Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36493E2/CD0DCC106FDC11EB9FF77B58F8AEA228/614715108B7211F1B8A9A6C7CE1D38B0.roa
File: 614715108B7211F1B8A9A6C7CE1D38B0.roa (raw, json)
Hash identifier: GCcG6qz6sOs6xxzlm6NT7/+vvW8mXelsZNfCKKxtonA=
Subject key identifier: 81:5C:08:14:57:2C:6A:55:61:6C:F6:F3:71:3C:C9:6D:72:40:7B:CF
Certificate issuer: /CN=F36493E2AF/serialNumber=A8A1AF02F96C1BA92D93A522CABE9ED8E5295153
Certificate serial: 0818
Authority key identifier: A8:A1:AF:02:F9:6C:1B:A9:2D:93:A5:22:CA:BE:9E:D8:E5:29:51:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36493E2/CD0DCC106FDC11EB9FF77B58F8AEA228/614715108B7211F1B8A9A6C7CE1D38B0.roa
Signing time: Wed 29 Jul 2026 17:24:40 +0000
ROA not before: Wed 29 Jul 2026 17:24:36 +0000
ROA not after: Tue 31 Dec 2030 17:24:36 +0000
asID: 37738
IP address blocks: 2c0f:5400::/32 maxlen: 32
2c0f:5400::/48 maxlen: 48
2c0f:5400:1::/48 maxlen: 48
2c0f:5400:2::/48 maxlen: 48
2c0f:5400:3::/48 maxlen: 48
2c0f:5400:4::/48 maxlen: 48
2c0f:5400:5::/48 maxlen: 48
2c0f:5400:6::/48 maxlen: 48
2c0f:5400:7::/48 maxlen: 48
2c0f:5400:8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36493E2/CD0DCC106FDC11EB9FF77B58F8AEA228/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36493E2/CD0DCC106FDC11EB9FF77B58F8AEA228/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.mft
rsync://rpki.afrinic.net/repository/afrinic/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2072 (0x818)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36493E2AF, serialNumber=A8A1AF02F96C1BA92D93A522CABE9ED8E5295153
Validity
Not Before: Jul 29 17:24:36 2026 GMT
Not After : Dec 31 17:24:36 2030 GMT
Subject: CN=6a6a3758-f7de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a4:7b:b5:ce:55:2d:a7:22:fd:95:9c:f5:5f:
8d:ea:6f:b5:0b:c8:1f:ea:9a:8f:b6:9f:62:cc:09:
e7:98:dc:c3:44:c2:e9:87:16:e2:b9:5e:f3:ca:48:
e3:aa:0f:53:b7:42:99:1c:92:f4:3f:0f:5e:e8:b9:
45:b6:52:79:f5:17:e7:2b:7b:5d:9d:17:62:49:b8:
07:33:65:3d:9f:c6:03:a8:85:38:77:09:39:b1:de:
d8:c6:8c:50:6b:03:83:06:86:45:7c:f7:e4:45:88:
07:0a:5b:92:52:f7:81:98:01:ef:3f:bd:07:0b:30:
8c:d3:37:36:3d:a1:c0:22:50:49:e2:39:15:96:a1:
fe:e0:7f:0a:ae:19:63:dc:57:d2:72:4b:a6:e1:d3:
f4:9b:12:48:06:58:b0:51:fb:92:ef:e2:96:2e:1c:
85:15:89:a6:04:fa:52:b2:c0:03:a0:46:7c:5e:96:
67:1c:48:a2:f2:7c:1a:96:de:69:f4:d2:d6:a3:01:
15:c5:bf:20:53:c4:4d:32:56:80:b9:10:9d:c2:14:
97:1c:19:b6:de:31:6a:b2:1e:84:17:09:f9:67:23:
a9:b3:af:1b:c2:fd:89:a5:23:bd:2c:34:a3:be:32:
eb:34:b2:ea:d9:b4:27:37:d3:a7:de:2f:eb:02:c0:
4f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:5C:08:14:57:2C:6A:55:61:6C:F6:F3:71:3C:C9:6D:72:40:7B:CF
X509v3 Authority Key Identifier:
keyid:A8:A1:AF:02:F9:6C:1B:A9:2D:93:A5:22:CA:BE:9E:D8:E5:29:51:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36493E2/CD0DCC106FDC11EB9FF77B58F8AEA228/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36493E2/CD0DCC106FDC11EB9FF77B58F8AEA228/614715108B7211F1B8A9A6C7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:5400::/32
Signature Algorithm: sha256WithRSAEncryption
b8:4a:af:37:27:9f:c0:99:6e:c1:9c:aa:34:5a:36:ce:be:86:
49:09:e1:30:99:4a:25:89:c0:e7:3f:f1:c5:7a:79:d6:27:72:
91:3a:78:57:65:92:a8:00:5f:cb:b7:f0:99:aa:df:c8:58:f1:
5a:64:29:0a:03:cf:b2:51:c6:3b:30:95:c5:41:cc:b3:c8:05:
c7:a9:1e:e2:ca:9f:2e:0e:a9:30:c1:92:7b:62:e8:ad:78:17:
9c:8b:c8:ab:86:76:c1:66:60:15:c4:6a:85:61:22:94:da:0d:
96:09:1b:f3:b8:5d:e7:29:3d:11:64:79:c5:7a:42:82:8a:f2:
99:95:bd:02:21:28:7b:d0:c2:0e:bc:26:71:bb:01:7e:66:63:
38:d7:1e:64:63:ce:98:9b:ce:51:d0:02:2a:c4:09:76:57:58:
ad:57:0b:78:a4:dd:d6:41:03:46:51:12:0b:92:3e:34:45:ef:
3c:47:9d:ec:1a:9a:c6:cd:14:94:8a:a6:a7:b6:41:68:55:1f:
77:1c:19:33:bc:2e:e1:3c:2a:b9:0b:e4:d2:b4:60:e6:f6:52:
8a:48:0a:81:8c:53:b3:75:a1:ba:d7:e3:ef:68:32:b1:d3:3b:
e0:a3:4c:57:fa:53:00:b7:85:20:e3:5b:0c:99:a7:7f:00:c3:
24:1e:db:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:27:33 2026 by rpki-client