Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3698DD0/56C8EA4C667711ED967FC0A2F1222468/F65069468C1611F19B4A1EB9CE1D38B0.roa
File: F65069468C1611F19B4A1EB9CE1D38B0.roa (raw, json)
Hash identifier: PlId2XWtYjHJ/3qsp/QHOEHdxAmP0q8lXCpxMSmNdfg=
Subject key identifier: 6F:EB:FE:E1:FD:39:FE:84:4F:C1:C9:EF:82:CC:C2:24:0D:AE:BA:0C
Certificate issuer: /CN=F3698DD0AF/serialNumber=C03FDD694F51AAE38F051456101617C56FD89C4A
Certificate serial: 058C
Authority key identifier: C0:3F:DD:69:4F:51:AA:E3:8F:05:14:56:10:16:17:C5:6F:D8:9C:4A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/wD_daU9RquOPBRRWEBYXxW_YnEo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3698DD0/56C8EA4C667711ED967FC0A2F1222468/F65069468C1611F19B4A1EB9CE1D38B0.roa
Signing time: Thu 30 Jul 2026 13:02:48 +0000
ROA not before: Thu 30 Jul 2026 13:02:44 +0000
ROA not after: Fri 31 Dec 2049 13:02:44 +0000
asID: 37282
IP address blocks: 196.49.62.0/24 maxlen: 24
2001:43f8:11f1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3698DD0/56C8EA4C667711ED967FC0A2F1222468/wD_daU9RquOPBRRWEBYXxW_YnEo.crl
rsync://rpki.afrinic.net/repository/member_repository/F3698DD0/56C8EA4C667711ED967FC0A2F1222468/wD_daU9RquOPBRRWEBYXxW_YnEo.mft
rsync://rpki.afrinic.net/repository/afrinic/wD_daU9RquOPBRRWEBYXxW_YnEo.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1420 (0x58c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3698DD0AF, serialNumber=C03FDD694F51AAE38F051456101617C56FD89C4A
Validity
Not Before: Jul 30 13:02:44 2026 GMT
Not After : Dec 31 13:02:44 2049 GMT
Subject: CN=6a6b4b78-8699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ab:b3:28:fc:47:6c:a4:2c:83:12:fc:51:6e:
83:2b:fd:47:89:80:80:52:4e:30:cb:f5:24:99:4f:
90:ca:88:62:33:bf:29:96:51:6a:99:d2:30:08:dc:
2a:1f:25:c7:fd:1c:eb:d5:b8:21:4e:94:43:28:a7:
b0:14:0e:13:b1:dd:d9:0b:48:d8:80:90:49:32:8e:
3b:88:bd:83:d6:98:0a:93:aa:9b:8b:c8:60:d2:a9:
91:8c:01:03:f7:ea:41:b6:f4:64:0e:cc:76:5f:89:
93:15:be:de:4b:47:4d:b3:a9:11:61:ba:60:34:91:
ad:79:30:9d:ab:ce:57:55:52:34:de:f6:fe:e1:a3:
d8:1d:ea:d9:21:be:1c:38:c0:f0:80:ad:79:21:d0:
55:75:cb:d6:4b:1d:7f:68:57:60:31:67:84:ee:63:
4c:96:96:bc:e4:33:c0:53:70:89:6d:97:06:6f:57:
6c:9f:a8:76:af:a3:ce:ba:35:f3:e5:8a:90:7c:8a:
61:4b:b5:a4:9e:f2:75:c9:2c:8a:a6:ca:4e:82:a7:
d4:c8:d7:00:e9:64:28:99:e8:fe:66:b4:db:4a:46:
4b:5e:0c:00:5f:e4:2c:93:42:c3:77:03:dd:24:9a:
55:33:5c:13:fe:11:bd:7c:91:5c:d3:4b:25:94:73:
2b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:EB:FE:E1:FD:39:FE:84:4F:C1:C9:EF:82:CC:C2:24:0D:AE:BA:0C
X509v3 Authority Key Identifier:
keyid:C0:3F:DD:69:4F:51:AA:E3:8F:05:14:56:10:16:17:C5:6F:D8:9C:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3698DD0/56C8EA4C667711ED967FC0A2F1222468/wD_daU9RquOPBRRWEBYXxW_YnEo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wD_daU9RquOPBRRWEBYXxW_YnEo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3698DD0/56C8EA4C667711ED967FC0A2F1222468/F65069468C1611F19B4A1EB9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.49.62.0/24
IPv6:
2001:43f8:11f1::/48
Signature Algorithm: sha256WithRSAEncryption
58:a5:e7:28:1d:24:bf:14:6a:4b:94:db:f4:cb:23:41:15:82:
ff:ab:b4:b7:3a:4f:da:d4:79:1b:dd:27:75:28:3a:ed:11:49:
fb:11:c9:0d:cc:bc:d4:fe:c4:ce:c7:90:5e:40:09:22:8a:25:
6d:0f:1d:56:65:17:23:e9:8c:42:93:67:02:48:90:f2:a8:4a:
9b:d7:85:48:83:1c:c9:e6:86:3c:04:f0:4c:56:ca:b5:f2:03:
d0:04:47:75:33:3a:1e:58:43:99:b8:88:a6:aa:9e:94:44:82:
7b:02:e3:91:95:f9:c9:8b:4c:0a:8f:42:99:31:14:bc:cf:27:
0a:86:40:c9:5a:99:a7:0f:c9:ef:f9:f3:0f:51:5f:e1:05:a0:
ca:f4:e1:e0:29:68:6b:67:d1:6d:01:13:5a:d3:a4:30:53:61:
f6:e6:ac:d4:17:d0:2a:17:55:d4:2e:d7:69:94:94:41:3e:3e:
9a:7c:22:d5:b8:63:e1:46:6a:34:c9:be:da:4a:e8:9b:cf:55:
fc:6e:eb:90:35:e0:a3:af:55:2f:26:0c:28:d0:52:4f:c3:d1:
86:55:52:0a:91:62:b5:d1:3a:d5:c3:ca:dc:9f:1b:d6:f8:b0:
1f:aa:d1:32:1a:b8:0c:89:a5:65:01:db:f2:e9:9d:bc:77:40:
77:98:56:49
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgICBYwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OThERDBBRjExMC8GA1UEBRMoQzAzRkRENjk0RjUxQUFFMzhGMDUxNDU2MTAxNjE3
QzU2RkQ4OUM0QTAeFw0yNjA3MzAxMzAyNDRaFw00OTEyMzExMzAyNDRaMBgxFjAU
BgNVBAMTDTZhNmI0Yjc4LTg2OTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDKq7Mo/EdspCyDEvxRboMr/UeJgIBSTjDL9SSZT5DKiGIzvymWUWqZ0jAI
3CofJcf9HOvVuCFOlEMop7AUDhOx3dkLSNiAkEkyjjuIvYPWmAqTqpuLyGDSqZGM
AQP36kG29GQOzHZfiZMVvt5LR02zqRFhumA0ka15MJ2rzldVUjTe9v7ho9gd6tkh
vhw4wPCArXkh0FV1y9ZLHX9oV2AxZ4TuY0yWlrzkM8BTcIltlwZvV2yfqHavo866
NfPlipB8imFLtaSe8nXJLIqmyk6Cp9TI1wDpZCiZ6P5mtNtKRkteDABf5CyTQsN3
A90kmlUzXBP+Eb18kVzTSyWUcyuDAgMBAAGjggK2MIICsjAdBgNVHQ4EFgQUb+v+
4f05/oRPwcnvgszCJA2uugwwHwYDVR0jBBgwFoAUwD/daU9RquOPBRRWEBYXxW/Y
nEowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjk4REQwLzU2QzhFQTRDNjY3NzExRUQ5NjdGQzBBMkYxMjIyNDY4L3dEX2Rh
VTlScXVPUEJSUldFQllYeFdfWW5Fby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3dEX2RhVTlScXVPUEJSUldFQllYeFdfWW5Fby5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjk4REQwLzU2QzhFQTRDNjY3NzExRUQ5NjdGQzBBMkYx
MjIyNDY4L0Y2NTA2OTQ2OEMxNjExRjE5QjRBMUVCOUNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBADEMT4wDwQCAAIwCQMHACAB
Q/gR8TANBgkqhkiG9w0BAQsFAAOCAQEAWKXnKB0kvxRqS5Tb9MsjQRWC/6u0tzpP
2tR5G90ndSg67RFJ+xHJDcy81P7EzseQXkAJIoolbQ8dVmUXI+mMQpNnAkiQ8qhK
m9eFSIMcyeaGPATwTFbKtfID0ARHdTM6HlhDmbiIpqqelESCewLjkZX5yYtMCo9C
mTEUvM8nCoZAyVqZpw/J7/nzD1Ff4QWgyvTh4Cloa2fRbQETWtOkMFNh9uas1BfQ
KhdV1C7XaZSUQT4+mnwi1bhj4UZqNMm+2krom89V/G7rkDXgo69VLyYMKNBST8PR
hlVSCpFitdE61cPK3J8b1viwH6rRMhq4DImlZQHb8umdvHdAd5hWSQ==
-----END CERTIFICATE-----
Generated at Thu Aug 6 12:32:25 2026 by rpki-client