Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/8749DE628F1B11F197C8801CCF1D38B0.roa
File: 8749DE628F1B11F197C8801CCF1D38B0.roa (raw, json)
Hash identifier: S+exlMYtdTk7Dwb8QWAhAB66U8suQkpXwd3wzg6UfaU=
Subject key identifier: 78:F6:30:71:A3:52:88:07:54:8D:23:A5:1F:F2:86:D5:A1:65:0C:C2
Certificate issuer: /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial: 09D2
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/8749DE628F1B11F197C8801CCF1D38B0.roa
Signing time: Mon 03 Aug 2026 09:13:02 +0000
ROA not before: Mon 03 Aug 2026 09:12:59 +0000
ROA not after: Wed 15 May 2030 09:12:59 +0000
asID: 37119
IP address blocks: 2c0f:f888:dfff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.mft
rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2514 (0x9d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D0F50AF, serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Validity
Not Before: Aug 3 09:12:59 2026 GMT
Not After : May 15 09:12:59 2030 GMT
Subject: CN=6a705b9e-25fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:39:2e:d3:32:83:5f:40:ff:d3:d5:2f:d3:ca:
61:f4:86:05:b6:26:02:11:b4:41:11:08:db:39:03:
2e:a4:92:b6:5d:6d:64:e4:ff:c9:b6:0d:41:83:21:
1f:1f:34:64:c7:b0:5c:e9:50:fb:2d:0d:fe:6d:37:
3a:57:ac:03:fa:0a:01:4c:44:d0:b1:8f:37:6c:e9:
e0:a7:6f:3f:59:1f:af:d1:29:0c:53:52:75:73:e8:
49:c0:de:4b:31:94:95:25:f4:a8:32:d7:25:95:23:
71:14:a8:11:90:03:5e:05:22:55:c9:98:7d:0c:b2:
23:7a:d5:e4:0c:82:01:2e:74:ec:c5:a7:30:3f:35:
20:ae:e4:3e:17:12:3b:cb:c6:59:44:25:27:b6:4d:
86:92:b8:62:08:d9:74:93:3f:be:1f:59:5a:9c:e6:
72:f2:b0:57:79:c8:d7:20:1f:25:90:1b:51:22:f0:
23:76:fb:c4:db:af:ea:b2:d6:2e:e1:c8:e1:e4:e4:
95:6c:95:fa:51:55:8e:fb:42:8e:7c:b5:07:bf:2e:
15:e2:cd:df:d4:16:62:93:7e:46:2c:87:30:0e:f1:
e5:d2:87:dc:c1:4a:d4:7a:44:0b:77:e0:c3:a5:f9:
70:9d:f0:bd:e9:f6:df:27:31:49:f2:59:4f:c7:12:
e0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:F6:30:71:A3:52:88:07:54:8D:23:A5:1F:F2:86:D5:A1:65:0C:C2
X509v3 Authority Key Identifier:
keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/8749DE628F1B11F197C8801CCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:f888:dfff::/48
Signature Algorithm: sha256WithRSAEncryption
57:89:4d:84:b2:57:1e:f5:07:f9:b0:80:9d:ce:a2:5d:3a:50:
1c:3c:a4:4d:d5:74:cd:2c:57:8b:b9:39:d0:a2:0f:48:20:a0:
45:d0:08:ab:09:b5:b5:9b:99:90:8b:73:cf:11:2f:ad:2e:68:
b2:13:70:18:ef:15:bd:25:38:2d:a0:de:57:dd:0d:f5:4b:03:
1e:2b:d1:4a:02:80:24:cf:f9:9c:7f:e3:1c:a8:d2:04:09:87:
bc:90:a1:ed:99:d5:a9:03:85:3c:38:49:c7:67:69:77:cd:0e:
c1:19:7f:bf:96:cd:d7:d1:ec:e9:c7:77:86:db:1a:a6:35:ed:
da:62:51:04:16:0f:ae:75:45:50:fe:45:01:2c:5a:03:cd:a5:
2f:1c:5c:32:02:79:f0:4d:86:08:3d:09:cd:33:6c:b5:0c:72:
54:a6:b0:75:66:ec:f1:3f:09:52:3c:8f:9d:98:49:4a:db:ce:
e8:e1:76:9b:c3:28:b2:29:6c:55:91:d2:6b:04:9a:5c:2b:9c:
fc:0d:97:f1:e2:30:f9:7c:9c:d5:c6:07:65:57:27:66:b0:95:
be:f9:66:25:04:a7:18:e9:79:df:6a:93:a6:51:4c:6a:fa:9b:
44:ae:b0:b7:fc:91:33:16:de:d1:39:68:2b:d3:20:f8:25:7d:
6d:74:06:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:28:00 2026 by rpki-client