Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/F50135428C1C11F1924B01DECE1D38B0.roa
File: F50135428C1C11F1924B01DECE1D38B0.roa (raw, json)
Hash identifier: Js+BheTI1SaXbPkJrEShKicPgauq6Ja+ijmKK3wgL58=
Subject key identifier: 96:F3:89:19:4D:96:D6:BF:F2:33:1F:CC:37:74:64:77:16:46:5C:42
Certificate issuer: /CN=F36886B3AF/serialNumber=3D6ED905037C83C573780B0CCDC70D5D8CEF038B
Certificate serial: 056B
Authority key identifier: 3D:6E:D9:05:03:7C:83:C5:73:78:0B:0C:CD:C7:0D:5D:8C:EF:03:8B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/PW7ZBQN8g8VzeAsMzccNXYzvA4s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/F50135428C1C11F1924B01DECE1D38B0.roa
Signing time: Thu 30 Jul 2026 13:45:43 +0000
ROA not before: Thu 30 Jul 2026 13:45:38 +0000
ROA not after: Fri 01 Mar 2030 13:45:38 +0000
asID: 33763
IP address blocks: 2c0f:f980:5000::/36 maxlen: 64
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/PW7ZBQN8g8VzeAsMzccNXYzvA4s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/PW7ZBQN8g8VzeAsMzccNXYzvA4s.mft
rsync://rpki.afrinic.net/repository/afrinic/PW7ZBQN8g8VzeAsMzccNXYzvA4s.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 11 Aug 2026 03:16:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1387 (0x56b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36886B3AF, serialNumber=3D6ED905037C83C573780B0CCDC70D5D8CEF038B
Validity
Not Before: Jul 30 13:45:38 2026 GMT
Not After : Mar 1 13:45:38 2030 GMT
Subject: CN=6a6b5586-7a85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8d:45:48:2a:23:aa:2b:e6:16:7a:c6:1e:3b:
c5:14:6d:32:a7:e7:88:ef:0a:54:e1:2f:7d:97:06:
92:1b:12:d2:c9:45:0d:5a:5f:13:c3:96:83:19:9b:
23:82:ae:da:3f:34:35:cb:a9:7e:54:03:28:c6:da:
64:63:43:d5:f9:16:be:fa:dc:65:31:51:20:96:bb:
a3:66:61:d0:54:b0:52:b3:c6:c8:9b:5c:ae:30:a3:
d5:6a:43:c2:d2:64:8a:d2:4a:8b:07:7b:fa:91:ea:
44:33:ac:35:d5:09:de:d4:86:38:65:4f:eb:5d:b5:
8b:65:17:24:45:65:8f:59:cd:fe:d9:f7:8d:13:8c:
e6:47:31:f4:ea:55:81:3d:52:82:ff:4e:e1:f6:87:
71:f4:6c:d9:e4:ab:91:ba:93:1e:a7:8d:24:e9:07:
f7:0d:1f:c5:ce:28:c3:ae:93:c6:42:2e:75:e8:2b:
d7:4b:d4:21:bb:3a:8f:85:7e:ce:21:04:98:79:16:
e9:04:5f:40:17:87:57:d3:f1:8a:df:35:33:ee:04:
22:08:bd:79:89:bc:30:b3:90:f9:63:c3:ba:58:cc:
c5:8e:17:f9:c1:e3:0f:7e:96:98:33:d4:3c:71:5c:
1c:97:55:09:c5:4c:87:9e:cc:4c:2b:28:11:20:db:
28:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:F3:89:19:4D:96:D6:BF:F2:33:1F:CC:37:74:64:77:16:46:5C:42
X509v3 Authority Key Identifier:
keyid:3D:6E:D9:05:03:7C:83:C5:73:78:0B:0C:CD:C7:0D:5D:8C:EF:03:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/PW7ZBQN8g8VzeAsMzccNXYzvA4s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PW7ZBQN8g8VzeAsMzccNXYzvA4s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/F50135428C1C11F1924B01DECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:f980:5000::/36
Signature Algorithm: sha256WithRSAEncryption
73:f9:25:0a:29:12:f6:a1:fd:b6:7c:84:5b:05:8b:95:9d:9c:
d1:b4:0a:de:b4:80:1b:bf:7a:5e:9b:97:dd:60:86:69:ca:a4:
9d:08:f7:19:94:00:6b:97:20:7c:5a:ec:29:b2:bd:cf:2a:26:
c2:f0:d9:e4:ff:55:ad:86:18:5c:73:bc:4d:04:dc:9b:18:a7:
4c:67:6f:dd:ee:3e:04:74:f3:c5:5c:65:b4:7d:6f:88:1a:73:
06:c1:b2:03:09:ea:8c:66:3a:9d:0c:8f:6d:63:aa:07:7c:56:
ea:ed:cd:6a:9a:3c:6e:a2:22:23:75:0a:8e:e3:be:97:20:96:
ee:b2:3a:88:67:1f:25:a0:1c:90:d6:af:44:68:8d:27:a4:72:
c5:67:ca:9f:03:9e:e8:43:01:0c:38:99:81:e9:36:00:ff:00:
de:38:47:36:67:a0:aa:c7:e7:4a:6a:21:54:0a:28:7d:92:30:
d3:4b:1c:0a:12:18:33:34:a7:8c:bc:1f:5c:7a:91:e1:a1:e5:
bc:a5:54:7a:f2:44:4a:01:1c:3d:71:b6:f9:9f:16:99:6e:79:
75:d9:0f:cb:5e:13:e7:24:66:14:de:8e:cb:b5:d8:f8:04:02:
f1:a0:15:c9:a3:0b:3c:ff:6d:37:55:e6:03:c3:78:00:9a:69:
1d:0f:0d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 9 21:42:46 2026 by rpki-client