Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/ADDBE62E8A8911F1AC7DEDBBCE1D38B0.roa
File: ADDBE62E8A8911F1AC7DEDBBCE1D38B0.roa (raw, json)
Hash identifier: dQe5lRR7iao+0bCygYFKDltIR9cZUc4q0UgQnVeBYqQ=
Subject key identifier: 93:80:B8:96:2C:C4:59:84:78:B5:74:E1:D8:B4:7F:57:A3:5E:67:98
Certificate issuer: /CN=F36CF917AF/serialNumber=5A98A11302BA1C49AABC60D502CB750C599107C3
Certificate serial: 0641
Authority key identifier: 5A:98:A1:13:02:BA:1C:49:AA:BC:60:D5:02:CB:75:0C:59:91:07:C3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/WpihEwK6HEmqvGDVAst1DFmRB8M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/ADDBE62E8A8911F1AC7DEDBBCE1D38B0.roa
Signing time: Tue 28 Jul 2026 13:38:56 +0000
ROA not before: Tue 28 Jul 2026 13:38:52 +0000
ROA not after: Mon 28 Jul 2036 13:38:52 +0000
asID: 37294
IP address blocks: 2c0f:fac0::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/WpihEwK6HEmqvGDVAst1DFmRB8M.crl
rsync://rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/WpihEwK6HEmqvGDVAst1DFmRB8M.mft
rsync://rpki.afrinic.net/repository/afrinic/WpihEwK6HEmqvGDVAst1DFmRB8M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 07:32:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1601 (0x641)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CF917AF, serialNumber=5A98A11302BA1C49AABC60D502CB750C599107C3
Validity
Not Before: Jul 28 13:38:52 2026 GMT
Not After : Jul 28 13:38:52 2036 GMT
Subject: CN=6a68b0f0-500e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:51:c9:5e:76:6c:ca:e0:52:16:c9:6e:20:28:
f1:56:03:98:fe:f6:d8:61:07:61:ac:76:a0:22:be:
98:4a:44:ab:b3:b0:d6:90:de:6d:08:43:fb:07:ec:
c6:b1:9c:46:9f:ba:41:93:fb:7c:89:f5:9c:92:12:
77:51:cc:e8:27:a7:6e:fb:65:34:73:5e:74:49:28:
93:d1:c7:11:b4:25:e4:f5:77:0f:99:19:1d:5b:b0:
bd:49:d0:4f:80:d9:5e:77:a9:f8:22:bb:fb:de:ad:
3f:1e:bc:f2:89:13:91:4e:74:2e:87:fa:72:6c:49:
0e:9e:51:90:5f:25:62:f3:f1:c0:eb:a5:8a:da:0d:
3f:c6:14:2d:e0:90:b7:cb:2a:9f:10:e3:07:6a:ee:
fb:73:af:c9:ac:8b:da:37:87:a1:09:69:f6:a8:54:
33:5e:47:72:f1:cc:46:a8:1c:fa:bf:e8:6f:80:3f:
a4:b7:55:7a:3c:e9:c1:5f:29:3c:f8:ee:da:7f:b6:
bf:21:2e:4f:13:b5:d2:20:bb:f8:b5:26:67:67:9a:
67:15:73:9c:c4:ae:bb:5e:82:4e:0d:e6:05:85:16:
97:53:12:46:98:b5:4a:ac:ca:1f:08:4b:cf:9b:49:
e9:7c:bd:1e:35:15:19:e8:16:69:79:e2:be:c6:d9:
55:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:80:B8:96:2C:C4:59:84:78:B5:74:E1:D8:B4:7F:57:A3:5E:67:98
X509v3 Authority Key Identifier:
keyid:5A:98:A1:13:02:BA:1C:49:AA:BC:60:D5:02:CB:75:0C:59:91:07:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/WpihEwK6HEmqvGDVAst1DFmRB8M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/WpihEwK6HEmqvGDVAst1DFmRB8M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/ADDBE62E8A8911F1AC7DEDBBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:fac0::/32
Signature Algorithm: sha256WithRSAEncryption
c2:35:b7:43:4a:59:26:0c:98:23:86:50:4e:98:c4:f0:18:b0:
a6:5c:e0:62:cd:c9:d9:73:89:4c:ae:ee:e8:d6:8a:98:6d:9b:
08:6c:71:52:8f:7a:64:93:2a:26:47:38:3e:36:c8:81:1c:34:
8b:c8:06:1f:e9:58:86:4d:c7:d0:71:04:6e:17:99:ac:f4:df:
82:77:fa:66:cd:ff:d0:98:11:aa:fa:37:c1:e7:b7:84:20:b6:
8c:b4:b1:47:de:bd:87:ab:f4:10:a3:f3:83:65:29:74:7b:d4:
ef:a6:b1:1e:a3:85:f2:03:24:49:18:f4:12:76:72:76:d8:c6:
16:6a:c2:ff:e0:85:ad:a5:bf:6f:09:35:c5:cb:1e:cd:53:2c:
28:3f:3a:60:b5:4b:c6:5f:e7:c9:57:c8:63:71:bb:8f:5f:fe:
c1:b6:04:2a:66:b3:2e:3a:22:73:2f:a2:05:dc:73:c5:03:1a:
14:09:20:80:d2:18:cd:91:22:5b:c5:87:aa:86:db:72:ff:b2:
a2:a3:21:f6:98:5d:11:99:12:5f:03:25:ba:31:54:10:23:36:
31:f7:73:c8:d1:fb:4c:51:99:cd:1b:92:0a:5c:0d:68:7c:13:
89:75:95:e6:ce:87:a3:7f:3d:39:3b:a0:5a:57:f8:91:85:71:
b4:22:f8:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:17:40 2026 by rpki-client