Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D3930/63C46EC8A0F311EC946EDA945A40D577/50EB151660AE11F1946459D6CE1D38B0.roa
File: 50EB151660AE11F1946459D6CE1D38B0.roa (raw, json)
Hash identifier: 3jYVZX446QMMMo1B09+QFtsPNpHJUqVfEGEWSu2C7qM=
Subject key identifier: 64:6C:D7:01:77:92:CC:F0:D9:7D:94:52:80:D9:18:2C:94:2F:3F:79
Certificate issuer: /CN=F36D3930AF/serialNumber=35CF067DC26EE4895F4B16AD9BD300FEABC3A353
Certificate serial: 0649
Authority key identifier: 35:CF:06:7D:C2:6E:E4:89:5F:4B:16:AD:9B:D3:00:FE:AB:C3:A3:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Nc8GfcJu5IlfSxatm9MA_qvDo1M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D3930/63C46EC8A0F311EC946EDA945A40D577/50EB151660AE11F1946459D6CE1D38B0.roa
Signing time: Fri 05 Jun 2026 07:15:23 +0000
ROA not before: Fri 05 Jun 2026 07:15:18 +0000
ROA not after: Wed 31 Dec 2042 07:15:18 +0000
asID: 4755
IP address blocks: 102.112.0.0/13 maxlen: 24
196.20.128.0/17 maxlen: 24
196.192.0.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D3930/63C46EC8A0F311EC946EDA945A40D577/Nc8GfcJu5IlfSxatm9MA_qvDo1M.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D3930/63C46EC8A0F311EC946EDA945A40D577/Nc8GfcJu5IlfSxatm9MA_qvDo1M.mft
rsync://rpki.afrinic.net/repository/afrinic/Nc8GfcJu5IlfSxatm9MA_qvDo1M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 08 Jun 2026 00:08:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1609 (0x649)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D3930AF, serialNumber=35CF067DC26EE4895F4B16AD9BD300FEABC3A353
Validity
Not Before: Jun 5 07:15:18 2026 GMT
Not After : Dec 31 07:15:18 2042 GMT
Subject: CN=6a22778a-cbe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:02:82:6d:ce:96:1c:80:e1:4d:cf:d9:76:22:
b6:e6:fd:84:28:26:3b:49:44:de:c9:4c:9a:8a:48:
da:40:98:21:30:a3:60:b4:81:b6:ad:ca:e1:b4:9b:
79:d1:a4:d9:43:df:22:2d:81:d0:1e:19:1f:65:0f:
a7:51:01:84:f4:8b:bb:34:ec:98:6c:66:f7:5c:39:
2c:b1:23:2d:93:83:4a:31:09:70:bc:c8:3e:9c:f2:
a3:fa:82:8c:04:29:89:c1:56:20:b9:e7:ce:dc:5c:
ba:fc:57:a8:9e:d9:42:ee:bc:ee:b5:35:f2:e4:47:
e3:f9:20:2c:e9:7c:ab:79:e6:e7:55:49:14:81:e5:
56:29:46:57:c6:cb:fc:6d:17:9e:f5:6b:3b:3d:29:
64:b4:33:b3:90:ea:37:40:7e:73:07:28:4f:d4:c4:
2a:7d:65:7e:cc:f4:37:40:2e:11:31:d4:27:d1:71:
e7:e8:e8:73:c9:4e:e4:45:8b:79:7a:1e:62:1d:02:
d6:9e:7c:5d:7c:b4:60:5c:57:1b:ae:c8:d4:a7:9a:
3d:d2:24:6b:42:00:d2:e7:2c:19:f0:62:84:c6:6a:
57:82:6f:98:fd:b6:25:6d:21:6e:0f:db:21:cc:af:
71:9e:ba:16:b7:4a:4b:b0:e8:70:0c:4f:6a:8b:d8:
47:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:6C:D7:01:77:92:CC:F0:D9:7D:94:52:80:D9:18:2C:94:2F:3F:79
X509v3 Authority Key Identifier:
keyid:35:CF:06:7D:C2:6E:E4:89:5F:4B:16:AD:9B:D3:00:FE:AB:C3:A3:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D3930/63C46EC8A0F311EC946EDA945A40D577/Nc8GfcJu5IlfSxatm9MA_qvDo1M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Nc8GfcJu5IlfSxatm9MA_qvDo1M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D3930/63C46EC8A0F311EC946EDA945A40D577/50EB151660AE11F1946459D6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.112.0.0/13
196.20.128.0/17
196.192.0.0/20
Signature Algorithm: sha256WithRSAEncryption
6a:12:d1:d7:7c:cf:fb:2f:30:da:0e:2e:bd:52:58:6b:a7:6d:
45:a4:c5:a9:fb:80:5b:ae:01:5e:ca:01:31:a2:f6:0e:24:1d:
cd:0f:7c:93:74:3b:d7:bf:be:ac:76:ed:99:35:75:e7:f6:9a:
28:57:5f:7a:8b:1f:e7:07:9b:1b:26:56:57:d0:6d:7c:c5:ce:
a8:68:e1:26:d7:da:df:5b:7d:3a:57:a4:bc:62:9c:66:73:e7:
de:14:9c:34:fe:51:1c:2b:ff:25:18:ef:19:f2:7b:41:b3:d6:
30:33:e8:bd:3f:32:69:a9:27:bc:8f:f4:87:93:a3:e4:04:6a:
a0:65:cb:05:7f:0d:b2:63:04:3b:c1:f0:81:f8:e3:f3:06:d7:
d5:63:9f:65:9c:b6:a7:05:dd:40:e6:a1:09:ec:9a:6d:2d:9a:
e2:74:b8:3c:6f:42:3b:cf:c0:cf:54:d1:32:68:2f:56:bf:0f:
1c:3b:2d:83:14:52:e2:20:ab:d2:36:53:6c:50:69:12:d9:4f:
86:29:98:de:7a:cf:55:0b:69:61:c5:7b:a2:27:5a:a6:83:f6:
b7:20:03:ab:5a:d2:68:5e:5f:68:4a:0c:d0:3c:fe:25:34:aa:
d7:4e:b0:3b:73:b3:c8:30:7c:40:da:b9:f2:0d:ad:df:ac:63:
bf:ba:1b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:21:21 2026 by rpki-client