Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36598F5/A410D350DC0211EC99E36188F1222468/506680826A2511F18249C6DCCE1D38B0.roa
File: 506680826A2511F18249C6DCCE1D38B0.roa (raw, json)
Hash identifier: M4RTg9xqtnKHZD/CZgDWpcP9/HbGYJwdv+0LzZeUf3U=
Subject key identifier: 53:C6:A7:B1:79:EF:B3:75:E0:7D:25:E1:7B:65:B1:0C:E5:9E:7B:29
Certificate issuer: /CN=F36598F5AF/serialNumber=3D4A4EFD029A112EB89AAC8ECA9D917A47CB6C5C
Certificate serial: 05FF
Authority key identifier: 3D:4A:4E:FD:02:9A:11:2E:B8:9A:AC:8E:CA:9D:91:7A:47:CB:6C:5C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/PUpO_QKaES64mqyOyp2RekfLbFw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36598F5/A410D350DC0211EC99E36188F1222468/506680826A2511F18249C6DCCE1D38B0.roa
Signing time: Wed 17 Jun 2026 08:19:52 +0000
ROA not before: Wed 17 Jun 2026 08:19:48 +0000
ROA not after: Mon 17 Jun 2030 08:19:48 +0000
asID: 328820
IP address blocks: 2c0f:1200::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36598F5/A410D350DC0211EC99E36188F1222468/PUpO_QKaES64mqyOyp2RekfLbFw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36598F5/A410D350DC0211EC99E36188F1222468/PUpO_QKaES64mqyOyp2RekfLbFw.mft
rsync://rpki.afrinic.net/repository/afrinic/PUpO_QKaES64mqyOyp2RekfLbFw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Jun 2026 00:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1535 (0x5ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36598F5AF, serialNumber=3D4A4EFD029A112EB89AAC8ECA9D917A47CB6C5C
Validity
Not Before: Jun 17 08:19:48 2026 GMT
Not After : Jun 17 08:19:48 2030 GMT
Subject: CN=6a3258a8-7741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:df:48:55:89:57:34:16:a6:e5:8f:c4:cd:24:
a9:fb:c4:96:2b:a0:b3:43:58:a1:ae:3a:f2:63:04:
86:7c:d2:35:a8:1c:88:0d:54:96:41:2c:53:ed:9a:
cd:47:38:7d:71:ce:95:19:66:0e:54:f9:d4:ac:17:
6c:d1:26:11:02:6b:06:fa:b6:48:f1:12:27:f8:d8:
ff:20:04:72:3d:9f:6e:f6:25:eb:f1:15:22:f7:5d:
0d:c8:07:25:9b:1a:9c:a8:c4:3e:1a:68:16:f9:e3:
10:ca:d5:93:9e:e8:63:f4:da:55:8f:02:d8:b0:56:
7f:32:3a:bc:09:52:f0:f5:f5:25:cf:12:4d:7f:e1:
5a:e8:5e:7c:71:24:bb:42:6c:f1:b0:de:1c:54:49:
d4:9a:95:9d:98:c9:4f:26:42:0a:62:4a:91:42:36:
9a:2d:93:93:22:a6:68:31:20:1a:6e:6c:ab:07:27:
50:36:31:47:3b:ed:a5:5f:ad:31:70:f6:0a:a8:a9:
db:b3:c0:ce:41:a0:82:7d:b6:f9:d4:e5:12:55:2e:
d3:f4:88:ef:be:92:be:a9:b2:57:7b:9e:f6:ef:c3:
ef:dc:ea:64:8b:c9:b8:8c:33:6c:19:3a:4b:9e:8f:
bf:78:83:ed:99:b7:b0:40:ac:1f:d4:86:67:fb:43:
af:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:C6:A7:B1:79:EF:B3:75:E0:7D:25:E1:7B:65:B1:0C:E5:9E:7B:29
X509v3 Authority Key Identifier:
keyid:3D:4A:4E:FD:02:9A:11:2E:B8:9A:AC:8E:CA:9D:91:7A:47:CB:6C:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36598F5/A410D350DC0211EC99E36188F1222468/PUpO_QKaES64mqyOyp2RekfLbFw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PUpO_QKaES64mqyOyp2RekfLbFw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36598F5/A410D350DC0211EC99E36188F1222468/506680826A2511F18249C6DCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:1200::/32
Signature Algorithm: sha256WithRSAEncryption
a0:d9:35:40:3b:8a:46:9a:cb:c3:b2:6e:76:c9:1d:a9:b2:29:
43:df:df:88:27:fc:2d:a4:af:9f:a5:0d:82:8c:04:79:cc:18:
0c:ca:e7:f6:e8:e6:d9:7a:f9:dc:63:85:8b:7c:40:a6:d9:22:
b8:1f:2f:c4:a9:14:38:3b:c7:8b:45:c8:4c:c6:02:7b:85:e8:
79:6a:4b:f0:74:3d:99:24:4c:f2:cf:50:33:de:1a:3d:4e:24:
54:f4:c4:fa:18:f9:03:4a:21:8e:50:61:74:a0:a1:32:89:5b:
6c:10:a9:89:fd:ad:01:22:87:e3:be:c9:d7:97:46:3a:0b:b4:
62:a6:62:bd:f0:b7:53:38:b1:fa:8c:bc:cc:a8:29:aa:f3:3d:
fd:d1:ef:0b:a8:d1:fd:20:ca:7e:db:b3:e9:ff:fd:28:be:96:
aa:ab:5e:b4:26:0d:f9:67:a4:4c:15:8c:af:47:55:a9:a8:ab:
9c:19:27:64:99:d8:37:f9:dc:f3:8c:d2:ba:8c:8d:ef:24:72:
cb:8c:aa:4a:37:c4:29:1c:b8:05:ea:4f:f3:1b:84:c7:0d:cf:
e2:bf:4d:55:cd:47:4b:ff:40:10:36:04:c2:64:a5:a4:71:8b:
d3:ef:f3:22:92:8c:8e:57:b3:56:04:17:c6:31:b8:fd:8a:6c:
aa:ba:e6:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 00:31:16 2026 by rpki-client