Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/9B99DDBC8C3D11F185844CA1CE1D38B0.roa
File: 9B99DDBC8C3D11F185844CA1CE1D38B0.roa (raw, json)
Hash identifier: KokIk2KULECc1dFtONKHV+dFBQMWcKtBPAeRS7FVdiQ=
Subject key identifier: CA:4F:C1:A1:4E:71:DB:0D:3F:02:2D:39:C4:49:B0:B9:99:83:37:34
Certificate issuer: /CN=F3644DAEAF/serialNumber=707A1F286AE2986DF64910C3034E5189A7C216DD
Certificate serial: 07DA
Authority key identifier: 70:7A:1F:28:6A:E2:98:6D:F6:49:10:C3:03:4E:51:89:A7:C2:16:DD
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/cHofKGrimG32SRDDA05RiafCFt0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/9B99DDBC8C3D11F185844CA1CE1D38B0.roa
Signing time: Thu 30 Jul 2026 17:39:26 +0000
ROA not before: Thu 30 Jul 2026 17:39:21 +0000
ROA not after: Thu 31 Jul 2036 17:39:21 +0000
asID: 37731
IP address blocks: 2c0f:f030::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.crl
rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.mft
rsync://rpki.afrinic.net/repository/afrinic/cHofKGrimG32SRDDA05RiafCFt0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2010 (0x7da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3644DAEAF, serialNumber=707A1F286AE2986DF64910C3034E5189A7C216DD
Validity
Not Before: Jul 30 17:39:21 2026 GMT
Not After : Jul 31 17:39:21 2036 GMT
Subject: CN=6a6b8c4e-06c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:51:5b:ed:b5:53:47:cd:24:3a:0a:83:2d:1b:
06:49:d1:bc:98:e7:8a:26:19:0b:8c:f5:02:81:a3:
a0:f0:4e:7c:3d:0c:5d:c4:27:56:d2:64:7a:08:e1:
9f:20:c1:18:3a:68:28:fc:d0:a8:61:33:51:58:40:
57:f1:e2:e6:74:d2:50:6d:68:b9:08:ea:e5:6c:84:
e0:a6:09:b7:4c:39:9e:3b:a5:8d:20:10:09:96:23:
82:cf:c1:c3:57:76:8c:23:bc:db:ab:44:7f:52:d9:
44:15:ea:90:b2:a1:c0:8b:f2:d0:ac:63:0b:8d:1c:
bd:bf:92:ba:7f:fc:a1:7a:00:2c:cf:5c:cb:91:bf:
1a:6a:e5:ff:7e:1e:75:7a:df:99:88:a7:cf:cf:ad:
67:26:2a:15:7a:9f:9e:cc:00:65:e4:d9:7f:44:8b:
3b:f4:24:36:6e:30:e6:1a:16:bd:d0:3d:81:4d:c5:
c3:b7:fe:db:04:06:2c:54:37:e3:ec:46:ed:10:e3:
24:d6:f6:68:d2:af:cc:c5:15:ab:6b:25:fa:35:76:
63:41:9e:ef:74:e0:64:7d:41:9a:80:15:d6:f9:c9:
d0:59:a0:ac:3b:1b:08:ca:9e:a0:87:88:dd:e3:51:
5e:d5:e0:6d:be:75:3d:bc:e1:01:2b:b9:73:55:bd:
cd:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:4F:C1:A1:4E:71:DB:0D:3F:02:2D:39:C4:49:B0:B9:99:83:37:34
X509v3 Authority Key Identifier:
keyid:70:7A:1F:28:6A:E2:98:6D:F6:49:10:C3:03:4E:51:89:A7:C2:16:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/cHofKGrimG32SRDDA05RiafCFt0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/9B99DDBC8C3D11F185844CA1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:f030::/32
Signature Algorithm: sha256WithRSAEncryption
a9:01:24:d0:31:a2:c0:28:ab:a9:fd:9c:00:ab:e9:11:52:a4:
7a:bc:31:06:79:8f:07:9c:7c:de:36:ed:89:9a:bf:d8:da:27:
45:55:69:37:7f:c5:96:a9:e8:47:b4:38:30:fe:22:e3:03:e5:
22:42:18:a4:2a:f3:b2:a4:80:d6:b7:e3:5e:4c:b0:78:8a:33:
78:65:7a:a4:d0:c8:e3:b3:49:b2:7b:9f:a6:46:09:6b:09:47:
86:84:69:7f:c1:b8:f1:49:3b:15:cb:f4:b4:61:e3:f6:40:1e:
96:25:88:96:5b:b8:de:10:eb:ea:29:67:40:01:fb:00:85:29:
ca:66:aa:71:9e:1e:06:6f:a9:ba:db:0a:70:61:d8:03:70:63:
4c:e9:1a:5a:df:d7:3d:14:7d:4c:47:29:d1:e5:78:aa:60:e6:
7d:b2:b4:c6:bc:37:f7:da:10:fc:8f:61:e1:54:3a:e2:13:ec:
a6:d4:3d:30:a9:9c:d4:9c:5b:d6:0d:f0:00:65:5e:50:32:19:
aa:cd:ce:fe:a4:d0:4c:0f:f6:84:b7:e1:b8:7c:df:aa:0a:40:
8c:6e:78:f8:81:25:2e:96:49:2c:2f:d2:4c:05:d5:de:95:8e:
29:d9:2a:6c:4f:b3:f9:9b:12:d9:b5:53:75:9c:aa:a7:73:48:
f5:89:7e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:32:24 2026 by rpki-client