Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A8AA3/947078EC9E5211EEACE10A1AD25BE465/C5678B30917911F18210FDF7CE1D38B0.roa
File: C5678B30917911F18210FDF7CE1D38B0.roa (raw, json)
Hash identifier: ngAQVYSoy/nQgR66WjgysPf+z6opjHWeFtwUTiBVTeI=
Subject key identifier: 78:8E:7B:5A:A2:33:48:B1:D2:2A:CE:A3:21:4D:28:D4:94:93:9D:AD
Certificate issuer: /CN=F36A8AA3AF/serialNumber=BDB1C832442A1706BF77FC4EC4371819BA3FC1A6
Certificate serial: 03DC
Authority key identifier: BD:B1:C8:32:44:2A:17:06:BF:77:FC:4E:C4:37:18:19:BA:3F:C1:A6
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/vbHIMkQqFwa_d_xOxDcYGbo_waY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A8AA3/947078EC9E5211EEACE10A1AD25BE465/C5678B30917911F18210FDF7CE1D38B0.roa
Signing time: Thu 06 Aug 2026 09:32:42 +0000
ROA not before: Thu 06 Aug 2026 09:32:38 +0000
ROA not after: Mon 06 Aug 2029 09:32:38 +0000
asID: 37484
IP address blocks: 2c0f:f838::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A8AA3/947078EC9E5211EEACE10A1AD25BE465/vbHIMkQqFwa_d_xOxDcYGbo_waY.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A8AA3/947078EC9E5211EEACE10A1AD25BE465/vbHIMkQqFwa_d_xOxDcYGbo_waY.mft
rsync://rpki.afrinic.net/repository/afrinic/vbHIMkQqFwa_d_xOxDcYGbo_waY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 988 (0x3dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A8AA3AF, serialNumber=BDB1C832442A1706BF77FC4EC4371819BA3FC1A6
Validity
Not Before: Aug 6 09:32:38 2026 GMT
Not After : Aug 6 09:32:38 2029 GMT
Subject: CN=6a7454ba-7468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:93:0d:7d:49:58:6b:2c:5a:2c:ce:91:01:f2:
29:7d:61:0c:ee:51:b2:1c:00:6a:55:e3:fc:b5:ae:
ba:f8:57:94:96:0f:5c:89:1f:41:22:48:d9:b5:cd:
f0:d0:66:f4:ff:ba:05:0a:d1:3f:56:0c:52:d1:af:
32:3a:40:5c:e7:01:f5:b2:81:ae:e2:60:18:70:e4:
a5:73:73:c1:c1:da:f8:13:db:c3:a0:eb:62:e8:c6:
a8:0c:ec:61:94:f5:11:d3:21:0e:24:ce:1b:ef:82:
b3:8b:4d:58:78:ad:d2:7b:7f:82:ee:8d:86:3c:6e:
9b:d9:c0:cd:6d:36:23:0e:ea:3a:0c:61:7b:f8:67:
27:8a:93:b9:03:01:9a:18:5e:03:3f:fa:fd:6b:57:
3c:19:af:a6:cc:af:fa:7a:ba:0f:5f:4d:bd:7f:ca:
d7:06:b2:91:6a:14:3d:e8:ed:44:48:5d:4d:53:e6:
75:c9:1f:d6:65:bd:40:ab:3a:23:e8:3e:e2:ef:71:
2d:a2:4e:ae:63:b6:cb:1a:ce:85:e9:da:08:df:7b:
b8:a0:d5:f6:f4:32:e7:59:2e:ab:00:d4:9d:2c:ac:
0e:f6:75:d9:48:4a:04:e5:b8:b9:31:99:fd:2f:3d:
b8:29:b4:37:38:01:18:17:d1:ad:a2:f5:96:ab:50:
6a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:8E:7B:5A:A2:33:48:B1:D2:2A:CE:A3:21:4D:28:D4:94:93:9D:AD
X509v3 Authority Key Identifier:
keyid:BD:B1:C8:32:44:2A:17:06:BF:77:FC:4E:C4:37:18:19:BA:3F:C1:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A8AA3/947078EC9E5211EEACE10A1AD25BE465/vbHIMkQqFwa_d_xOxDcYGbo_waY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vbHIMkQqFwa_d_xOxDcYGbo_waY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A8AA3/947078EC9E5211EEACE10A1AD25BE465/C5678B30917911F18210FDF7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:f838::/32
Signature Algorithm: sha256WithRSAEncryption
89:47:04:ab:9e:2a:d2:e6:aa:8d:2a:fd:ef:44:ea:df:8b:5a:
f1:a1:ee:b1:f0:49:ff:d6:e9:f6:5c:53:d0:44:58:7f:95:d6:
31:9c:af:1b:81:7a:1a:b9:59:22:ee:3c:71:c3:44:2e:16:e1:
1c:7a:29:69:0b:28:05:00:f0:87:41:d1:8c:73:4f:c2:d9:e1:
51:ef:4c:f5:bb:1f:18:97:78:55:e4:69:18:76:2f:f9:9b:df:
3b:24:e9:8c:c6:eb:13:8f:b7:34:a9:a6:c4:89:98:4d:59:39:
82:65:2e:65:ca:26:2d:7d:7b:aa:4d:57:81:11:86:1d:38:4e:
8a:ff:cf:e8:68:f3:bf:04:a2:aa:a2:fc:81:04:3f:54:b6:56:
2b:1e:05:4e:38:53:7a:84:10:1d:24:99:25:a2:15:6d:12:5c:
4c:fa:bf:f9:56:ab:d4:7f:33:99:44:d6:2b:c7:5d:5b:c9:22:
2d:73:65:c5:bd:5d:bd:d9:8c:0d:12:3e:da:d4:21:10:ca:6d:
de:c1:1e:a5:3f:a1:a1:f9:6f:09:cd:88:21:cc:e4:ba:24:82:
20:26:84:d5:89:6d:8f:7c:e9:17:48:f4:bf:7c:44:3a:ac:8d:
0f:70:6f:f3:5d:77:0c:df:c8:03:05:35:5d:17:f3:74:5e:65:
fb:f4:d0:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:32:19 2026 by rpki-client