Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/54D4F4CE8F3B11F18BFBAEDCCE1D38B0.roa
File: 54D4F4CE8F3B11F18BFBAEDCCE1D38B0.roa (raw, json)
Hash identifier: QClJ8kTP20xCXIzUX69shGovvyucjLA83FYOIL5HHlE=
Subject key identifier: 8E:9E:60:36:20:1B:14:B2:E9:91:57:A2:EF:6D:6E:C8:1B:B4:67:8F
Certificate issuer: /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial: 0A32
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/54D4F4CE8F3B11F18BFBAEDCCE1D38B0.roa
Signing time: Mon 03 Aug 2026 13:00:42 +0000
ROA not before: Mon 03 Aug 2026 13:00:38 +0000
ROA not after: Sat 30 Jul 2033 13:00:38 +0000
asID: 37119
IP address blocks: 2c0f:f888:dffe::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.mft
rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2610 (0xa32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D0F50AF, serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Validity
Not Before: Aug 3 13:00:38 2026 GMT
Not After : Jul 30 13:00:38 2033 GMT
Subject: CN=6a7090fa-b6ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b0:73:68:af:9f:05:37:a3:6e:37:a9:8f:1b:
0d:9d:b4:b6:09:8c:b7:a0:18:22:59:60:35:e4:15:
b6:c4:60:7e:fb:21:68:14:3e:96:ba:1b:86:8d:f4:
26:19:5d:33:de:d9:b1:8a:de:e8:d8:bf:74:f9:fb:
0b:ea:3e:c9:16:09:b3:97:ed:7b:f5:53:50:f6:8f:
a8:8a:6e:a6:dc:36:88:41:1d:23:50:6c:49:78:ce:
69:45:63:4e:8e:5b:5e:0b:ae:bd:f1:fc:ae:f6:23:
08:ed:38:90:59:5a:bf:f9:ec:50:4a:18:11:a2:85:
3e:34:02:02:58:59:10:25:99:cc:e5:6b:b4:db:10:
9a:48:f3:36:b6:d7:a8:c8:f2:4b:97:e4:d4:12:ba:
96:10:a6:f0:c5:f5:e6:e6:67:23:15:0e:00:90:0b:
79:52:52:68:1b:d5:d4:6c:40:e1:7e:55:61:b9:05:
4c:07:e3:96:90:9f:1e:d1:79:a0:df:34:43:a8:e2:
2f:2f:7b:93:9a:17:3e:53:ce:32:43:70:fe:05:e7:
c1:39:a6:cf:a9:47:d6:8f:8d:59:61:86:bc:18:77:
89:ed:b7:2c:19:f5:fb:f3:9c:4b:c8:78:03:4d:d6:
c1:d9:a8:ee:95:0a:82:8c:d1:ec:0a:84:bf:f5:c2:
e9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:9E:60:36:20:1B:14:B2:E9:91:57:A2:EF:6D:6E:C8:1B:B4:67:8F
X509v3 Authority Key Identifier:
keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/54D4F4CE8F3B11F18BFBAEDCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:f888:dffe::/48
Signature Algorithm: sha256WithRSAEncryption
1c:82:b7:0a:01:96:1b:23:d2:b7:3b:47:3f:f2:24:f0:aa:68:
d7:a2:9f:13:03:de:40:9b:37:06:db:a8:ef:ef:5e:a3:28:1b:
b6:9f:38:ab:02:63:ad:b7:fd:66:07:24:38:83:71:25:c4:68:
e4:84:0d:1a:63:c8:0c:70:a4:31:67:03:3f:20:c8:d8:8b:14:
b5:71:77:01:7e:13:c0:b4:cf:b7:0b:76:d0:48:5f:2c:ed:31:
81:49:aa:ba:57:24:3a:67:5b:a3:98:f6:63:e5:7a:0b:a2:f6:
bc:08:d8:a1:d9:2c:6e:c5:69:70:64:db:03:53:14:7c:e6:2b:
e9:da:8f:56:7a:ed:6b:4e:7d:96:b7:35:40:42:81:ad:a2:1e:
83:29:04:c7:5c:84:ee:74:97:37:38:59:1e:c8:09:32:17:28:
7b:28:a1:c8:ce:f5:93:7a:e9:8f:f3:e6:da:0e:2c:95:00:c0:
0c:0a:cf:34:f1:49:83:a8:b1:7a:32:90:a6:f9:e0:09:22:28:
24:5c:60:6f:65:9d:1d:ee:ca:b7:d5:fa:db:62:ec:34:38:7a:
8c:76:f8:9d:36:8f:56:2f:37:98:db:bd:86:db:7a:4f:bb:e5:
f8:a1:c9:e4:83:60:72:85:0e:83:b3:e0:e1:a5:72:e7:a9:ac:
e8:6b:f7:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:27:36 2026 by rpki-client