Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D3DBF/063FE546361B11F0A5A10E7CDAE4EC9C/8194DE542D9111F1B20E91C1DAE4EC9C.roa
File: 8194DE542D9111F1B20E91C1DAE4EC9C.roa (raw, json)
Hash identifier: oZBhVAwJk+22IEWQnP4GMDN1cAYMy6R85ErqX8/xBas=
Subject key identifier: 4B:E5:D9:29:E5:CF:6D:9B:F3:BC:8D:CF:9E:96:00:C2:B7:BC:CD:C5
Certificate issuer: /CN=F36D3DBFAF/serialNumber=1A8C0EB2631F5807443979584E0D4D2FA885A760
Certificate serial: 0149
Authority key identifier: 1A:8C:0E:B2:63:1F:58:07:44:39:79:58:4E:0D:4D:2F:A8:85:A7:60
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/GowOsmMfWAdEOXlYTg1NL6iFp2A.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D3DBF/063FE546361B11F0A5A10E7CDAE4EC9C/8194DE542D9111F1B20E91C1DAE4EC9C.roa
Signing time: Wed 01 Apr 2026 06:10:40 +0000
ROA not before: Wed 01 Apr 2026 06:10:35 +0000
ROA not after: Tue 01 Apr 2042 06:10:35 +0000
asID: 327829
IP address blocks: 2c0f:1180::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D3DBF/063FE546361B11F0A5A10E7CDAE4EC9C/GowOsmMfWAdEOXlYTg1NL6iFp2A.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D3DBF/063FE546361B11F0A5A10E7CDAE4EC9C/GowOsmMfWAdEOXlYTg1NL6iFp2A.mft
rsync://rpki.afrinic.net/repository/afrinic/GowOsmMfWAdEOXlYTg1NL6iFp2A.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 04:52:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 329 (0x149)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D3DBFAF, serialNumber=1A8C0EB2631F5807443979584E0D4D2FA885A760
Validity
Not Before: Apr 1 06:10:35 2026 GMT
Not After : Apr 1 06:10:35 2042 GMT
Subject: CN=69ccb6df-f1f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:69:7e:83:7d:7f:59:3c:43:e5:c4:6a:16:58:
0b:42:cf:65:51:67:4c:b2:35:9c:32:85:42:e0:74:
46:60:ee:f5:1f:3b:c8:fb:bd:9a:30:54:be:3e:14:
9c:7f:6d:81:08:e3:7c:58:19:c6:3e:56:14:0f:80:
3c:c4:9d:6e:38:4c:45:80:0e:bf:7a:c2:fc:d2:a0:
45:f3:eb:cc:78:1c:b6:3b:0a:07:cb:b0:32:cb:1b:
8f:a1:52:e3:63:32:f1:f4:c7:de:7e:1d:f7:ad:45:
4b:1d:0b:58:b4:ca:d5:04:32:78:84:c1:bd:bd:ab:
0f:f3:c0:a4:d0:ba:7d:c1:4b:56:69:49:1c:3b:45:
e3:00:bb:6e:a5:be:aa:7c:33:78:a3:f4:ae:1c:2c:
60:22:e6:67:55:5a:ae:87:26:26:77:b2:e5:86:71:
30:a0:db:3a:e2:21:b8:8c:53:cd:c9:e5:37:2d:5a:
42:c4:75:b9:7c:90:3b:70:19:9c:c9:d7:a1:70:e4:
f6:8d:8b:a4:55:f9:6c:d7:4b:12:a2:68:2a:be:ce:
b4:87:87:49:74:45:52:53:0e:a1:a8:c0:bc:98:25:
ca:4c:a5:c6:23:67:d4:3f:da:27:9d:3b:7e:9e:f1:
71:fc:8e:7b:e0:d5:f0:e7:e0:c1:47:c0:0d:11:a0:
d1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E5:D9:29:E5:CF:6D:9B:F3:BC:8D:CF:9E:96:00:C2:B7:BC:CD:C5
X509v3 Authority Key Identifier:
keyid:1A:8C:0E:B2:63:1F:58:07:44:39:79:58:4E:0D:4D:2F:A8:85:A7:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D3DBF/063FE546361B11F0A5A10E7CDAE4EC9C/GowOsmMfWAdEOXlYTg1NL6iFp2A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GowOsmMfWAdEOXlYTg1NL6iFp2A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D3DBF/063FE546361B11F0A5A10E7CDAE4EC9C/8194DE542D9111F1B20E91C1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:1180::/32
Signature Algorithm: sha256WithRSAEncryption
4f:2c:c6:28:79:3c:3c:4f:36:26:59:89:59:e9:75:dc:ae:7f:
80:f0:6c:3d:30:fd:e4:85:1f:fa:f1:84:f6:c6:79:28:2f:7b:
55:f2:ee:2f:10:dd:31:ae:f1:5e:42:42:60:da:e7:b8:67:87:
61:e7:53:9f:3f:55:e3:46:42:88:5f:50:ca:63:c9:63:3b:e7:
61:81:69:99:a5:4b:c2:37:d5:5d:95:23:ea:d0:49:c4:13:80:
eb:43:47:5d:81:73:c3:e0:76:28:1b:32:95:ac:ee:e2:2b:3f:
bb:25:68:5c:6e:58:f3:99:3a:e0:7e:21:59:c2:da:64:fc:1b:
06:ca:a7:f5:d4:f3:a8:32:5f:f5:06:da:fa:5d:d7:b9:50:d2:
b0:20:7b:ca:60:16:6f:4d:8d:c1:39:5c:ca:f2:6f:9c:6a:0a:
d0:e1:b1:37:c3:a2:4e:81:c8:ac:12:43:09:63:5b:7c:9c:92:
a1:10:4f:43:47:24:25:1e:03:e6:63:cc:f8:34:86:3e:49:dc:
09:e8:73:57:5a:d5:cb:d2:7c:8c:19:1e:07:5a:69:58:af:f7:
00:f0:98:5e:b2:d1:23:ab:02:56:c7:e0:b5:bd:62:0f:47:09:
26:52:e0:8f:4a:50:05:fe:4b:83:03:91:df:4c:ab:bc:fc:0a:
0c:84:53:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:28:55 2026 by rpki-client