLPJ3dj22r0VMqwpZ7vuiaqqqe7cbGaI
9VJyF2697Bu9GOWCPJMl5jm9RL1jSPur0hxC7LC4H68Zec+3yO/MWgYnG4YbRyqt
Cgdp7hC2xIMcvRLSnZrUTZRmqzPLuVd48OUGjjvC4GBIUyf/cm6QLhA+NEeHyxZz
Oky7G635YhTiAV2AHCcWij8StAbYuDwVQnOZE9HBat3N1k7wa9C/oGM23gICOGjc
iWuFe/i3yzEg4cWxBQudh5JKgEGNLHWL
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:56:28 2026 by rpki-client