Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E1028/2526B4EAC8A411EC887B5F99F1222468/B715016C631511F18D69FFF3CE1D38B0.roa
File: B715016C631511F18D69FFF3CE1D38B0.roa (raw, json)
Hash identifier: Q90vO03OvbzVlr6xHMXNeN+1cU9pbCWlbrp/3F+J26k=
Subject key identifier: EF:35:94:82:6E:76:C5:A9:9D:A6:60:C4:B4:5D:2E:86:8F:D2:FC:B4
Certificate issuer: /CN=F36E1028RI/serialNumber=6225C6536748448F1C601BE9AFAB827C9A6D8C98
Certificate serial: 0619
Authority key identifier: 62:25:C6:53:67:48:44:8F:1C:60:1B:E9:AF:AB:82:7C:9A:6D:8C:98
Authority info access: rsync://rpki.afrinic.net/repository/ripe/YiXGU2dIRI8cYBvpr6uCfJptjJg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E1028/2526B4EAC8A411EC887B5F99F1222468/B715016C631511F18D69FFF3CE1D38B0.roa
Signing time: Mon 08 Jun 2026 08:40:34 +0000
ROA not before: Tue 09 Jun 2026 08:40:30 +0000
ROA not after: Sun 09 Jun 2030 08:40:30 +0000
asID: 29286
IP address blocks: 80.250.32.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E1028/2526B4EAC8A411EC887B5F99F1222468/YiXGU2dIRI8cYBvpr6uCfJptjJg.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E1028/2526B4EAC8A411EC887B5F99F1222468/YiXGU2dIRI8cYBvpr6uCfJptjJg.mft
rsync://rpki.afrinic.net/repository/ripe/YiXGU2dIRI8cYBvpr6uCfJptjJg.cer
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 13 Jun 2026 00:45:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1561 (0x619)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E1028RI, serialNumber=6225C6536748448F1C601BE9AFAB827C9A6D8C98
Validity
Not Before: Jun 9 08:40:30 2026 GMT
Not After : Jun 9 08:40:30 2030 GMT
Subject: CN=6a268002-1887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ec:9d:96:bf:e1:56:7c:6e:94:58:5c:cd:2d:
d6:01:e9:49:72:bc:02:5d:f7:d0:6a:55:50:d4:e7:
84:0c:90:26:8f:64:59:42:bb:dc:07:6e:84:09:51:
05:a6:62:60:7a:84:2b:1a:d1:dc:e3:69:c8:3c:09:
bc:2a:ff:a5:2e:84:ab:06:14:3b:77:74:62:c5:d2:
95:9d:2b:6f:6c:ad:4d:5b:00:03:8e:47:71:69:ac:
2a:5e:a0:74:e6:4c:d9:7c:df:c3:9e:eb:ff:49:5f:
d4:69:3a:25:03:dd:10:38:b6:62:8c:ee:a3:a4:37:
8a:6e:16:7d:85:b5:9d:cf:1c:d1:58:c6:c2:8d:95:
55:f8:0f:b1:83:2e:c7:fb:b6:8f:5c:db:75:ef:f5:
f4:fe:7a:f6:0e:72:16:05:e8:4e:1d:5c:fc:b3:9b:
75:3d:e3:ff:f4:77:21:4c:ac:7b:4c:11:f4:7f:a3:
ee:77:b4:45:1e:d6:a8:fc:87:17:d5:62:78:2d:22:
41:c5:fc:90:80:22:dd:88:ba:8a:50:6a:23:15:6c:
61:25:7d:f3:35:58:23:28:c5:f9:a0:e4:ca:08:2c:
41:48:7d:01:5b:8e:9a:e1:b0:67:7d:e4:2a:22:6c:
c1:b9:f6:28:ff:2f:97:a5:55:bd:56:47:e0:62:b3:
16:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:35:94:82:6E:76:C5:A9:9D:A6:60:C4:B4:5D:2E:86:8F:D2:FC:B4
X509v3 Authority Key Identifier:
keyid:62:25:C6:53:67:48:44:8F:1C:60:1B:E9:AF:AB:82:7C:9A:6D:8C:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1028/2526B4EAC8A411EC887B5F99F1222468/YiXGU2dIRI8cYBvpr6uCfJptjJg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/YiXGU2dIRI8cYBvpr6uCfJptjJg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1028/2526B4EAC8A411EC887B5F99F1222468/B715016C631511F18D69FFF3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
80.250.32.0/20
Signature Algorithm: sha256WithRSAEncryption
52:f6:c6:47:45:ae:48:b2:49:ca:0d:4e:20:76:65:bf:85:63:
0b:69:59:5f:a4:6d:a5:68:6a:b8:b3:52:81:f5:e7:c9:48:f6:
ad:ec:9c:69:b0:44:52:eb:4d:86:74:c9:07:98:52:90:e1:e0:
8a:e7:24:ea:be:ea:a5:2e:8c:3f:ed:b1:e6:16:10:d6:ed:28:
73:42:a9:76:3c:33:00:5e:48:5e:43:af:06:29:76:2d:68:0d:
f6:4b:39:af:05:08:42:c4:69:1b:c0:57:ab:88:ef:c6:ce:11:
74:97:80:d8:6e:ab:4f:75:56:7f:3b:26:d8:b4:89:8f:f1:ef:
c1:7e:66:37:a5:1a:e3:25:c6:4c:0e:ea:b3:c2:8c:b7:b4:19:
86:74:8b:1c:29:48:ed:c8:db:d7:0b:18:ff:9c:5f:37:bb:69:
2e:a7:c3:58:ba:ff:99:e4:fd:89:d1:22:e2:88:1b:90:7a:c5:
a1:af:60:5c:61:be:98:27:05:a6:0f:2d:9c:76:96:88:d5:90:
fd:cb:d0:73:37:86:cd:b8:dd:63:6b:2d:fd:f4:74:39:69:b9:
4c:92:87:37:95:fa:23:c7:2c:3e:7f:64:a7:d5:f9:71:34:b5:
aa:0b:db:26:81:6b:53:42:9f:94:72:38:b6:ca:02:ab:57:dd:
09:b1:5b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:37:31 2026 by rpki-client