Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DBB05/0747436C195511F1A17147BCDAE4EC9C/D1FF3C60341F11F19A2BE6E1CE1D38B0.roa
File: D1FF3C60341F11F19A2BE6E1CE1D38B0.roa (raw, json)
Hash identifier: vlPWuJWoU9zTLPDgIJQsQdOrVIdbzbVOA1ve9uoqz1A=
Subject key identifier: A9:F9:FD:54:91:9B:C5:A3:BB:57:E1:EB:AE:51:33:68:D5:05:BE:88
Certificate issuer: /CN=F36DBB05AF/serialNumber=BEB0586FD6E2073BDF97C4FEF56AF9C5A09BF452
Certificate serial: 30
Authority key identifier: BE:B0:58:6F:D6:E2:07:3B:DF:97:C4:FE:F5:6A:F9:C5:A0:9B:F4:52
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/vrBYb9biBzvfl8T-9Wr5xaCb9FI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DBB05/0747436C195511F1A17147BCDAE4EC9C/D1FF3C60341F11F19A2BE6E1CE1D38B0.roa
Signing time: Thu 09 Apr 2026 14:24:30 +0000
ROA not before: Thu 09 Apr 2026 14:24:25 +0000
ROA not after: Wed 09 Apr 2036 14:24:25 +0000
asID: 329648
IP address blocks: 2c0f:7dc0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DBB05/0747436C195511F1A17147BCDAE4EC9C/vrBYb9biBzvfl8T-9Wr5xaCb9FI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DBB05/0747436C195511F1A17147BCDAE4EC9C/vrBYb9biBzvfl8T-9Wr5xaCb9FI.mft
rsync://rpki.afrinic.net/repository/afrinic/vrBYb9biBzvfl8T-9Wr5xaCb9FI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Apr 2026 00:07:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48 (0x30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DBB05AF, serialNumber=BEB0586FD6E2073BDF97C4FEF56AF9C5A09BF452
Validity
Not Before: Apr 9 14:24:25 2026 GMT
Not After : Apr 9 14:24:25 2036 GMT
Subject: CN=69d7b69e-add0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:04:1a:24:90:99:9b:b6:d5:3c:0a:c7:23:52:
1f:25:8b:79:3e:3d:7b:f6:13:e0:d1:88:23:4b:cb:
e2:e3:f6:d9:87:c9:e1:4e:7a:1e:49:2a:47:8a:ad:
1d:c9:ea:87:f5:50:0e:d6:86:cc:3e:bf:e8:9b:b6:
e4:5f:e0:7b:0c:54:c0:9a:8a:42:10:89:e2:1a:06:
8c:2c:c5:ff:9a:28:27:84:46:38:52:35:4c:6c:9a:
d7:ea:1d:45:92:d5:71:e1:03:c1:ba:f4:36:2d:14:
ec:4a:04:94:a5:b4:22:f0:ae:51:f2:3d:e3:3f:ff:
e3:7e:25:71:2d:cb:c2:78:ec:01:67:58:0f:d6:fc:
e3:e1:06:1b:5f:06:c5:98:6e:8c:36:81:d8:73:8d:
ae:94:b3:e2:d2:67:9f:c0:e8:a2:8a:d2:fa:6b:e6:
6e:37:ae:b1:dd:43:4a:3a:ea:26:f3:81:8b:c0:cf:
aa:32:1d:f9:9a:3a:ad:bf:5d:40:b5:1c:40:9b:3d:
97:e6:5f:48:3c:c8:4c:ba:e3:6b:71:0d:d1:ae:da:
69:57:f7:4c:6c:be:36:c7:02:ce:1b:74:c1:45:e2:
03:9f:12:97:72:1b:07:30:03:e7:af:16:1b:7a:b4:
f0:95:49:53:4d:20:b5:95:42:9e:65:6b:58:c1:44:
8b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:F9:FD:54:91:9B:C5:A3:BB:57:E1:EB:AE:51:33:68:D5:05:BE:88
X509v3 Authority Key Identifier:
keyid:BE:B0:58:6F:D6:E2:07:3B:DF:97:C4:FE:F5:6A:F9:C5:A0:9B:F4:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBB05/0747436C195511F1A17147BCDAE4EC9C/vrBYb9biBzvfl8T-9Wr5xaCb9FI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vrBYb9biBzvfl8T-9Wr5xaCb9FI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBB05/0747436C195511F1A17147BCDAE4EC9C/D1FF3C60341F11F19A2BE6E1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:7dc0::/32
Signature Algorithm: sha256WithRSAEncryption
a4:ab:03:2e:ca:ad:4e:80:41:d7:8c:90:c2:88:0e:b4:58:bb:
5c:da:01:78:46:36:a4:5c:f4:d2:e3:85:f8:14:ad:36:14:91:
19:f8:89:63:f8:bb:d0:bb:58:a9:da:03:3d:42:4e:ee:13:d4:
71:a5:07:0e:6a:e7:48:2c:43:bc:6d:e7:67:25:d9:7a:36:17:
9e:aa:d9:be:78:99:b0:63:f6:7d:10:76:6d:b1:f3:59:de:21:
a4:a7:0c:68:05:2b:7b:fc:c8:25:4f:a8:98:4b:8d:42:0d:5d:
a0:b3:da:66:27:a8:2c:00:10:cd:53:d5:ae:87:e9:77:20:7e:
42:a9:b3:1c:3e:7e:d2:76:9c:4f:13:dc:64:71:bc:ca:64:dd:
d4:ac:ae:2b:05:10:4e:35:3e:78:03:50:4d:83:2b:13:55:fd:
36:d0:a4:d7:42:63:75:52:ec:ee:30:a4:94:ab:b2:11:53:f9:
af:33:82:0a:dc:62:3b:0b:ab:2e:f2:b0:d1:4f:8e:8f:a7:18:
ef:a0:d9:0f:7d:d2:a1:8c:db:7f:83:1f:7f:30:c8:8c:82:23:
6e:33:71:5e:3c:c7:7a:55:59:14:91:d0:a6:74:a8:98:93:79:
da:47:81:87:b8:3f:2f:f3:42:18:5b:ab:22:53:37:0d:a4:54:
51:2e:f6:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:34:34 2026 by rpki-client