Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365765F/E81D06FEE9FA11F09E5B33D1DAE4EC9C/8CF30386058A11F1A72195A5DAE4EC9C.roa
File: 8CF30386058A11F1A72195A5DAE4EC9C.roa (raw, json)
Hash identifier: C95tO9TS1ZdCb5Dj1rN7bJt39X5z6UyZZBVb/aGhVvw=
Subject key identifier: FB:31:93:3C:9C:02:5A:E7:72:76:28:E1:17:75:9A:C0:8D:99:01:1B
Certificate issuer: /CN=F365765FAF/serialNumber=BEB4B1BBB7D57080B9F6F46496FC146705F431F7
Certificate serial: 3A
Authority key identifier: BE:B4:B1:BB:B7:D5:70:80:B9:F6:F4:64:96:FC:14:67:05:F4:31:F7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/vrSxu7fVcIC59vRklvwUZwX0Mfc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F365765F/E81D06FEE9FA11F09E5B33D1DAE4EC9C/8CF30386058A11F1A72195A5DAE4EC9C.roa
Signing time: Mon 09 Feb 2026 07:40:06 +0000
ROA not before: Mon 09 Feb 2026 07:40:01 +0000
ROA not after: Wed 31 Mar 2027 07:40:01 +0000
asID: 328614
IP address blocks: 2c0f:5a0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F365765F/E81D06FEE9FA11F09E5B33D1DAE4EC9C/vrSxu7fVcIC59vRklvwUZwX0Mfc.crl
rsync://rpki.afrinic.net/repository/member_repository/F365765F/E81D06FEE9FA11F09E5B33D1DAE4EC9C/vrSxu7fVcIC59vRklvwUZwX0Mfc.mft
rsync://rpki.afrinic.net/repository/afrinic/vrSxu7fVcIC59vRklvwUZwX0Mfc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58 (0x3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F365765FAF, serialNumber=BEB4B1BBB7D57080B9F6F46496FC146705F431F7
Validity
Not Before: Feb 9 07:40:01 2026 GMT
Not After : Mar 31 07:40:01 2027 GMT
Subject: CN=69898f56-855e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:77:5b:01:2c:50:25:ac:69:33:8d:64:66:01:
6d:59:55:1a:e0:7f:9f:ca:e4:b2:2e:4c:b3:8c:b9:
a0:48:c6:4c:2f:8c:7c:b8:ae:3f:48:84:44:2a:16:
8a:fb:17:72:30:93:a9:47:5c:46:02:e2:5e:01:72:
4d:36:bc:23:ec:33:f2:b9:53:e7:43:e5:ea:0f:23:
b9:ad:45:af:90:da:68:fa:09:f6:c8:54:17:6c:58:
63:5f:d7:57:3a:dc:3d:f4:41:62:a3:ef:c1:01:48:
be:88:31:45:eb:40:e7:2d:63:5c:e1:b6:1c:81:4a:
0a:5b:61:1e:73:c4:d0:f1:9a:bf:7f:a6:e2:ef:3f:
12:88:46:39:39:a9:66:4a:dd:14:e8:92:37:2d:3d:
73:e1:fd:7f:eb:91:e2:39:9b:d5:16:54:72:c9:3d:
fa:f8:83:ee:ed:73:56:c2:bb:65:13:fb:5e:17:b4:
37:8d:64:11:16:87:fc:01:8c:96:87:d1:40:6a:52:
15:d2:7d:a4:9e:cb:6f:c5:78:81:66:f1:87:51:72:
2f:37:f9:2b:f9:fa:e9:5f:b6:33:56:a8:8c:bc:db:
52:db:c0:ec:cb:b1:f2:f3:5d:98:c7:9a:75:ea:16:
23:2f:96:9d:4c:de:42:4d:16:c9:23:95:6e:8e:33:
18:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:31:93:3C:9C:02:5A:E7:72:76:28:E1:17:75:9A:C0:8D:99:01:1B
X509v3 Authority Key Identifier:
keyid:BE:B4:B1:BB:B7:D5:70:80:B9:F6:F4:64:96:FC:14:67:05:F4:31:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F365765F/E81D06FEE9FA11F09E5B33D1DAE4EC9C/vrSxu7fVcIC59vRklvwUZwX0Mfc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vrSxu7fVcIC59vRklvwUZwX0Mfc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365765F/E81D06FEE9FA11F09E5B33D1DAE4EC9C/8CF30386058A11F1A72195A5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:5a0::/32
Signature Algorithm: sha256WithRSAEncryption
74:6d:90:3f:89:d8:64:c1:65:b5:bd:86:a5:f3:3a:ad:df:ea:
b4:40:15:b0:3f:9f:6e:d6:a6:5a:65:22:9f:67:39:6d:57:2e:
c7:b4:71:cb:80:af:da:64:b1:43:05:b2:c1:12:c5:7d:aa:74:
f1:d8:15:39:97:da:39:48:af:66:95:ea:69:d2:a3:3c:2d:fa:
78:1b:e7:31:05:6b:e6:ce:74:e8:4c:c9:54:43:bb:fb:1d:1a:
15:bd:43:c4:de:77:b4:27:2d:0b:a9:85:65:17:e0:04:e2:b2:
86:68:c7:86:9f:da:3b:4d:e3:3f:fb:69:c9:06:cc:d1:56:d1:
cc:02:af:05:f9:e7:13:0c:f0:6b:9f:17:ab:9f:fc:a0:4b:47:
bb:77:d8:fe:42:67:07:d4:d3:c3:71:81:87:2b:5a:01:fe:85:
02:e7:6a:d2:1d:f5:f4:a8:f0:14:5e:fd:da:cd:58:ef:b8:4b:
51:6d:cf:5e:43:7a:9f:e7:0e:7f:9f:4d:18:08:24:0e:fd:57:
91:5c:6a:0b:f5:ac:03:62:a3:01:8a:77:2b:c1:7e:ae:59:c9:
4a:db:6c:4d:37:44:8a:0f:43:c4:bf:b2:fc:17:01:77:dd:a8:
98:40:6e:10:20:8a:fd:36:72:5f:b6:10:f7:fc:2b:15:58:32:
29:fd:39:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:55:00 2026 by rpki-client