Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3664F7B/52128B188A4D11F1AE1B3ECFCE1D38B0/F26EC26A8A4E11F1B7AEDED7CE1D38B0.roa
File: F26EC26A8A4E11F1B7AEDED7CE1D38B0.roa (raw, json)
Hash identifier: aCcxDmtX/tnLhZ6JcUFSofoUniwx3floStRDNlGRoHU=
Subject key identifier: DD:8C:64:F9:81:D9:BE:1E:3B:1E:03:C4:F1:30:00:74:7B:04:AB:E0
Certificate issuer: /CN=F3664F7BAF/serialNumber=5E3C3F19D34150AB3D3BF4C27F6B11658ADD51BC
Certificate serial: 06
Authority key identifier: 5E:3C:3F:19:D3:41:50:AB:3D:3B:F4:C2:7F:6B:11:65:8A:DD:51:BC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Xjw_GdNBUKs9O_TCf2sRZYrdUbw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3664F7B/52128B188A4D11F1AE1B3ECFCE1D38B0/F26EC26A8A4E11F1B7AEDED7CE1D38B0.roa
Signing time: Tue 28 Jul 2026 06:38:31 +0000
ROA not before: Tue 28 Jul 2026 06:38:27 +0000
ROA not after: Mon 28 Jul 2031 06:38:27 +0000
asID: 328388
IP address blocks: 2c0f:25c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3664F7B/52128B188A4D11F1AE1B3ECFCE1D38B0/Xjw_GdNBUKs9O_TCf2sRZYrdUbw.crl
rsync://rpki.afrinic.net/repository/member_repository/F3664F7B/52128B188A4D11F1AE1B3ECFCE1D38B0/Xjw_GdNBUKs9O_TCf2sRZYrdUbw.mft
rsync://rpki.afrinic.net/repository/afrinic/Xjw_GdNBUKs9O_TCf2sRZYrdUbw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 06:38:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3664F7BAF, serialNumber=5E3C3F19D34150AB3D3BF4C27F6B11658ADD51BC
Validity
Not Before: Jul 28 06:38:27 2026 GMT
Not After : Jul 28 06:38:27 2031 GMT
Subject: CN=6a684e67-4e06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f3:94:93:8d:8a:b9:d9:79:fa:57:27:b3:ff:
1f:09:24:15:d9:7c:75:02:63:fc:4e:77:f5:55:74:
01:da:66:b2:a5:65:f4:26:bd:a1:cf:b7:01:86:ae:
b2:2b:57:06:67:57:cb:70:c4:52:84:32:93:2a:d8:
a4:5e:f7:a1:1f:95:1e:1c:88:13:cc:5c:25:e4:5a:
01:7e:6a:3e:e3:de:7a:cc:d2:88:f0:cd:23:1b:a8:
6f:18:38:b3:ba:97:13:77:13:39:b3:3c:e4:64:d2:
60:4b:20:42:34:5b:ee:22:01:87:f8:3f:81:c0:6e:
c9:f2:b7:96:fa:28:94:11:88:ca:a3:95:ba:4a:14:
e5:83:7f:66:75:f3:b6:99:92:52:61:3a:e6:55:e8:
db:d3:f7:47:17:4d:ec:74:b5:22:c3:e8:24:16:84:
ab:56:0d:5c:6a:ad:bd:19:9a:c6:34:74:e4:9c:73:
f9:bd:18:e0:d7:c4:c0:e7:ff:8e:27:f4:a5:bd:84:
b5:8b:5a:72:02:56:26:6f:07:d7:14:2d:87:1e:65:
e9:74:09:42:45:8c:07:07:12:d9:8c:3a:9b:9f:c4:
a8:96:70:68:cb:7b:e3:f7:38:bf:e9:08:75:88:5e:
52:27:60:b2:96:f2:fd:6f:bf:7d:30:a0:19:05:2d:
8a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:8C:64:F9:81:D9:BE:1E:3B:1E:03:C4:F1:30:00:74:7B:04:AB:E0
X509v3 Authority Key Identifier:
keyid:5E:3C:3F:19:D3:41:50:AB:3D:3B:F4:C2:7F:6B:11:65:8A:DD:51:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3664F7B/52128B188A4D11F1AE1B3ECFCE1D38B0/Xjw_GdNBUKs9O_TCf2sRZYrdUbw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Xjw_GdNBUKs9O_TCf2sRZYrdUbw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3664F7B/52128B188A4D11F1AE1B3ECFCE1D38B0/F26EC26A8A4E11F1B7AEDED7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:25c0::/32
Signature Algorithm: sha256WithRSAEncryption
8c:c5:78:82:71:55:4c:35:a5:bc:47:22:05:6b:74:58:72:e7:
03:32:42:12:e4:69:73:d6:6e:17:61:e1:c2:a7:4a:b3:06:13:
73:c9:a5:5e:2f:a3:76:2a:6c:61:4b:f7:98:15:53:83:6c:b9:
bf:f3:e3:62:e8:45:94:da:46:0a:86:cd:cb:4a:bb:89:ec:b8:
a9:8c:63:08:2a:31:57:f1:c4:02:18:a7:e7:18:00:75:b3:87:
88:7a:95:84:dc:34:e8:b4:5f:72:78:8c:05:eb:1d:78:af:80:
f3:43:47:2e:4c:df:6d:fe:78:9a:53:65:59:a4:65:ac:c4:90:
b0:7e:7a:96:42:f0:e9:40:1d:bf:93:23:e3:21:14:b4:a9:d4:
4c:a6:fe:55:f1:6b:f2:00:47:a9:c9:55:2c:fa:f6:56:e9:5a:
27:d6:21:da:53:b2:73:6d:a7:5d:2d:60:0a:33:0d:af:ed:5f:
f1:2f:5c:27:06:f8:62:29:01:a7:9a:c0:1a:1d:57:11:6e:6e:
75:93:8e:cf:7b:de:24:80:de:a0:60:5c:21:97:65:bc:78:93:
6e:c4:a2:f6:e5:83:bc:52:f5:71:65:04:31:2d:a0:4d:c7:16:
76:46:1a:28:f0:97:85:ff:b8:03:bb:18:5c:3c:c2:7a:bb:ba:
02:56:14:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:04:08 2026 by rpki-client