Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/6830E0DE63C911F1909C6ABBCE1D38B0.roa
File: 6830E0DE63C911F1909C6ABBCE1D38B0.roa (raw, json)
Hash identifier: LTcaq+viAgTZopGZOI0Vgv6RTw1bKNW1o2RpYagdufs=
Subject key identifier: 61:72:81:F5:25:92:02:82:B2:FC:91:A1:B5:6A:A3:C4:08:B2:AD:7C
Certificate issuer: /CN=F3696E5FAF/serialNumber=5375CF4CA1643B08C341BDA79D8BE105BDC3C48B
Certificate serial: 05FE
Authority key identifier: 53:75:CF:4C:A1:64:3B:08:C3:41:BD:A7:9D:8B:E1:05:BD:C3:C4:8B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/U3XPTKFkOwjDQb2nnYvhBb3DxIs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/6830E0DE63C911F1909C6ABBCE1D38B0.roa
Signing time: Tue 09 Jun 2026 06:06:51 +0000
ROA not before: Tue 09 Jun 2026 06:06:47 +0000
ROA not after: Tue 31 Dec 2030 06:06:47 +0000
asID: 25818
IP address blocks: 41.202.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/U3XPTKFkOwjDQb2nnYvhBb3DxIs.crl
rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/U3XPTKFkOwjDQb2nnYvhBb3DxIs.mft
rsync://rpki.afrinic.net/repository/afrinic/U3XPTKFkOwjDQb2nnYvhBb3DxIs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1534 (0x5fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3696E5FAF, serialNumber=5375CF4CA1643B08C341BDA79D8BE105BDC3C48B
Validity
Not Before: Jun 9 06:06:47 2026 GMT
Not After : Dec 31 06:06:47 2030 GMT
Subject: CN=6a27ad7b-8f7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:02:8f:04:e0:4a:6d:ab:fd:93:a9:3a:1e:ca:
67:f4:7c:bb:8e:5e:69:73:a1:40:ed:55:cf:4f:29:
d0:04:ed:5a:f2:96:ed:25:a1:23:aa:47:12:cc:c2:
14:ee:26:b2:6b:86:03:2c:15:90:d1:45:55:32:e8:
1d:bd:2b:04:30:80:c1:b5:97:b5:7b:79:14:35:1c:
48:a5:ae:c8:60:45:ec:6f:ac:37:bf:dc:4a:cd:89:
74:63:9e:3b:fb:03:d2:0d:58:22:9a:13:af:fb:6e:
1e:df:5a:8e:bc:f7:1f:e8:41:a3:2b:c7:44:43:94:
a7:d2:98:5c:a4:99:9a:0b:44:0f:e9:e6:88:78:61:
d5:e2:07:19:88:a3:8c:9e:ab:98:f8:10:dc:b8:19:
e3:40:09:8e:ae:68:c7:f2:8c:f0:cc:cd:b0:fe:90:
de:97:84:ab:60:a9:4e:f9:d0:1c:f5:da:16:1f:82:
5a:c9:0d:46:6f:49:ae:44:c8:a6:c5:aa:ad:d5:38:
40:b2:7e:6d:8e:f8:d5:f0:81:5e:7f:21:fb:f6:83:
14:5e:af:88:59:81:4b:73:c6:ec:e8:42:59:37:0b:
c7:2a:5f:7e:69:97:ab:4d:ba:18:ae:9b:93:19:72:
e9:b9:e4:b8:0d:fc:4a:75:fe:54:84:1d:dc:b5:fb:
26:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:72:81:F5:25:92:02:82:B2:FC:91:A1:B5:6A:A3:C4:08:B2:AD:7C
X509v3 Authority Key Identifier:
keyid:53:75:CF:4C:A1:64:3B:08:C3:41:BD:A7:9D:8B:E1:05:BD:C3:C4:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/U3XPTKFkOwjDQb2nnYvhBb3DxIs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/U3XPTKFkOwjDQb2nnYvhBb3DxIs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/6830E0DE63C911F1909C6ABBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.202.32.0/19
Signature Algorithm: sha256WithRSAEncryption
06:17:34:6d:4a:6b:12:8c:e0:01:7c:e6:71:33:54:a9:6a:13:
33:84:8e:91:46:dd:13:67:89:02:31:ed:a7:51:4b:83:1b:3c:
8f:5a:02:8d:00:50:41:3b:10:25:6e:94:4a:ea:95:5f:28:4c:
aa:a2:35:0e:2e:58:97:f3:e9:07:70:cd:15:e2:22:5d:90:d3:
b9:e0:cf:a3:81:11:c9:fd:c8:d1:61:9a:d3:7b:8a:5f:fd:5a:
76:97:55:31:40:84:89:28:94:58:27:0e:e4:a6:16:54:bf:06:
cc:72:84:ad:97:2a:df:f0:2b:fa:ae:07:5b:de:49:ff:00:91:
59:23:05:80:a3:bd:3d:94:89:0c:7f:c5:26:23:04:80:60:64:
db:7b:64:61:83:6d:4c:f7:8c:65:fc:11:a5:1d:27:96:78:e7:
a5:f7:28:bb:6c:f0:24:37:73:90:d4:10:6e:01:de:58:9e:e0:
21:62:73:67:a8:f6:f8:90:60:6f:34:6c:55:89:49:d4:02:48:
c4:5d:c3:cd:c8:35:03:0e:4e:66:01:13:a5:cc:b1:b1:c1:d1:
d7:60:d4:ef:3b:7c:0d:ae:6f:f9:30:e0:4a:66:15:75:6c:1a:
fb:88:ec:71:79:8d:4f:34:15:4d:f0:83:c7:6a:d1:6e:c8:8f:
a6:ea:40:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:18:45 2026 by rpki-client