Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/10D013308F3611F1A46C58BCCE1D38B0.roa
File: 10D013308F3611F1A46C58BCCE1D38B0.roa (raw, json)
Hash identifier: nvI84hxDhPw0ubjqAGhklBn2WAlI7o26VJrZhUxHy1U=
Subject key identifier: E2:29:8B:DB:75:26:BB:E2:A7:E9:DD:33:6C:5E:91:8D:80:B7:99:B4
Certificate issuer: /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial: 0A1E
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/10D013308F3611F1A46C58BCCE1D38B0.roa
Signing time: Mon 03 Aug 2026 12:23:00 +0000
ROA not before: Mon 03 Aug 2026 12:22:56 +0000
ROA not after: Sat 30 Jul 2033 12:22:56 +0000
asID: 37119
IP address blocks: 2c0f:f888:8000::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.mft
rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2590 (0xa1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D0F50AF, serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Validity
Not Before: Aug 3 12:22:56 2026 GMT
Not After : Jul 30 12:22:56 2033 GMT
Subject: CN=6a708824-1452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b1:cc:10:1f:72:f4:b8:2f:68:82:e0:a9:cf:
83:b9:3d:eb:1a:de:54:2c:7c:72:3a:67:d1:2f:60:
69:66:8c:ca:d7:b0:8d:32:a8:4d:b5:dd:1c:e9:f6:
78:44:54:fb:2a:a4:61:ad:d4:17:49:f5:ed:3e:33:
30:40:ed:99:27:d0:99:9a:a7:69:b7:a5:de:f7:82:
59:ed:61:7f:f6:b0:0d:04:40:54:81:c7:79:5e:38:
8d:b8:c5:ab:8d:57:22:d8:f3:3a:fd:6d:9e:b0:ea:
3e:02:57:32:5e:77:03:e8:83:ec:94:f8:f2:36:f6:
03:32:aa:98:5e:bf:14:72:a7:c6:a4:c9:ed:d9:18:
72:b9:b8:6f:78:55:06:6c:3a:e2:b4:7b:34:32:fc:
e2:e9:cf:c1:b3:60:41:b6:1f:62:ee:fe:1f:a5:10:
6c:8d:af:0c:6d:61:1d:7e:f5:61:91:21:2d:a4:be:
51:19:e8:b3:4b:e2:57:7a:71:3a:0b:99:6b:29:d0:
24:e7:4a:e3:8c:84:36:64:54:b9:f7:cf:d5:51:59:
44:97:96:ca:64:8f:cb:7e:0b:dc:8d:09:45:c1:7b:
2e:11:5f:68:26:e3:0c:7b:af:ac:c5:a1:87:e1:ea:
a2:aa:a1:bd:6d:8c:1d:ce:3c:33:f8:a8:a0:82:73:
19:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:29:8B:DB:75:26:BB:E2:A7:E9:DD:33:6C:5E:91:8D:80:B7:99:B4
X509v3 Authority Key Identifier:
keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/10D013308F3611F1A46C58BCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:f888:8000::/33
Signature Algorithm: sha256WithRSAEncryption
4d:11:b9:d7:9b:70:07:4a:d7:e7:43:e2:6c:09:1e:93:a7:fe:
07:a8:78:7c:40:76:1c:2e:d9:b1:08:b7:ac:40:41:d1:fd:46:
88:6e:d0:34:4a:e0:fc:96:6a:9f:6d:2d:46:0b:93:e6:f7:e0:
65:8c:dc:73:b9:b2:35:6e:de:91:b8:1b:01:c0:a1:5a:22:50:
74:06:03:30:9d:e8:78:00:bd:f1:01:ed:09:31:b8:df:e2:9c:
15:69:e2:37:ee:99:b2:e1:81:d5:8f:62:77:3c:13:df:bd:cc:
25:0d:e8:12:35:52:99:f9:28:f2:aa:69:de:b0:90:64:12:dd:
ac:e8:85:e6:51:ce:7c:6f:dc:b6:9a:64:c1:98:7f:e1:0d:f2:
e6:47:8d:74:c6:75:b6:2f:25:3c:9c:40:b2:94:f7:29:07:a7:
e5:a8:34:18:b8:4a:45:71:32:af:0b:af:43:f0:16:14:b0:b4:
3c:c8:34:43:2c:86:6a:c3:4b:79:b8:5e:7a:6a:03:c5:bc:be:
df:4e:f4:37:ad:7f:c1:2e:aa:35:4e:fb:4c:f7:7b:15:c2:ae:
72:ea:50:14:46:1f:fe:ff:f7:62:e9:e5:6a:bb:8c:d9:bc:54:
32:c3:e6:93:00:79:f9:b1:ed:e9:01:20:bc:44:6a:ae:36:2c:
2d:9e:5c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:28:01 2026 by rpki-client