Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/621AA83C2CED11F1BD66A280DAE4EC9C.roa
File: 621AA83C2CED11F1BD66A280DAE4EC9C.roa (raw, json)
Hash identifier: aW8sKhCXcHPjuzp5UNhH+Nw6XIrL1+PMzKJWjjR5zDM=
Subject key identifier: 58:5E:F1:AA:7C:F5:9F:5F:0C:B1:61:BD:65:F6:CD:78:65:96:99:49
Certificate issuer: /CN=F3663954AF/serialNumber=DDE405A3B9E32CBD199087597D6F290B6C341BCD
Certificate serial: 03F8
Authority key identifier: DD:E4:05:A3:B9:E3:2C:BD:19:90:87:59:7D:6F:29:0B:6C:34:1B:CD
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/3eQFo7njLL0ZkIdZfW8pC2w0G80.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/621AA83C2CED11F1BD66A280DAE4EC9C.roa
Signing time: Tue 31 Mar 2026 10:35:49 +0000
ROA not before: Tue 31 Mar 2026 10:35:45 +0000
ROA not after: Wed 04 Apr 2029 10:35:45 +0000
asID: 37266
IP address blocks: 2c0f:fdd8:1000::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/3eQFo7njLL0ZkIdZfW8pC2w0G80.crl
rsync://rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/3eQFo7njLL0ZkIdZfW8pC2w0G80.mft
rsync://rpki.afrinic.net/repository/afrinic/3eQFo7njLL0ZkIdZfW8pC2w0G80.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 03:34:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1016 (0x3f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3663954AF, serialNumber=DDE405A3B9E32CBD199087597D6F290B6C341BCD
Validity
Not Before: Mar 31 10:35:45 2026 GMT
Not After : Apr 4 10:35:45 2029 GMT
Subject: CN=69cba385-a201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:00:79:6d:dc:b8:a3:d7:3f:65:30:ab:87:75:
3d:47:76:07:12:10:a9:9d:0b:c2:72:73:d4:8d:a9:
ce:a1:3a:5e:b3:50:b9:52:99:69:bf:20:f3:70:34:
18:1e:28:a2:73:e5:c0:8a:0d:3e:bb:ea:8f:62:b4:
12:8f:ca:39:ac:ea:a9:5e:64:11:4b:1a:f8:19:98:
6f:84:43:95:7e:73:4e:17:e8:69:6e:28:b3:c3:c9:
7d:92:46:f0:79:90:d1:96:99:c8:5c:59:2a:87:e8:
1e:eb:9d:dc:d1:ac:d2:e4:b1:ff:e6:f5:8b:82:cc:
34:c7:a1:38:ff:fb:b1:43:8c:55:77:da:e3:d9:cf:
4d:bf:fe:69:3b:1b:6f:3b:d4:2d:85:2d:4d:e0:1d:
da:0c:e3:73:c1:25:36:fc:a5:52:d9:29:50:eb:23:
3c:00:fb:c8:ec:fa:ca:49:53:21:c3:be:5d:83:da:
d0:fd:6c:3b:ac:ff:2f:a2:50:66:0f:95:8a:02:25:
7b:57:1b:8d:6f:7c:6a:1f:05:26:42:6e:2d:9d:09:
21:c4:84:7d:83:2f:90:07:b3:18:33:9c:34:70:d3:
4c:ef:03:95:e5:d7:7c:eb:f1:6d:85:45:01:b1:17:
5d:de:e2:40:75:47:97:4f:ea:a7:ca:c3:03:57:89:
54:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:5E:F1:AA:7C:F5:9F:5F:0C:B1:61:BD:65:F6:CD:78:65:96:99:49
X509v3 Authority Key Identifier:
keyid:DD:E4:05:A3:B9:E3:2C:BD:19:90:87:59:7D:6F:29:0B:6C:34:1B:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/3eQFo7njLL0ZkIdZfW8pC2w0G80.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3eQFo7njLL0ZkIdZfW8pC2w0G80.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/621AA83C2CED11F1BD66A280DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:fdd8:1000::/38
Signature Algorithm: sha256WithRSAEncryption
19:af:ec:3d:1f:99:05:ac:eb:9b:67:31:28:b4:0b:27:36:ab:
cc:47:95:0b:bf:06:71:42:72:4b:2b:d1:62:e6:c7:e1:a9:2d:
b8:fd:d8:2c:70:ab:41:c0:12:e0:ee:43:a4:fb:ee:39:6f:81:
6c:f5:1e:1c:79:1d:ea:bf:a9:0c:ae:6b:c6:36:90:68:fc:7a:
fa:63:ef:1c:06:3c:c9:a3:c2:ee:0c:0c:61:ae:76:e8:fd:5c:
23:f6:09:e7:c7:1d:61:dd:07:0a:10:47:b7:01:27:7a:5a:6d:
a3:13:92:a5:7b:9f:83:2c:ef:b4:7c:b1:80:04:2d:e5:1a:fe:
86:55:84:34:ff:88:00:d7:62:d0:cb:10:f6:d7:74:4f:cf:14:
8c:44:9a:cb:1b:73:5c:6f:c0:73:52:81:35:eb:40:9a:77:85:
93:14:40:db:62:d8:dd:7e:9f:2c:5d:4a:81:70:47:cd:71:fa:
cf:59:27:72:f1:a4:c7:dd:6a:83:e7:5a:5b:c1:ff:77:b0:24:
02:a1:ba:cf:57:7f:4f:59:d5:68:08:97:4b:52:de:3c:98:7d:
33:fd:eb:d8:43:5b:fc:4d:f2:fe:e9:2d:3e:d0:cc:6f:bc:9c:
46:19:17:66:79:8c:0f:0b:b6:41:85:c9:4c:e1:9d:ca:60:fa:
45:34:67:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:03:12 2026 by rpki-client