Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/AA4074F289D111F1A802EACFCE1D38B0.roa
File: AA4074F289D111F1A802EACFCE1D38B0.roa (raw, json)
Hash identifier: hem0zIKLtZeNSIWMoz0rSJx/832FRGAE3aQ/wjA206w=
Subject key identifier: 79:72:D8:FB:D4:3D:FC:35:60:7E:E4:31:B3:AF:7A:2B:A5:A7:17:FE
Certificate issuer: /CN=F3655EE4AF/serialNumber=0A67B10E169AAFA30350E377931331D91F39AB96
Certificate serial: 09C3
Authority key identifier: 0A:67:B1:0E:16:9A:AF:A3:03:50:E3:77:93:13:31:D9:1F:39:AB:96
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CmexDhaar6MDUON3kxMx2R85q5Y.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/AA4074F289D111F1A802EACFCE1D38B0.roa
Signing time: Mon 27 Jul 2026 15:41:43 +0000
ROA not before: Mon 27 Jul 2026 15:41:38 +0000
ROA not after: Wed 08 Jun 2033 15:41:38 +0000
asID: 37650
IP address blocks: 2c0f:f460::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.crl
rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.mft
rsync://rpki.afrinic.net/repository/afrinic/CmexDhaar6MDUON3kxMx2R85q5Y.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 01:40:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2499 (0x9c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3655EE4AF, serialNumber=0A67B10E169AAFA30350E377931331D91F39AB96
Validity
Not Before: Jul 27 15:41:38 2026 GMT
Not After : Jun 8 15:41:38 2033 GMT
Subject: CN=6a677c36-769b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:8c:8e:a8:23:a8:28:41:68:03:f9:a6:4f:0a:
14:6c:a9:1d:00:c8:6e:c6:7c:e7:3b:3c:63:45:44:
38:29:8d:0c:19:93:d9:a5:d4:ce:53:40:11:07:35:
b9:c7:4b:c2:6d:cb:91:b0:ef:9b:3a:ca:87:f7:b9:
4f:b1:73:68:e1:1a:28:20:e3:ef:1c:91:f0:7b:6b:
73:94:2b:9a:f7:c9:23:3c:70:45:66:a6:3f:76:00:
07:92:7b:cc:62:f8:59:94:4b:8f:5b:f3:83:7e:49:
66:d2:04:32:59:1c:77:56:24:4c:4e:a8:89:3e:3b:
b7:c8:68:d1:46:ba:ab:4a:c9:3c:51:e9:47:cc:15:
fd:7a:aa:bb:70:ee:eb:72:de:ef:05:9f:a6:84:5d:
c8:97:57:3e:d0:7b:06:9c:53:db:b1:f4:cd:cb:21:
f3:77:98:e6:8d:a2:c7:23:d5:1f:d0:7d:d0:fb:2d:
b7:6b:ac:4b:8f:f6:4d:8b:69:65:04:5c:ed:7c:81:
03:18:2e:4f:b1:0b:d1:3f:c8:71:14:30:92:ef:f5:
d6:87:38:49:fc:25:42:56:2f:e5:29:d1:0a:2b:1e:
26:df:6d:f4:e2:e8:18:6c:72:44:fe:d8:c6:6e:f3:
56:9f:66:b9:41:92:46:8e:99:f0:e8:8e:07:ba:e7:
09:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:72:D8:FB:D4:3D:FC:35:60:7E:E4:31:B3:AF:7A:2B:A5:A7:17:FE
X509v3 Authority Key Identifier:
keyid:0A:67:B1:0E:16:9A:AF:A3:03:50:E3:77:93:13:31:D9:1F:39:AB:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CmexDhaar6MDUON3kxMx2R85q5Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/AA4074F289D111F1A802EACFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:f460::/32
Signature Algorithm: sha256WithRSAEncryption
a5:64:2c:6e:b4:0a:77:b5:2b:e9:ce:14:b5:08:d4:fa:7b:f5:
ef:52:75:a7:e5:a2:67:79:c5:40:a2:aa:0f:e8:3f:8c:85:7d:
80:90:87:84:db:f9:a0:cf:f6:3f:83:47:65:03:bb:31:e3:15:
ae:4e:b8:cf:91:b0:18:20:90:28:be:60:04:cb:43:63:3f:ae:
ce:4b:88:c2:16:32:17:08:10:24:1f:3f:78:dd:dc:93:a7:89:
d4:a7:1f:c0:f9:a1:d3:1c:cd:1f:08:41:50:d0:32:ff:1d:ab:
84:f5:c6:ab:6a:1d:49:34:dc:43:52:69:41:e9:5b:7c:1b:3c:
b3:e4:58:be:50:a2:44:9f:4d:bb:32:24:91:56:e4:fe:12:76:
9f:ac:06:8c:de:21:38:bc:df:f8:5d:9a:97:f5:8c:9c:f3:1d:
da:e8:a0:d8:75:5e:2f:86:3d:a9:d0:dc:b9:6e:2c:0b:73:00:
46:2c:53:9c:6c:ff:2a:82:df:2e:1d:41:64:35:c9:ff:32:9b:
93:39:f4:07:28:5c:37:34:d7:da:84:79:3a:ee:24:d5:88:dd:
97:9c:83:c8:54:55:bd:e2:af:f7:37:37:65:8e:ed:eb:20:c6:
03:98:25:1e:3f:e0:69:3f:8a:d8:53:af:f2:a0:96:f6:1c:b2:
32:d9:a1:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:00:20 2026 by rpki-client