Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369E1AE/A3E2EC72A56611EEBE59906AD25BE465/B919C81C65D111F1BEB357FFCE1D38B0.roa
File: B919C81C65D111F1BEB357FFCE1D38B0.roa (raw, json)
Hash identifier: x2d+bsJIxu+I4SIhjiWk8t+DzbcsDbeFDy/rEZKeKBk=
Subject key identifier: 01:2E:58:6D:44:72:1C:57:E3:61:17:34:7B:26:5B:E7:35:2C:49:84
Certificate issuer: /CN=F369E1AEAF/serialNumber=0F4125AD2CD2BD8B3AE162F3E322E5F58104755C
Certificate serial: 03A1
Authority key identifier: 0F:41:25:AD:2C:D2:BD:8B:3A:E1:62:F3:E3:22:E5:F5:81:04:75:5C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/D0ElrSzSvYs64WLz4yLl9YEEdVw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369E1AE/A3E2EC72A56611EEBE59906AD25BE465/B919C81C65D111F1BEB357FFCE1D38B0.roa
Signing time: Thu 11 Jun 2026 20:11:26 +0000
ROA not before: Thu 11 Jun 2026 20:11:20 +0000
ROA not after: Sun 11 Jun 2028 20:11:20 +0000
asID: 328286
IP address blocks: 2c0f:ea0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369E1AE/A3E2EC72A56611EEBE59906AD25BE465/D0ElrSzSvYs64WLz4yLl9YEEdVw.crl
rsync://rpki.afrinic.net/repository/member_repository/F369E1AE/A3E2EC72A56611EEBE59906AD25BE465/D0ElrSzSvYs64WLz4yLl9YEEdVw.mft
rsync://rpki.afrinic.net/repository/afrinic/D0ElrSzSvYs64WLz4yLl9YEEdVw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 929 (0x3a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369E1AEAF, serialNumber=0F4125AD2CD2BD8B3AE162F3E322E5F58104755C
Validity
Not Before: Jun 11 20:11:20 2026 GMT
Not After : Jun 11 20:11:20 2028 GMT
Subject: CN=6a2b166d-aed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0c:dc:55:01:b8:94:f1:0e:bd:e0:99:2e:84:
ba:a1:35:d9:49:23:56:5f:eb:52:93:36:66:24:24:
82:24:03:b6:40:0c:a6:b8:a9:6a:0d:bf:a0:4d:d5:
df:80:24:33:1d:28:df:76:e3:95:90:58:01:54:60:
e0:95:d9:4c:08:fe:a1:d1:4a:77:ab:ff:8b:3e:01:
45:ae:99:87:61:6e:93:10:1e:24:7f:1b:fe:be:a0:
62:c0:04:db:57:eb:db:a5:df:98:0a:c7:f6:b5:1a:
4c:86:d5:f4:2c:e1:27:9d:52:34:4a:b3:ae:e6:fb:
a0:bd:aa:cb:72:a8:d4:b6:d3:db:e5:a7:06:6a:47:
08:a2:5e:e7:e6:10:90:c6:5b:d4:d0:8d:fc:a0:c2:
9e:05:e7:bc:97:4c:02:63:01:6b:01:af:eb:cf:d0:
41:af:55:b6:b3:01:81:4f:38:c2:66:48:df:e3:29:
93:4e:18:0f:6b:57:88:78:53:be:91:68:14:59:fb:
fc:0f:f5:e2:54:05:e4:c5:c6:14:5f:56:c6:d0:08:
30:25:60:eb:b4:4b:99:f1:9b:68:ea:21:a6:fd:4b:
a2:a8:41:3e:c9:f0:a0:a4:df:0c:b3:47:c4:c7:11:
c9:81:5d:1f:90:3c:a9:17:01:c0:ab:96:9b:fc:15:
11:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:2E:58:6D:44:72:1C:57:E3:61:17:34:7B:26:5B:E7:35:2C:49:84
X509v3 Authority Key Identifier:
keyid:0F:41:25:AD:2C:D2:BD:8B:3A:E1:62:F3:E3:22:E5:F5:81:04:75:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369E1AE/A3E2EC72A56611EEBE59906AD25BE465/D0ElrSzSvYs64WLz4yLl9YEEdVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/D0ElrSzSvYs64WLz4yLl9YEEdVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369E1AE/A3E2EC72A56611EEBE59906AD25BE465/B919C81C65D111F1BEB357FFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:ea0::/32
Signature Algorithm: sha256WithRSAEncryption
5c:af:26:c3:b5:6c:3e:18:19:74:41:6e:a7:ea:39:7e:78:50:
e5:cd:0f:34:cf:f2:a8:f8:ad:e3:f7:ab:1f:fe:0b:87:62:e9:
11:ac:23:6e:3c:f6:2f:e2:87:e8:a4:f1:31:c4:74:21:24:be:
8c:3c:b2:79:aa:f2:59:bc:f2:b8:66:3e:6c:ec:20:7e:52:90:
f0:0f:77:ec:c8:2b:9e:6f:68:aa:3d:e9:92:dd:7e:ad:bc:19:
6d:0e:c6:0a:30:8b:22:62:57:89:e9:1c:3d:36:d4:f0:56:4a:
d8:21:d4:1a:e5:54:ab:5c:0e:11:1d:4b:10:f2:4d:6d:84:98:
ab:a8:2d:6f:42:8a:14:41:91:bd:6e:58:6a:26:33:8c:8d:70:
53:bf:a0:5a:e6:07:d4:3e:62:9f:55:bb:82:44:74:b9:9f:5c:
99:00:b3:18:a0:90:82:c1:e6:63:19:71:72:b3:22:1d:de:6e:
cc:6e:63:6c:e2:4d:73:37:a4:83:51:cf:0c:7b:cf:6a:5e:81:
23:a8:e4:80:41:7a:18:96:30:c4:16:c1:2b:6a:81:e6:24:93:
f5:34:72:40:17:f2:c5:99:3b:06:4c:1a:33:d2:c3:1e:55:ea:
12:34:f5:36:db:9c:60:3a:a2:4c:89:6e:53:38:04:d5:4d:27:
ff:b8:00:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:52:55 2026 by rpki-client