Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CC035/71F69968715811ED8B19339FF1222468/8DD1E8A28D8011F1872795DECE1D38B0.roa
File: 8DD1E8A28D8011F1872795DECE1D38B0.roa (raw, json)
Hash identifier: AuG7o8U9JTA7hBUkkkhtnhH4htjoCHWQPqg12mvfVJM=
Subject key identifier: D8:3C:66:AB:FA:A8:82:12:9E:CC:06:BD:9F:4F:FC:B5:39:6D:72:B4
Certificate issuer: /CN=F36CC035AF/serialNumber=E3B07BB9D0957749FFE48C7E7325A9E11B416AB9
Certificate serial: 0584
Authority key identifier: E3:B0:7B:B9:D0:95:77:49:FF:E4:8C:7E:73:25:A9:E1:1B:41:6A:B9
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/47B7udCVd0n_5Ix-cyWp4RtBark.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CC035/71F69968715811ED8B19339FF1222468/8DD1E8A28D8011F1872795DECE1D38B0.roa
Signing time: Sat 01 Aug 2026 08:11:10 +0000
ROA not before: Sat 01 Aug 2026 08:11:06 +0000
ROA not after: Wed 01 Dec 2032 08:11:06 +0000
asID: 37009
IP address blocks: 2c0f:f778::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36CC035/71F69968715811ED8B19339FF1222468/47B7udCVd0n_5Ix-cyWp4RtBark.crl
rsync://rpki.afrinic.net/repository/member_repository/F36CC035/71F69968715811ED8B19339FF1222468/47B7udCVd0n_5Ix-cyWp4RtBark.mft
rsync://rpki.afrinic.net/repository/afrinic/47B7udCVd0n_5Ix-cyWp4RtBark.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1412 (0x584)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CC035AF, serialNumber=E3B07BB9D0957749FFE48C7E7325A9E11B416AB9
Validity
Not Before: Aug 1 08:11:06 2026 GMT
Not After : Dec 1 08:11:06 2032 GMT
Subject: CN=6a6daa1e-954c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8d:f0:d9:13:0c:48:85:13:10:14:d8:23:2e:
a1:11:7c:a2:fa:7e:08:94:58:fb:bb:fc:b6:a9:b9:
c9:8d:cb:62:83:8e:a9:65:3b:e5:c0:b5:93:1c:21:
fb:5e:72:e6:07:62:b2:33:bb:a3:20:9a:9d:65:36:
3e:37:7b:4f:b5:54:2a:d9:46:8a:b1:b0:97:50:d5:
b3:79:a0:1d:96:49:83:1c:71:59:bd:7b:38:9c:1e:
ed:90:17:d4:5b:11:35:22:e9:0a:23:d2:61:9a:36:
86:29:32:65:40:93:f9:57:ba:7c:48:11:2a:5f:cf:
de:fa:fa:cf:54:d3:65:e2:cb:b3:6f:e7:81:4c:1b:
d4:85:0d:02:93:43:18:4a:94:2c:f5:fa:47:9c:63:
5b:79:28:50:5b:1c:33:50:5f:96:d2:52:56:11:fd:
d7:06:86:2b:4a:9c:a5:67:1b:93:13:52:67:f8:57:
cb:ec:37:b5:11:71:c4:d9:36:ff:98:59:41:6d:32:
28:43:4e:b4:ca:44:db:ea:15:4e:67:1c:c2:cb:ed:
f3:18:89:41:ee:70:24:8e:a4:10:18:da:c8:3b:42:
94:23:fe:93:59:93:27:45:fe:16:8d:bf:7a:f6:94:
0b:21:11:c3:d3:aa:73:6f:1a:06:cd:76:c0:19:1f:
25:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:3C:66:AB:FA:A8:82:12:9E:CC:06:BD:9F:4F:FC:B5:39:6D:72:B4
X509v3 Authority Key Identifier:
keyid:E3:B0:7B:B9:D0:95:77:49:FF:E4:8C:7E:73:25:A9:E1:1B:41:6A:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC035/71F69968715811ED8B19339FF1222468/47B7udCVd0n_5Ix-cyWp4RtBark.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/47B7udCVd0n_5Ix-cyWp4RtBark.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC035/71F69968715811ED8B19339FF1222468/8DD1E8A28D8011F1872795DECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:f778::/32
Signature Algorithm: sha256WithRSAEncryption
4a:03:1f:52:c9:e9:cd:12:38:28:07:91:79:08:f1:b4:a3:09:
98:e6:5e:9d:9d:a8:ba:fe:d9:07:da:9a:11:ec:0f:87:b9:9c:
e4:00:b7:b2:e9:f6:4d:86:ea:52:70:20:7e:6f:cf:90:57:07:
5c:ae:12:b9:2f:48:b7:ae:22:b8:f5:a7:f0:e2:72:e5:76:d7:
14:f4:ae:65:38:8a:ea:51:1e:b1:ac:45:aa:b4:86:a8:53:b3:
e2:5e:a0:6f:3f:de:d0:59:08:3b:9f:59:32:cd:04:d4:34:68:
c7:6c:4c:03:61:70:05:53:46:48:0c:9d:91:e6:e0:79:5f:96:
82:0e:25:35:4e:8d:34:e5:52:b0:8a:ae:38:8b:57:71:cb:fe:
8c:b5:7a:ef:09:dc:29:79:98:13:af:66:ba:ef:31:55:53:95:
9b:a7:b1:f8:ae:19:a8:eb:3d:d4:85:19:8d:26:f3:fc:f0:06:
25:18:42:fa:68:61:89:4b:32:51:d2:e4:20:78:22:a5:46:4c:
3f:09:d1:e7:31:1a:4c:63:e2:f8:4f:c6:77:a0:0b:6b:c8:1a:
3f:ec:ad:2f:a8:95:8a:83:b0:23:46:1a:70:b3:91:40:b0:51:
5e:61:04:2d:b0:e4:bc:c2:fa:1f:c5:a4:4c:fa:3b:24:92:f9:
00:db:56:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:27:42 2026 by rpki-client