Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DBB05/0747436C195511F1A17147BCDAE4EC9C/F468593A341F11F19237EFE3CE1D38B0.roa
File: F468593A341F11F19237EFE3CE1D38B0.roa (raw, json)
Hash identifier: T7CbuXXhwxyEGnxPwVGgVjsxTM/k3t9lVyPY1e3Aq94=
Subject key identifier: 1D:B0:B7:C8:72:F7:9A:20:5E:C4:EC:87:7C:1D:36:7F:F4:D4:B2:1F
Certificate issuer: /CN=F36DBB05AF/serialNumber=BEB0586FD6E2073BDF97C4FEF56AF9C5A09BF452
Certificate serial: 32
Authority key identifier: BE:B0:58:6F:D6:E2:07:3B:DF:97:C4:FE:F5:6A:F9:C5:A0:9B:F4:52
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/vrBYb9biBzvfl8T-9Wr5xaCb9FI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DBB05/0747436C195511F1A17147BCDAE4EC9C/F468593A341F11F19237EFE3CE1D38B0.roa
Signing time: Thu 09 Apr 2026 14:25:28 +0000
ROA not before: Thu 09 Apr 2026 14:25:22 +0000
ROA not after: Wed 09 Apr 2036 14:25:22 +0000
asID: 329648
IP address blocks: 2c0f:7dc0:100::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DBB05/0747436C195511F1A17147BCDAE4EC9C/vrBYb9biBzvfl8T-9Wr5xaCb9FI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DBB05/0747436C195511F1A17147BCDAE4EC9C/vrBYb9biBzvfl8T-9Wr5xaCb9FI.mft
rsync://rpki.afrinic.net/repository/afrinic/vrBYb9biBzvfl8T-9Wr5xaCb9FI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Apr 2026 00:07:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50 (0x32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DBB05AF, serialNumber=BEB0586FD6E2073BDF97C4FEF56AF9C5A09BF452
Validity
Not Before: Apr 9 14:25:22 2026 GMT
Not After : Apr 9 14:25:22 2036 GMT
Subject: CN=69d7b6d8-30df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5a:b9:27:47:da:3f:6a:a7:32:68:ac:a4:31:
fb:2a:5d:61:bb:7c:0d:35:f6:7e:eb:b8:40:0c:d1:
00:bc:1b:c4:12:17:82:46:7e:0e:44:35:93:46:25:
72:37:bd:0d:5e:fa:bd:5c:04:43:6c:7e:4b:8d:93:
7a:14:d1:73:d5:77:c6:c8:25:7c:04:21:02:66:24:
df:74:d9:20:fb:58:0c:89:fa:3a:6e:fc:68:09:82:
9c:ef:20:80:17:a8:63:b7:d6:ce:54:02:5b:51:f5:
b7:02:0d:12:9b:c8:40:17:41:9b:74:2e:c2:76:59:
51:6f:f3:70:fe:40:94:65:57:32:b0:28:52:6c:7c:
ab:1e:7c:7e:de:6f:cb:6a:b2:d9:d4:78:65:d0:43:
5b:b0:5e:61:dd:32:c0:d0:ec:1f:73:99:9c:0a:0f:
88:3a:59:16:08:49:f0:07:8b:e7:51:76:cd:97:22:
0d:1a:5c:17:90:90:89:30:c5:76:64:72:41:c4:80:
2d:cd:97:52:70:f9:30:1f:b3:17:64:0c:60:c9:3b:
66:b8:58:93:f2:43:5f:29:be:b4:95:f5:52:4d:f7:
12:3f:58:b8:62:55:f8:66:f3:80:6b:4c:6d:26:ca:
6d:4a:23:63:ef:48:52:14:2d:fc:93:8a:6f:b0:7c:
43:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:B0:B7:C8:72:F7:9A:20:5E:C4:EC:87:7C:1D:36:7F:F4:D4:B2:1F
X509v3 Authority Key Identifier:
keyid:BE:B0:58:6F:D6:E2:07:3B:DF:97:C4:FE:F5:6A:F9:C5:A0:9B:F4:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBB05/0747436C195511F1A17147BCDAE4EC9C/vrBYb9biBzvfl8T-9Wr5xaCb9FI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vrBYb9biBzvfl8T-9Wr5xaCb9FI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBB05/0747436C195511F1A17147BCDAE4EC9C/F468593A341F11F19237EFE3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:7dc0:100::/48
Signature Algorithm: sha256WithRSAEncryption
87:72:39:ff:d7:af:3d:a9:d7:fb:e0:ab:e8:ba:56:33:36:e5:
9d:2d:86:d7:8d:a9:58:4d:98:b3:e2:7e:48:07:3d:5b:4d:26:
6f:65:46:ec:42:fa:7b:a2:ce:a6:88:8c:3e:3c:c8:f2:e2:a0:
47:31:20:42:30:92:2f:af:76:89:ef:b8:a5:59:8a:1d:e8:3a:
c5:e5:5d:54:f7:01:ab:da:41:c9:51:8d:2f:5a:b3:92:2a:20:
e5:70:e1:3f:90:f8:9e:b8:ce:23:89:03:e0:94:f1:83:c3:f6:
e5:a6:b0:ee:ca:bd:5f:14:5d:d7:44:ae:92:30:e4:2f:cd:8e:
7d:2b:45:ba:b6:3d:24:41:bf:c2:a8:03:7d:86:eb:6b:c8:5f:
de:cd:27:df:52:23:b6:68:2f:e0:f1:ec:77:fb:c3:fa:de:10:
ce:58:ea:21:b1:a6:2c:d9:bb:d9:f8:d8:54:f5:ee:88:bb:72:
5e:85:0b:d1:42:6d:07:8d:e7:b2:06:49:65:89:62:7f:16:71:
c6:3f:04:e0:28:90:7f:db:a8:26:30:92:56:86:48:ca:b8:bd:
bf:9f:f0:5e:28:d2:db:51:8b:0a:96:dd:fd:f3:fc:e2:3b:f7:
fe:f4:a2:97:96:4c:ce:b2:8a:d9:87:3f:85:f3:53:61:5b:64:
94:82:e3:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:34:35 2026 by rpki-client