Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/343684CC8F0D11F19F57D0CACE1D38B0.roa
File: 343684CC8F0D11F19F57D0CACE1D38B0.roa (raw, json)
Hash identifier: huRD7jPyelwc8FHfby6zLL/psAgWGgFE/FU7PHIymFo=
Subject key identifier: 83:E9:34:97:D0:5E:BA:61:DE:03:CF:E3:85:E3:31:D8:05:AB:BB:9B
Certificate issuer: /CN=F36960E7AF/serialNumber=1F4DB9AC6B63108A19BDCDBEECFF449842C8D6A0
Certificate serial: 079A
Authority key identifier: 1F:4D:B9:AC:6B:63:10:8A:19:BD:CD:BE:EC:FF:44:98:42:C8:D6:A0
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/H025rGtjEIoZvc2-7P9EmELI1qA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/343684CC8F0D11F19F57D0CACE1D38B0.roa
Signing time: Mon 03 Aug 2026 07:30:30 +0000
ROA not before: Mon 03 Aug 2026 07:30:26 +0000
ROA not after: Sun 30 Jun 2030 07:30:26 +0000
asID: 328840
IP address blocks: 2c0f:4e00:c000::/35 maxlen: 35
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.crl
rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.mft
rsync://rpki.afrinic.net/repository/afrinic/H025rGtjEIoZvc2-7P9EmELI1qA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1946 (0x79a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36960E7AF, serialNumber=1F4DB9AC6B63108A19BDCDBEECFF449842C8D6A0
Validity
Not Before: Aug 3 07:30:26 2026 GMT
Not After : Jun 30 07:30:26 2030 GMT
Subject: CN=6a704396-3c50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1d:cf:df:33:41:7f:4b:24:c1:fc:60:37:e6:
cc:17:cf:96:f2:31:0c:39:bb:d4:da:ae:89:b2:aa:
c8:f3:4c:7d:dc:78:f3:18:fb:4d:8e:c0:77:f8:07:
67:7e:96:4d:30:d5:ed:c3:04:50:af:e7:96:0e:e4:
bc:f2:14:c7:3c:bb:6e:61:a4:0d:1b:77:ff:61:ba:
9f:2c:46:6b:b7:3c:4f:60:83:0d:2c:49:84:b6:46:
d8:97:a9:49:1e:dd:cc:74:9b:31:5a:46:5b:d3:a7:
68:bc:0f:80:9b:93:63:60:b1:92:e2:ea:b3:cd:2c:
ba:de:fd:2d:9d:a7:92:b1:8d:07:d6:60:57:98:ac:
10:10:d6:4b:6e:49:13:97:9a:9e:74:c0:93:e3:0c:
e0:64:de:0e:93:e2:55:94:ff:2a:60:4c:a4:cc:67:
ee:e1:be:43:8b:ca:a6:8c:fa:ad:56:96:fa:f9:94:
50:a0:90:09:36:e2:ba:7a:69:26:9c:08:b6:77:49:
22:31:5f:54:4b:ff:d8:f5:ac:4d:4f:df:bd:fa:50:
41:5a:72:c4:c9:51:07:f3:c6:1a:d5:d0:1f:00:63:
a2:8a:7f:f0:13:0a:c9:81:4c:e8:27:05:7f:29:8a:
8e:d9:be:56:45:d5:30:d3:fa:3c:66:3c:fa:51:33:
4d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:E9:34:97:D0:5E:BA:61:DE:03:CF:E3:85:E3:31:D8:05:AB:BB:9B
X509v3 Authority Key Identifier:
keyid:1F:4D:B9:AC:6B:63:10:8A:19:BD:CD:BE:EC:FF:44:98:42:C8:D6:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/H025rGtjEIoZvc2-7P9EmELI1qA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/343684CC8F0D11F19F57D0CACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:4e00:c000::/35
Signature Algorithm: sha256WithRSAEncryption
18:18:88:95:f1:27:b3:9d:82:d3:07:a1:0d:fa:e0:b7:fe:2d:
c0:57:8c:17:9a:e0:2d:27:a7:83:3b:6f:10:75:e8:02:bc:ae:
37:bd:82:65:4a:3d:5a:fa:25:f5:d0:17:57:cc:3e:cc:df:62:
8e:8b:cf:78:38:04:f6:9c:2c:27:29:6d:a0:3b:c4:d1:82:bb:
a3:18:bf:a2:f5:a1:3a:15:c2:6c:34:ef:38:18:b7:37:54:99:
01:6d:1e:15:38:8f:fe:7a:75:1f:4b:86:80:da:9d:ff:b5:b2:
2c:76:5c:35:c8:42:f2:8c:36:a0:82:40:d2:a5:2f:dc:e2:d6:
1f:62:3e:dc:62:28:32:f0:49:89:27:d9:ef:87:c0:5b:46:96:
fb:7b:d9:69:20:57:40:fa:b6:19:ef:96:cf:62:6c:c4:78:c7:
a7:0d:04:d0:e6:b5:2d:7a:68:13:75:d3:35:58:a6:0a:8b:1b:
aa:1f:9b:8e:c4:c8:b0:a3:68:c8:d6:cd:d8:43:13:37:fb:c4:
10:08:8a:c7:06:43:83:8a:12:9b:ca:1e:24:1e:f4:49:ec:84:
07:58:e9:47:86:17:2b:09:81:50:e1:79:90:4e:0e:b5:cc:30:
22:fa:80:d7:5b:47:24:fa:e8:a2:2f:96:32:93:36:dc:84:c2:
95:31:77:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:39:01 2026 by rpki-client