Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/00B124828F1B11F19DE83D1ACF1D38B0.roa
File: 00B124828F1B11F19DE83D1ACF1D38B0.roa (raw, json)
Hash identifier: l13BHbVoFPPxMA3ILcuvhvkPx8oBuuXg7zLhINGcLo4=
Subject key identifier: 2D:02:C2:CB:43:C7:13:30:EA:F3:4C:50:7E:99:48:5A:15:0B:12:B5
Certificate issuer: /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial: 09D0
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/00B124828F1B11F19DE83D1ACF1D38B0.roa
Signing time: Mon 03 Aug 2026 09:09:17 +0000
ROA not before: Mon 03 Aug 2026 09:09:13 +0000
ROA not after: Wed 15 May 2030 09:09:13 +0000
asID: 37119
IP address blocks: 2c0f:f888:dffe::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.mft
rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2512 (0x9d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D0F50AF, serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Validity
Not Before: Aug 3 09:09:13 2026 GMT
Not After : May 15 09:09:13 2030 GMT
Subject: CN=6a705abd-8aa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:0b:1a:5d:ce:b0:41:a0:0f:dd:d9:fb:b2:85:
d9:9d:a1:6b:2e:9a:75:96:a4:cf:eb:3e:51:bf:92:
ad:91:17:be:ac:a1:0c:e7:d0:82:09:fd:f4:08:97:
b7:57:fe:37:fb:70:5f:6d:1c:fe:f0:fd:16:7b:fb:
54:60:7c:71:8e:e1:d7:c7:41:bd:3c:03:07:1e:19:
42:d3:9e:01:bf:8a:36:6c:d6:b3:98:d0:29:63:69:
9c:dd:30:5f:a9:2e:15:cc:2d:3f:81:97:53:7e:16:
79:f8:ec:2d:64:77:c1:f7:8f:b8:c5:f3:ae:ee:88:
83:11:15:24:f8:2b:89:f8:c6:c1:10:d6:96:5f:14:
fe:ee:66:30:52:9f:f2:fd:08:4b:b9:22:e6:91:f1:
ed:7b:89:24:5a:bd:4f:74:0b:f4:ba:44:5a:cf:df:
14:28:7d:78:29:87:f9:6a:c4:5e:10:c2:cc:1b:b5:
a3:a8:df:a4:bc:bd:42:53:f9:8d:f6:db:13:ea:68:
d9:60:0c:1b:4a:1b:97:ab:ce:14:99:f1:85:64:82:
b3:74:1a:7d:f9:cb:54:59:c7:82:4a:2c:ee:fa:f8:
6e:2f:91:90:cc:47:d9:76:93:24:ff:67:3a:2d:b1:
57:42:09:3a:1c:eb:77:a8:3c:6e:4f:63:86:a1:c3:
2c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:02:C2:CB:43:C7:13:30:EA:F3:4C:50:7E:99:48:5A:15:0B:12:B5
X509v3 Authority Key Identifier:
keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/00B124828F1B11F19DE83D1ACF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:f888:dffe::/48
Signature Algorithm: sha256WithRSAEncryption
41:93:1b:49:30:6e:8c:1d:8f:7a:47:8b:7d:a8:00:16:dc:83:
cb:ff:b8:e4:26:c7:fc:ae:f1:59:c5:86:d4:db:4e:4e:cf:29:
5f:5e:7d:8e:4d:c0:0e:d2:34:e0:96:e4:14:84:57:a0:d6:b0:
9a:ce:6e:0c:4c:33:0d:70:ab:8f:7a:a8:7f:69:78:f7:7e:3c:
b7:d1:61:49:e3:27:f3:79:02:19:65:00:99:8a:19:1a:77:77:
6a:ae:a0:86:e3:6b:18:15:ae:c8:7f:4a:f6:86:c3:a9:b9:22:
f2:63:b7:ec:1c:fd:80:cc:bb:0f:51:d4:42:65:b1:d7:71:31:
17:b3:db:77:86:0e:7f:5d:6e:e7:25:74:68:d2:92:ae:6b:fe:
a1:e2:c3:bc:10:6f:d6:28:af:e6:b1:33:76:63:84:0f:d8:98:
50:f5:77:11:f1:93:da:e1:c1:7a:a8:92:59:c4:20:a8:8f:8f:
3d:b5:33:d5:6e:99:cb:2b:cd:50:60:80:e4:cc:7e:42:ee:e9:
9f:73:61:0c:13:45:c1:97:63:d1:23:53:6d:dc:e2:4c:82:76:
7e:71:6e:39:7c:03:c8:da:b9:05:84:95:ec:2f:0b:f0:52:c0:
04:c5:06:fb:38:79:c8:26:6e:60:fb:05:f1:67:50:78:38:1c:
fb:b5:2a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:27:58 2026 by rpki-client