Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DBB05/0747436C195511F1A17147BCDAE4EC9C/6478E0A0342011F191BE0FE6CE1D38B0.roa
File: 6478E0A0342011F191BE0FE6CE1D38B0.roa (raw, json)
Hash identifier: emC7GwLX61xHhM+cBfiU05CVWHA3VSY3bML+vXnttf4=
Subject key identifier: 7B:FC:A9:DC:92:1B:75:A7:CD:A7:57:0B:EF:2A:A8:4F:38:82:43:B0
Certificate issuer: /CN=F36DBB05AF/serialNumber=BEB0586FD6E2073BDF97C4FEF56AF9C5A09BF452
Certificate serial: 38
Authority key identifier: BE:B0:58:6F:D6:E2:07:3B:DF:97:C4:FE:F5:6A:F9:C5:A0:9B:F4:52
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/vrBYb9biBzvfl8T-9Wr5xaCb9FI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DBB05/0747436C195511F1A17147BCDAE4EC9C/6478E0A0342011F191BE0FE6CE1D38B0.roa
Signing time: Thu 09 Apr 2026 14:28:36 +0000
ROA not before: Thu 09 Apr 2026 14:28:31 +0000
ROA not after: Wed 09 Apr 2036 14:28:31 +0000
asID: 329648
IP address blocks: 2c0f:7dc0:400::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DBB05/0747436C195511F1A17147BCDAE4EC9C/vrBYb9biBzvfl8T-9Wr5xaCb9FI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DBB05/0747436C195511F1A17147BCDAE4EC9C/vrBYb9biBzvfl8T-9Wr5xaCb9FI.mft
rsync://rpki.afrinic.net/repository/afrinic/vrBYb9biBzvfl8T-9Wr5xaCb9FI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Apr 2026 00:07:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56 (0x38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DBB05AF, serialNumber=BEB0586FD6E2073BDF97C4FEF56AF9C5A09BF452
Validity
Not Before: Apr 9 14:28:31 2026 GMT
Not After : Apr 9 14:28:31 2036 GMT
Subject: CN=69d7b794-e928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7e:19:4e:fc:65:cf:06:5b:f4:be:ff:90:66:
c2:e4:bb:3a:a0:7f:ea:76:ba:10:6c:ea:c1:fd:77:
35:a1:11:05:6c:4e:89:98:c2:94:c7:a0:27:b4:57:
5f:03:74:f9:42:b5:9c:0c:25:59:2c:9e:17:82:f3:
c7:97:b7:e7:e3:1b:6d:4c:61:48:3a:e9:85:d6:be:
52:e5:ea:7a:8a:9e:48:2e:94:1e:bc:cd:05:33:d6:
9c:e9:a4:68:5b:61:e9:cb:53:23:76:cc:0d:92:3d:
aa:03:92:06:03:be:e6:7a:bc:9e:f7:e3:d3:bc:78:
fc:c8:85:fd:22:c3:e7:0e:3a:84:ce:9f:00:55:e3:
73:42:87:bb:db:cb:dc:3e:de:7c:8b:ce:65:a2:42:
f6:7a:1e:df:83:b4:ec:f5:de:fd:4b:bb:5a:4b:42:
e4:83:85:3a:96:f0:44:c0:ef:5f:32:6c:c4:56:76:
5f:58:55:a2:4c:9e:02:bd:f5:4f:2c:ca:11:31:bd:
1f:a3:9e:05:08:c9:03:b2:0f:e7:b0:0b:49:15:41:
8c:a3:3f:52:3f:31:fd:69:0a:22:7f:02:5e:41:57:
d9:11:0c:6b:db:9e:ec:76:c5:cd:cb:04:83:a4:94:
96:25:bb:62:8e:22:07:a9:74:69:df:82:f1:a6:36:
3b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:FC:A9:DC:92:1B:75:A7:CD:A7:57:0B:EF:2A:A8:4F:38:82:43:B0
X509v3 Authority Key Identifier:
keyid:BE:B0:58:6F:D6:E2:07:3B:DF:97:C4:FE:F5:6A:F9:C5:A0:9B:F4:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBB05/0747436C195511F1A17147BCDAE4EC9C/vrBYb9biBzvfl8T-9Wr5xaCb9FI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vrBYb9biBzvfl8T-9Wr5xaCb9FI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBB05/0747436C195511F1A17147BCDAE4EC9C/6478E0A0342011F191BE0FE6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:7dc0:400::/48
Signature Algorithm: sha256WithRSAEncryption
4f:f5:e9:2c:d5:e5:68:95:a3:bd:c5:5f:b5:0a:7c:bb:8b:e3:
23:52:59:fa:e6:a3:cb:e0:26:72:d8:76:92:f0:35:c1:5c:16:
f4:28:7e:47:5b:f8:f0:16:fb:67:ab:6f:18:da:84:be:4c:bf:
dc:ec:b6:dc:72:78:6f:87:40:d3:e1:b5:ff:d1:e9:77:41:ce:
8d:36:8f:7d:d4:09:87:9e:94:8e:f5:10:df:f9:26:97:41:7d:
e4:7f:45:8d:e9:dd:cb:7a:a8:72:af:40:30:16:18:84:38:f6:
74:8e:16:96:36:67:db:7e:40:54:15:bc:5b:52:98:d2:da:86:
12:fc:c2:1d:5f:b1:b2:37:b6:1c:62:84:ab:92:d5:a3:17:e3:
fe:70:b6:c6:3b:3d:33:5e:7a:63:5e:3d:51:88:da:56:7b:7b:
a3:e8:9c:e2:17:19:bb:11:04:44:94:9f:a6:a7:c5:98:91:f7:
a8:48:6f:d5:2f:ff:9f:d9:93:bc:60:64:dd:dc:13:3f:a6:0c:
6c:db:70:1f:83:71:a1:50:ae:1e:6a:55:48:a8:34:c9:25:79:
11:79:19:e7:ef:77:07:14:c7:66:09:cc:74:a8:aa:18:5a:dd:
bd:ce:21:b7:de:fb:04:3c:02:2f:a8:e7:b2:d7:be:d5:ae:dc:
e8:f5:07:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:34:36 2026 by rpki-client