Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/A91D200E8F3811F197AB85CCCE1D38B0.roa
File: A91D200E8F3811F197AB85CCCE1D38B0.roa (raw, json)
Hash identifier: gyicZrdMfEY5YZW5SPDQYKX9GUBcEc6xpsYP61aDRSQ=
Subject key identifier: CF:F5:1E:6D:38:BA:5F:FC:23:B4:B9:0B:6A:21:6B:86:A3:FF:44:8E
Certificate issuer: /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial: 0A2A
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/A91D200E8F3811F197AB85CCCE1D38B0.roa
Signing time: Mon 03 Aug 2026 12:41:35 +0000
ROA not before: Mon 03 Aug 2026 12:41:30 +0000
ROA not after: Sat 30 Jul 2033 12:41:30 +0000
asID: 37119
IP address blocks: 2c0f:f888:500::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.mft
rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2602 (0xa2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D0F50AF, serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Validity
Not Before: Aug 3 12:41:30 2026 GMT
Not After : Jul 30 12:41:30 2033 GMT
Subject: CN=6a708c7e-72a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:51:14:5c:fa:bc:34:19:e5:7d:f2:fd:0f:af:
6f:94:ce:77:6c:6a:6b:c9:46:d9:7d:a9:1a:2f:06:
46:6c:ab:16:0e:a3:dc:a9:98:4c:f5:80:e2:bd:39:
6c:42:56:34:d2:73:51:19:dc:92:eb:b8:dc:84:43:
58:9f:52:56:a4:82:85:60:16:6a:d2:84:93:93:1e:
62:12:98:75:05:72:d0:16:0c:f2:72:5c:a4:32:84:
7c:57:3a:3c:9c:2a:82:2f:fc:bf:4f:68:c2:b4:52:
6a:14:e9:bb:df:26:b8:62:bd:f2:aa:0c:6d:1d:a7:
fd:50:3c:f7:8b:4d:55:ba:d4:d4:d0:b1:b6:8e:42:
12:e3:a1:44:ed:e7:97:fe:19:a6:f1:34:f5:c9:70:
24:c6:8d:24:b6:b5:b5:84:df:83:d3:59:bf:62:97:
19:65:fd:63:ad:c9:e1:d7:c2:3e:dc:db:a5:62:2d:
97:14:1f:13:ff:8e:95:3d:98:bb:8c:d6:84:77:98:
22:8b:7e:c4:b8:e8:cf:f7:0a:8f:3d:31:5c:35:63:
9f:84:16:ad:ba:d8:6a:92:1a:7f:ae:6a:43:7c:8a:
ca:c8:38:dd:f0:41:fa:f6:e6:5c:5b:04:eb:ed:84:
42:5e:fd:a8:dd:9a:2f:40:d5:6a:41:05:3f:1a:94:
3e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:F5:1E:6D:38:BA:5F:FC:23:B4:B9:0B:6A:21:6B:86:A3:FF:44:8E
X509v3 Authority Key Identifier:
keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/A91D200E8F3811F197AB85CCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:f888:500::/40
Signature Algorithm: sha256WithRSAEncryption
4e:6e:a1:02:e5:68:9d:3f:68:e2:c2:6b:89:fe:9b:a7:2d:d0:
8f:f3:24:99:24:ba:07:5d:28:b8:eb:bb:37:1b:ab:eb:47:0d:
7b:48:6a:08:82:9d:07:d6:2a:2a:fb:ce:a1:60:ec:86:17:c4:
00:55:45:09:d9:2a:3b:c1:a1:ea:23:fe:e5:a3:7f:d7:e1:54:
de:f1:0e:2d:5b:77:f9:85:c9:9c:4d:56:32:b5:d3:78:90:91:
0d:16:fb:7f:8c:8b:f1:1e:5d:3e:e6:4e:b9:ea:14:1b:91:6f:
79:80:5d:e5:61:49:9b:70:79:e0:07:86:4c:21:78:6d:81:98:
14:2e:cb:7d:42:90:7c:9e:a6:bc:f6:96:35:80:d2:44:0e:5a:
ce:cf:1e:f1:b1:ec:39:48:9c:bc:a1:36:28:39:1e:1a:14:bb:
42:ed:4c:45:ca:b7:48:81:20:d6:30:28:9d:c2:d2:53:68:0f:
94:35:db:74:00:6a:f7:1c:74:8b:fd:8e:42:b5:69:fa:36:5b:
e2:ac:57:66:5f:dd:31:c3:1c:22:01:ee:f2:05:06:8b:4f:98:
ce:e4:d6:ea:a6:85:ee:2e:df:ab:e9:9f:db:af:70:3b:20:a2:
45:5a:ec:2d:20:7c:0d:eb:1f:75:6a:09:48:45:f1:50:23:52:
69:98:f7:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:27:42 2026 by rpki-client