Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E3A59/29E748185D4E11F0AB0058C9DAE4EC9C/481A94F88FE211F196C1ACD5CE1D38B0.roa
File: 481A94F88FE211F196C1ACD5CE1D38B0.roa (raw, json)
Hash identifier: /b4HJPRNHI6xpg0bDUmbfP0kip9OmM0xcDOIsyuagII=
Subject key identifier: 23:BC:FE:0F:99:87:E0:30:0C:0F:9E:C8:FB:E8:9A:D8:AB:0C:2F:D6
Certificate issuer: /CN=F36E3A59AF/serialNumber=0D9BE8A03CF4F921BEAE801209F0CDA9FA5C28A9
Certificate serial: 0190
Authority key identifier: 0D:9B:E8:A0:3C:F4:F9:21:BE:AE:80:12:09:F0:CD:A9:FA:5C:28:A9
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/DZvooDz0-SG-roASCfDNqfpcKKk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E3A59/29E748185D4E11F0AB0058C9DAE4EC9C/481A94F88FE211F196C1ACD5CE1D38B0.roa
Signing time: Tue 04 Aug 2026 08:55:46 +0000
ROA not before: Tue 04 Aug 2026 08:55:42 +0000
ROA not after: Fri 04 Aug 2028 08:55:42 +0000
asID: 329546
IP address blocks: 2c0f:61c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E3A59/29E748185D4E11F0AB0058C9DAE4EC9C/DZvooDz0-SG-roASCfDNqfpcKKk.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E3A59/29E748185D4E11F0AB0058C9DAE4EC9C/DZvooDz0-SG-roASCfDNqfpcKKk.mft
rsync://rpki.afrinic.net/repository/afrinic/DZvooDz0-SG-roASCfDNqfpcKKk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 400 (0x190)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E3A59AF, serialNumber=0D9BE8A03CF4F921BEAE801209F0CDA9FA5C28A9
Validity
Not Before: Aug 4 08:55:42 2026 GMT
Not After : Aug 4 08:55:42 2028 GMT
Subject: CN=6a71a912-557b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:e0:88:0e:4b:f2:6e:e5:72:bc:5b:41:43:de:
6e:00:9e:68:49:e9:00:53:3c:8f:ec:18:e3:3f:62:
6f:f5:28:bc:b4:52:9f:08:af:b0:66:76:5a:df:c3:
67:f4:e0:1d:6a:f2:21:e7:fd:9b:04:9a:28:c9:22:
f1:79:bb:db:f0:a3:63:0b:7a:8c:b4:de:5c:84:64:
8d:05:ef:6f:4e:16:06:d8:f2:77:42:65:5f:ce:91:
5f:02:56:c1:2d:7f:0b:3c:fb:28:07:fd:8f:93:eb:
5e:bd:08:f2:55:26:df:6e:d3:a7:e4:e8:ae:e2:e7:
6e:72:f9:fc:f8:fa:14:bf:4f:d9:e5:fc:3f:5f:bf:
d8:da:d5:79:62:f7:d1:86:8a:50:1d:d8:00:a7:de:
ee:37:a5:d7:44:5d:90:d8:c3:5a:38:bf:d4:76:f0:
f1:a7:3e:30:66:db:36:94:65:7f:33:f0:dc:45:ff:
07:3e:c3:bc:a5:19:fa:48:6f:64:80:71:41:74:7c:
72:63:4a:12:9e:84:cb:9d:8d:ec:4f:79:39:dc:16:
2f:13:eb:1b:2a:d7:be:87:c0:0f:9a:49:33:05:af:
90:a2:36:90:64:db:d5:a3:4d:78:f1:8b:b9:ff:ce:
99:d3:48:85:01:d0:7e:ab:b7:76:2e:ab:6a:61:67:
4d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:BC:FE:0F:99:87:E0:30:0C:0F:9E:C8:FB:E8:9A:D8:AB:0C:2F:D6
X509v3 Authority Key Identifier:
keyid:0D:9B:E8:A0:3C:F4:F9:21:BE:AE:80:12:09:F0:CD:A9:FA:5C:28:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3A59/29E748185D4E11F0AB0058C9DAE4EC9C/DZvooDz0-SG-roASCfDNqfpcKKk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DZvooDz0-SG-roASCfDNqfpcKKk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3A59/29E748185D4E11F0AB0058C9DAE4EC9C/481A94F88FE211F196C1ACD5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:61c0::/32
Signature Algorithm: sha256WithRSAEncryption
90:59:2d:41:ca:60:b9:44:92:97:7d:80:50:04:51:3b:f0:03:
dc:69:1e:72:5d:a8:0c:c6:8f:df:da:69:e4:e2:14:57:0a:9d:
2d:85:9a:a7:f6:fa:a7:d5:6d:6c:30:77:90:9b:27:eb:a9:84:
04:76:0d:9f:41:1a:ba:e9:18:cf:60:98:b9:6d:1c:98:56:b6:
59:92:78:9e:e5:4f:6f:18:ba:95:ef:da:dc:22:35:6c:84:a0:
17:fe:1c:4c:50:3c:0d:ef:99:6a:55:59:c8:92:35:79:0e:2b:
0c:e4:62:c0:4e:ac:0e:f7:f1:2f:fe:7a:bb:d3:14:4f:56:9a:
a8:cf:89:2a:9e:4d:6c:e4:ec:a8:64:19:79:c1:27:84:7c:60:
4a:90:1e:13:4c:db:54:d4:35:f0:41:6e:f9:77:2e:a4:0e:73:
ea:88:6e:cf:c4:0f:5f:5d:21:89:f4:62:ac:27:ca:30:6a:42:
4c:00:bc:8e:f9:1a:fe:f0:ca:b7:10:e6:c5:33:44:45:b1:dd:
e0:f5:34:78:60:c0:b7:49:86:8a:7a:91:cb:f8:3a:37:9a:b0:
53:3c:fb:1d:12:71:6e:f7:8e:bf:8a:d6:74:8f:cf:94:6e:08:
cf:54:08:45:54:a0:3f:a4:02:85:e1:0a:6f:3b:61:48:a2:93:
67:1b:c5:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:27:13 2026 by rpki-client