Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3617560/30C4542CF25911EC90D029C2F1222468/8CD4BF9E60AB11F1B29B57C5CE1D38B0.roa
File: 8CD4BF9E60AB11F1B29B57C5CE1D38B0.roa (raw, json)
Hash identifier: eaUeu3KkKpNcCw9HrgYvB/pha9SYhwNNA6TnXg77ADw=
Subject key identifier: AC:A3:C0:83:A0:DC:43:1E:CA:FF:21:69:9B:4E:B9:78:BF:B3:D4:5D
Certificate issuer: /CN=F3617560AF/serialNumber=559608F1905C17B2C1EB888134CC383C8FD4EEF4
Certificate serial: 05D4
Authority key identifier: 55:96:08:F1:90:5C:17:B2:C1:EB:88:81:34:CC:38:3C:8F:D4:EE:F4
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/VZYI8ZBcF7LB64iBNMw4PI_U7vQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3617560/30C4542CF25911EC90D029C2F1222468/8CD4BF9E60AB11F1B29B57C5CE1D38B0.roa
Signing time: Fri 05 Jun 2026 06:55:35 +0000
ROA not before: Fri 05 Jun 2026 06:55:20 +0000
ROA not after: Wed 31 Dec 2042 06:55:20 +0000
asID: 23889
IP address blocks: 41.136.0.0/16 maxlen: 24
41.212.128.0/17 maxlen: 24
196.27.64.0/19 maxlen: 24
196.192.96.0/20 maxlen: 24
197.224.0.0/14 maxlen: 24
2001:4290::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3617560/30C4542CF25911EC90D029C2F1222468/VZYI8ZBcF7LB64iBNMw4PI_U7vQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F3617560/30C4542CF25911EC90D029C2F1222468/VZYI8ZBcF7LB64iBNMw4PI_U7vQ.mft
rsync://rpki.afrinic.net/repository/afrinic/VZYI8ZBcF7LB64iBNMw4PI_U7vQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 08 Jun 2026 00:08:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1492 (0x5d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3617560AF, serialNumber=559608F1905C17B2C1EB888134CC383C8FD4EEF4
Validity
Not Before: Jun 5 06:55:20 2026 GMT
Not After : Dec 31 06:55:20 2042 GMT
Subject: CN=6a2272e7-b66f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a5:9f:f5:3d:00:c5:1f:fb:b1:ff:74:75:c8:
bf:81:02:3a:2e:71:44:3c:47:ad:ed:bb:d9:bb:22:
54:da:ef:74:cb:c4:2e:ab:37:9a:bc:b0:32:57:e3:
f6:d3:c5:f0:6c:eb:6c:05:49:d5:03:2d:14:03:a0:
d5:9b:90:fa:be:fa:fd:b2:34:b4:14:6d:2f:af:99:
15:74:e4:ef:80:2c:90:f8:4d:7a:30:65:ec:1a:f1:
c0:93:69:93:a5:f1:b0:1a:1b:9e:be:38:d5:46:cd:
a8:87:1f:67:be:6c:3f:31:cf:60:f1:2e:a6:ac:04:
21:b5:7c:1c:bf:39:6b:8f:b6:c9:ab:e3:12:be:4a:
33:3d:40:c2:8b:79:21:81:f5:e1:fe:91:87:26:d0:
49:ae:61:9e:8e:1a:00:d2:9f:df:7b:83:f2:c2:cc:
c6:e7:c7:d6:23:df:21:d7:e5:0c:a7:be:ee:90:ad:
bc:7f:57:62:3c:0c:50:32:d8:f3:56:08:2c:a8:23:
82:fc:19:0b:1c:dd:44:28:8d:61:fa:2e:0e:ef:ff:
52:85:1d:46:5c:a0:60:e3:99:b2:87:f4:a0:d3:fe:
ab:3b:92:fc:b4:4a:d6:b1:47:7d:6e:83:6f:b4:99:
82:85:96:b6:aa:0b:5d:7d:ad:8b:ea:ca:cb:94:e4:
67:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A3:C0:83:A0:DC:43:1E:CA:FF:21:69:9B:4E:B9:78:BF:B3:D4:5D
X509v3 Authority Key Identifier:
keyid:55:96:08:F1:90:5C:17:B2:C1:EB:88:81:34:CC:38:3C:8F:D4:EE:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3617560/30C4542CF25911EC90D029C2F1222468/VZYI8ZBcF7LB64iBNMw4PI_U7vQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/VZYI8ZBcF7LB64iBNMw4PI_U7vQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3617560/30C4542CF25911EC90D029C2F1222468/8CD4BF9E60AB11F1B29B57C5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.136.0.0/16
41.212.128.0/17
196.27.64.0/19
196.192.96.0/20
197.224.0.0/14
IPv6:
2001:4290::/32
Signature Algorithm: sha256WithRSAEncryption
60:62:2d:f9:10:c2:f9:08:c5:f0:e9:82:02:17:a0:f4:ea:18:
71:15:13:13:93:0c:67:2c:32:90:b1:a4:f8:61:61:7e:84:b3:
3a:5d:34:46:29:c6:90:3b:3d:42:3f:29:3b:b8:db:20:f4:7f:
5f:0c:46:72:15:a1:43:b4:b3:5a:b0:1c:54:a3:ae:6b:e9:28:
59:47:09:2f:18:87:8f:78:79:f2:82:b2:1f:a9:fe:ea:77:d8:
dd:0d:3a:77:da:a1:e4:b3:74:4f:eb:3f:e4:3a:d2:13:d8:a8:
c3:e4:81:39:37:39:e4:04:ee:01:78:be:9a:ce:8c:47:ee:4c:
ee:3e:b2:3c:8e:c0:6c:56:1c:57:0e:5d:fd:31:f0:40:a3:5e:
27:73:07:d3:ff:1e:de:3e:60:b1:52:9e:82:74:84:0c:13:e1:
99:33:ce:eb:7b:f4:72:a1:52:2e:15:87:74:9e:dd:e1:40:43:
69:24:c1:64:4d:77:0d:5d:f4:4b:a8:da:40:d4:20:3b:5e:ca:
af:5b:27:c2:59:4b:f8:67:9d:dd:9f:13:fb:53:2c:44:a7:49:
cf:c9:00:ce:0c:6c:f9:8b:4f:f5:96:f6:0f:d7:8a:ff:5f:49:
11:02:9e:39:46:7b:4f:2e:b4:f4:6f:13:f6:b3:d1:d5:48:29:
16:7a:3b:b9
-----BEGIN CERTIFICATE-----
MIIFqDCCBJCgAwIBAgICBdQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MTc1NjBBRjExMC8GA1UEBRMoNTU5NjA4RjE5MDVDMTdCMkMxRUI4ODgxMzRDQzM4
M0M4RkQ0RUVGNDAeFw0yNjA2MDUwNjU1MjBaFw00MjEyMzEwNjU1MjBaMBgxFjAU
BgNVBAMTDTZhMjI3MmU3LWI2NmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC+pZ/1PQDFH/ux/3R1yL+BAjoucUQ8R63tu9m7IlTa73TLxC6rN5q8sDJX
4/bTxfBs62wFSdUDLRQDoNWbkPq++v2yNLQUbS+vmRV05O+ALJD4TXowZewa8cCT
aZOl8bAaG56+ONVGzaiHH2e+bD8xz2DxLqasBCG1fBy/OWuPtsmr4xK+SjM9QMKL
eSGB9eH+kYcm0EmuYZ6OGgDSn997g/LCzMbnx9Yj3yHX5Qynvu6Qrbx/V2I8DFAy
2PNWCCyoI4L8GQsc3UQojWH6Lg7v/1KFHUZcoGDjmbKH9KDT/qs7kvy0StaxR31u
g2+0mYKFlraqC119rYvqysuU5GedAgMBAAGjggLKMIICxjAdBgNVHQ4EFgQUrKPA
g6DcQx7K/yFpm065eL+z1F0wHwYDVR0jBBgwFoAUVZYI8ZBcF7LB64iBNMw4PI/U
7vQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjE3NTYwLzMwQzQ1NDJDRjI1OTExRUM5MEQwMjlDMkYxMjIyNDY4L1ZaWUk4
WkJjRjdMQjY0aUJOTXc0UElfVTd2US5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1ZaWUk4WkJjRjdMQjY0aUJOTXc0UElfVTd2US5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjE3NTYwLzMwQzQ1NDJDRjI1OTExRUM5MEQwMjlDMkYx
MjIyNDY4LzhDRDRCRjlFNjBBQjExRjFCMjlCNTdDNUNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwRAYIKwYBBQUHAQcBAf8ENTAzMCIEAgABMBwDAwApiAMEBynUgAMEBcQbQAME
BMTAYAMDAsXgMA0EAgACMAcDBQAgAUKQMA0GCSqGSIb3DQEBCwUAA4IBAQBgYi35
EML5CMXw6YICF6D06hhxFRMTkwxnLDKQsaT4YWF+hLM6XTRGKcaQOz1CPyk7uNsg
9H9fDEZyFaFDtLNasBxUo65r6ShZRwkvGIePeHnygrIfqf7qd9jdDTp32qHks3RP
6z/kOtIT2KjD5IE5NznkBO4BeL6azoxH7kzuPrI8jsBsVhxXDl39MfBAo14ncwfT
/x7ePmCxUp6CdIQME+GZM87re/RyoVIuFYd0nt3hQENpJMFkTXcNXfRLqNpA1CA7
XsqvWyfCWUv4Z53dnxP7UyxEp0nPyQDODGz5i0/1lvYP14r/X0kRAp45RntPLrT0
bxP2s9HVSCkWeju5
-----END CERTIFICATE-----
Generated at Sat Jun 6 08:21:28 2026 by rpki-client