Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E1028/2526B4EAC8A411EC887B5F99F1222468/0201DC14657711F1B151DFE6CE1D38B0.roa
File: 0201DC14657711F1B151DFE6CE1D38B0.roa (raw, json)
Hash identifier: XgErl+4Yq3zK0QkzIWHcw2rfdjCVU6UhA/XKlXzAm6M=
Subject key identifier: 4F:7D:6F:CF:5C:98:52:55:04:AE:CB:CA:7B:4C:32:F4:6E:C0:D9:0F
Certificate issuer: /CN=F36E1028RI/serialNumber=6225C6536748448F1C601BE9AFAB827C9A6D8C98
Certificate serial: 061F
Authority key identifier: 62:25:C6:53:67:48:44:8F:1C:60:1B:E9:AF:AB:82:7C:9A:6D:8C:98
Authority info access: rsync://rpki.afrinic.net/repository/ripe/YiXGU2dIRI8cYBvpr6uCfJptjJg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E1028/2526B4EAC8A411EC887B5F99F1222468/0201DC14657711F1B151DFE6CE1D38B0.roa
Signing time: Thu 11 Jun 2026 09:22:04 +0000
ROA not before: Thu 11 Jun 2026 09:21:59 +0000
ROA not after: Sun 09 Jun 2030 09:21:59 +0000
asID: 29286
IP address blocks: 80.250.32.0/24 maxlen: 24
80.250.33.0/24 maxlen: 24
80.250.37.0/24 maxlen: 24
80.250.38.0/24 maxlen: 24
80.250.39.0/24 maxlen: 24
80.250.40.0/24 maxlen: 24
80.250.44.0/24 maxlen: 24
80.250.45.0/24 maxlen: 24
80.250.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E1028/2526B4EAC8A411EC887B5F99F1222468/YiXGU2dIRI8cYBvpr6uCfJptjJg.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E1028/2526B4EAC8A411EC887B5F99F1222468/YiXGU2dIRI8cYBvpr6uCfJptjJg.mft
rsync://rpki.afrinic.net/repository/ripe/YiXGU2dIRI8cYBvpr6uCfJptjJg.cer
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 13 Jun 2026 00:45:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1567 (0x61f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E1028RI, serialNumber=6225C6536748448F1C601BE9AFAB827C9A6D8C98
Validity
Not Before: Jun 11 09:21:59 2026 GMT
Not After : Jun 9 09:21:59 2030 GMT
Subject: CN=6a2a7e3c-04a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5c:e1:fe:85:b0:c5:31:10:34:65:7a:19:da:
bb:62:e9:b9:37:e0:61:4f:14:e8:25:4c:b5:cb:65:
57:6f:b0:d6:fb:7d:bd:17:f9:1c:74:1f:86:ca:d2:
71:d6:05:7b:b1:f5:13:d3:ca:2e:a6:7a:e0:f8:a7:
45:b9:96:bb:21:81:c2:10:f0:67:d8:ea:f3:33:4d:
49:5e:0e:b3:2e:ed:11:78:eb:b2:57:ca:b8:b1:79:
cd:77:93:08:0d:27:96:b9:33:f0:86:e0:4f:5d:1c:
9a:b2:a1:b5:25:e5:5c:f6:11:3e:1b:7d:79:62:b9:
8e:08:9f:43:74:33:dc:ad:76:75:29:29:30:b3:6a:
ee:c7:ba:a4:df:07:3c:49:a7:6e:56:5f:33:ac:27:
25:b6:09:12:c1:15:7f:c7:dd:37:86:45:6e:70:e5:
3b:b6:20:6a:80:3a:0b:b2:40:99:a6:bc:f5:ae:ac:
2d:8c:ad:38:dc:50:45:f8:31:ba:12:29:87:71:2a:
6e:96:b9:1a:8f:02:b4:d0:e4:32:1c:28:cc:7a:5e:
fb:18:d7:8e:33:1e:a0:15:b3:1a:45:12:69:7d:7e:
9e:4b:6d:cf:8c:c0:b1:b1:83:ac:d3:d3:66:9f:e4:
43:6d:61:f2:93:d7:65:ab:18:22:80:ae:b0:6c:81:
09:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:7D:6F:CF:5C:98:52:55:04:AE:CB:CA:7B:4C:32:F4:6E:C0:D9:0F
X509v3 Authority Key Identifier:
keyid:62:25:C6:53:67:48:44:8F:1C:60:1B:E9:AF:AB:82:7C:9A:6D:8C:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1028/2526B4EAC8A411EC887B5F99F1222468/YiXGU2dIRI8cYBvpr6uCfJptjJg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/YiXGU2dIRI8cYBvpr6uCfJptjJg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1028/2526B4EAC8A411EC887B5F99F1222468/0201DC14657711F1B151DFE6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
80.250.32.0/23
80.250.37.0-80.250.40.255
80.250.44.0-80.250.46.255
Signature Algorithm: sha256WithRSAEncryption
2e:5e:73:92:d6:f9:48:03:bd:53:64:a7:1e:8e:b7:eb:cf:54:
c3:11:87:9d:43:12:0f:a5:03:57:1c:fa:6f:ae:ff:60:15:f5:
42:67:7e:48:01:a2:bb:89:90:2c:e3:93:9c:eb:c8:0f:39:43:
02:0f:1d:db:d1:47:99:61:96:ca:75:fb:7e:70:16:bf:dd:5a:
9f:41:75:33:e7:44:19:51:ef:ba:3f:39:94:86:c5:50:f4:8f:
3a:2b:7c:d9:ae:04:3c:9e:d8:c5:7a:7f:86:6f:6c:b8:9b:3a:
bb:06:0f:b9:cd:39:cb:d6:9e:4c:d2:75:66:1b:c9:1a:df:a1:
27:60:8c:1d:e1:dd:15:b4:f2:3d:f4:b8:cd:25:95:aa:61:81:
30:e3:c6:54:b6:3d:bd:7d:f0:6f:65:ce:e3:99:ee:30:4b:80:
84:31:ef:97:ad:77:c6:7f:95:dd:e8:d7:8c:5a:0a:bc:44:7b:
61:00:11:7a:5c:66:94:a5:71:63:80:17:65:9b:3c:c8:8d:ba:
89:cc:98:51:46:9d:16:cd:42:b2:1f:ee:74:16:8b:5f:ec:8b:
e0:8f:86:c9:2b:e2:f9:82:17:ed:dc:19:06:1d:d3:b9:27:2a:
36:7f:f0:10:35:56:08:a8:12:cc:14:81:30:80:2f:6f:07:e4:
9f:5f:bd:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:37:29 2026 by rpki-client