Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D96A0/6796FEF2336611EDBC3AD7D5F1222468/A7068B628CA811F1A92E63BECE1D38B0.roa
File: A7068B628CA811F1A92E63BECE1D38B0.roa (raw, json)
Hash identifier: T+KaTN7CnFyIm7H8bTLCLoHIYy/qXBnMRWdBkzS66ps=
Subject key identifier: 5B:3D:C3:E1:FC:70:FB:B0:03:FB:04:FF:53:1A:A7:B4:D3:FC:68:60
Certificate issuer: /CN=F36D96A0AF/serialNumber=2C4973B93083A484AC2D4658278502C788D064F5
Certificate serial: 05CB
Authority key identifier: 2C:49:73:B9:30:83:A4:84:AC:2D:46:58:27:85:02:C7:88:D0:64:F5
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/LElzuTCDpISsLUZYJ4UCx4jQZPU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D96A0/6796FEF2336611EDBC3AD7D5F1222468/A7068B628CA811F1A92E63BECE1D38B0.roa
Signing time: Fri 31 Jul 2026 06:25:41 +0000
ROA not before: Fri 31 Jul 2026 06:25:37 +0000
ROA not after: Thu 31 Jul 2036 06:25:37 +0000
asID: 329126
IP address blocks: 2c0f:7280::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D96A0/6796FEF2336611EDBC3AD7D5F1222468/LElzuTCDpISsLUZYJ4UCx4jQZPU.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D96A0/6796FEF2336611EDBC3AD7D5F1222468/LElzuTCDpISsLUZYJ4UCx4jQZPU.mft
rsync://rpki.afrinic.net/repository/afrinic/LElzuTCDpISsLUZYJ4UCx4jQZPU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1483 (0x5cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D96A0AF, serialNumber=2C4973B93083A484AC2D4658278502C788D064F5
Validity
Not Before: Jul 31 06:25:37 2026 GMT
Not After : Jul 31 06:25:37 2036 GMT
Subject: CN=6a6c3fe5-f01a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1b:69:20:87:ff:3f:2c:66:11:3c:fd:b7:de:
91:cf:46:1c:fb:22:cf:a6:05:28:73:d5:be:20:41:
02:86:ed:a5:83:97:12:f6:ee:c8:06:2a:55:77:bc:
a8:c2:32:8a:13:f4:4c:4e:0d:c1:54:40:4a:e2:64:
b9:8d:6e:02:ca:dd:db:2a:89:d9:69:df:b2:ba:58:
83:30:74:66:a7:08:b3:70:61:23:0f:20:e6:6d:30:
a9:b1:43:8b:db:f6:43:92:d2:6d:d2:d2:fb:a7:e3:
31:ad:df:16:1f:d7:43:1b:24:60:28:2e:d7:38:ec:
62:d9:dc:f4:81:60:0a:66:0b:82:d8:70:07:98:3a:
d2:5f:cb:c4:42:23:4b:6f:5c:bb:53:ed:98:c7:44:
03:12:59:94:42:55:4c:20:6d:e0:9d:24:7c:5b:e6:
66:33:f6:50:e2:e3:d5:0b:64:db:28:c2:81:13:fb:
b8:a5:64:95:92:f3:1a:45:0e:49:d9:40:38:48:97:
b3:5c:02:5f:7f:c5:7e:58:3e:38:3d:b8:5a:a3:45:
ec:a4:fe:f6:03:b6:87:51:5d:e7:05:af:cc:04:f0:
ce:fb:30:79:fb:ec:a0:82:d1:76:05:a7:5d:fb:78:
82:24:a3:ed:7b:63:6a:62:d2:bc:ab:34:83:79:d0:
8e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:3D:C3:E1:FC:70:FB:B0:03:FB:04:FF:53:1A:A7:B4:D3:FC:68:60
X509v3 Authority Key Identifier:
keyid:2C:49:73:B9:30:83:A4:84:AC:2D:46:58:27:85:02:C7:88:D0:64:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D96A0/6796FEF2336611EDBC3AD7D5F1222468/LElzuTCDpISsLUZYJ4UCx4jQZPU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LElzuTCDpISsLUZYJ4UCx4jQZPU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D96A0/6796FEF2336611EDBC3AD7D5F1222468/A7068B628CA811F1A92E63BECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:7280::/32
Signature Algorithm: sha256WithRSAEncryption
1f:f0:85:d2:7b:c7:36:15:60:09:08:f0:a0:79:0e:c0:db:bc:
1e:bd:b9:87:4f:64:a6:12:df:67:7a:15:9e:60:69:0b:84:d4:
6e:06:46:f1:0c:62:37:19:3d:fc:ca:14:26:fe:6d:b2:32:e6:
80:aa:91:bf:9b:ba:12:19:2f:d0:e6:bb:ad:ee:ac:74:cb:de:
2f:ef:39:f3:30:15:38:9b:b7:04:5b:3b:98:ce:df:e8:7a:c5:
87:8f:66:76:aa:c9:d8:d1:a4:87:73:72:7d:fa:0b:34:b7:35:
61:91:b6:b5:82:96:df:be:cb:47:5a:d2:6e:59:b9:35:41:6b:
7c:b9:55:5a:aa:73:df:45:02:5b:cc:e7:92:c2:93:0f:25:7e:
5d:35:e7:31:6d:f0:fc:35:cd:2e:cc:e5:81:91:82:a1:fe:b0:
16:84:46:f8:ef:c3:b9:ba:0f:08:c0:3f:22:f0:06:7e:70:63:
6d:c9:0b:bb:14:8d:44:98:dc:c5:39:30:dd:9e:9b:c3:96:fc:
c6:17:ff:2f:b0:e7:eb:1e:f8:54:08:cf:50:88:21:0b:7d:82:
36:d6:04:c8:82:7f:cd:40:5e:b5:04:fa:1b:b2:38:d9:5e:a4:
72:86:9e:4c:ee:bb:28:a9:cd:d5:a7:a1:6e:9c:1a:af:0c:30:
ba:c0:f5:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:27:34 2026 by rpki-client