Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/EE939480196111F1B93A308CDAE4EC9C.roa
File: EE939480196111F1B93A308CDAE4EC9C.roa (raw, json)
Hash identifier: bk0vsHax/qp4UlIJSg2DL8tth/n6/mOBtDc39qKX8fs=
Subject key identifier: D8:56:78:51:59:1E:84:8A:66:74:24:E5:AE:03:13:CD:C0:C9:A2:81
Certificate issuer: /CN=F36E3D7FAF/serialNumber=965C8C35B0F10F8EA5DBDA544F291B6CA9283B5D
Certificate serial: 0931
Authority key identifier: 96:5C:8C:35:B0:F1:0F:8E:A5:DB:DA:54:4F:29:1B:6C:A9:28:3B:5D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/llyMNbDxD46l29pUTykbbKkoO10.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/EE939480196111F1B93A308CDAE4EC9C.roa
Signing time: Fri 06 Mar 2026 13:39:43 +0000
ROA not before: Fri 06 Mar 2026 13:39:39 +0000
ROA not after: Tue 06 Mar 2046 13:39:39 +0000
asID: 3491
IP address blocks: 2c0f:f3c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/llyMNbDxD46l29pUTykbbKkoO10.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/llyMNbDxD46l29pUTykbbKkoO10.mft
rsync://rpki.afrinic.net/repository/afrinic/llyMNbDxD46l29pUTykbbKkoO10.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Mar 2026 00:06:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2353 (0x931)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E3D7FAF, serialNumber=965C8C35B0F10F8EA5DBDA544F291B6CA9283B5D
Validity
Not Before: Mar 6 13:39:39 2026 GMT
Not After : Mar 6 13:39:39 2046 GMT
Subject: CN=69aad91f-7d87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4f:0a:ae:56:8a:65:29:66:8c:80:3b:80:22:
78:4c:79:fe:da:ce:12:c6:b2:f3:f4:37:0e:ef:8e:
d1:d5:4b:28:7a:b0:37:a0:be:7e:12:dd:b8:9d:ff:
a4:5d:ac:44:71:60:e1:0b:ec:4f:0b:da:4a:b6:aa:
8d:be:5d:65:88:23:a4:92:1b:02:39:4c:97:9e:84:
ac:80:3d:e8:3e:dc:53:53:e4:d6:49:44:a2:92:e7:
82:7c:1d:cc:e0:18:83:54:db:61:a2:27:1a:71:77:
46:16:49:a9:35:4b:ca:ae:85:90:db:e2:c6:53:55:
b5:be:d8:bb:4d:b6:2d:3c:bd:e5:ea:dc:8b:43:39:
b7:e7:2e:c6:46:e8:39:ff:73:55:f0:c3:c7:cb:47:
d7:f6:8f:75:cf:6d:47:89:4e:de:78:17:02:33:37:
35:1b:c6:03:74:d9:90:d0:41:72:70:12:a0:5d:ff:
d1:66:4d:11:17:42:80:8d:01:04:2a:0a:c0:64:f2:
18:0d:7d:2c:31:8b:1d:75:dc:26:4d:eb:a9:09:3f:
d4:d0:37:9e:b8:8a:4f:91:0c:5c:75:ad:1f:02:a8:
92:57:b9:6a:63:36:9a:da:2b:26:e2:ae:78:6e:51:
15:45:e5:69:5d:37:6c:e5:03:27:b3:9e:d3:66:ab:
ea:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:56:78:51:59:1E:84:8A:66:74:24:E5:AE:03:13:CD:C0:C9:A2:81
X509v3 Authority Key Identifier:
keyid:96:5C:8C:35:B0:F1:0F:8E:A5:DB:DA:54:4F:29:1B:6C:A9:28:3B:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/llyMNbDxD46l29pUTykbbKkoO10.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/llyMNbDxD46l29pUTykbbKkoO10.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/EE939480196111F1B93A308CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:f3c0::/32
Signature Algorithm: sha256WithRSAEncryption
ae:38:73:d2:1f:40:1f:d5:b8:fd:5e:e0:48:0e:e5:bf:78:5c:
8b:71:a0:cf:1d:77:c0:94:1e:e7:89:b3:fd:40:8e:5b:af:f8:
3e:7f:2a:b1:f9:29:26:6d:ba:34:1a:4e:0b:a6:0b:b0:3d:82:
19:e8:fd:7c:b2:b4:28:d5:e9:72:7b:94:12:e0:30:96:55:d2:
f0:20:4d:b1:19:9a:c9:ab:19:a6:69:66:54:7f:90:91:31:ad:
ce:35:e6:c7:92:35:cd:9e:23:d2:d1:73:4d:0f:07:fa:cc:24:
43:a9:e4:cb:1c:6a:a8:38:6e:c0:c9:f3:d3:87:87:e5:90:9d:
8a:2e:ef:e1:55:dc:25:8d:a7:6a:a2:ec:76:82:a5:5b:4e:50:
c4:7d:d9:9f:31:18:77:36:59:92:a2:15:3f:3f:8d:b3:c6:a8:
86:70:65:41:2c:40:be:e5:b0:69:1c:c9:f0:aa:13:fe:b8:e8:
8d:29:b9:df:61:9c:b0:03:e1:20:a9:b9:15:7e:a3:99:73:bd:
3a:75:34:4f:76:17:f7:93:9a:83:6a:2c:bc:7b:bf:cb:b0:90:
5d:eb:82:49:b0:a6:9f:c7:b2:e9:8c:9f:4f:c5:e7:40:8d:95:
8c:43:66:f1:34:91:5a:d0:f1:ed:16:97:e2:92:18:f7:de:41:
c0:4d:89:d2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCTEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RTNEN0ZBRjExMC8GA1UEBRMoOTY1QzhDMzVCMEYxMEY4RUE1REJEQTU0NEYyOTFC
NkNBOTI4M0I1RDAeFw0yNjAzMDYxMzM5MzlaFw00NjAzMDYxMzM5MzlaMBgxFjAU
BgNVBAMTDTY5YWFkOTFmLTdkODcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCqTwquVoplKWaMgDuAInhMef7azhLGsvP0Nw7vjtHVSyh6sDegvn4S3bid
/6RdrERxYOEL7E8L2kq2qo2+XWWII6SSGwI5TJeehKyAPeg+3FNT5NZJRKKS54J8
HczgGINU22GiJxpxd0YWSak1S8quhZDb4sZTVbW+2LtNti08veXq3ItDObfnLsZG
6Dn/c1Xww8fLR9f2j3XPbUeJTt54FwIzNzUbxgN02ZDQQXJwEqBd/9FmTREXQoCN
AQQqCsBk8hgNfSwxix113CZN66kJP9TQN564ik+RDFx1rR8CqJJXuWpjNpraKybi
rnhuURVF5WldN2zlAyezntNmq+q3AgMBAAGjggKmMIICojAdBgNVHQ4EFgQU2FZ4
UVkehIpmdCTlrgMTzcDJooEwHwYDVR0jBBgwFoAUllyMNbDxD46l29pUTykbbKko
O10wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkUzRDdGL0I3MDVFQUYyNDFBNjExRUE4ODFBNjcyOEY4QUVBMjI4L2xseU1O
YkR4RDQ2bDI5cFVUeWtiYktrb08xMC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2xseU1OYkR4RDQ2bDI5cFVUeWtiYktrb08xMC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkUzRDdGL0I3MDVFQUYyNDFBNjExRUE4ODFBNjcyOEY4
QUVBMjI4L0VFOTM5NDgwMTk2MTExRjFCOTNBMzA4Q0RBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAsD/PAMA0GCSqGSIb3DQEB
CwUAA4IBAQCuOHPSH0Af1bj9XuBIDuW/eFyLcaDPHXfAlB7nibP9QI5br/g+fyqx
+Skmbbo0Gk4LpguwPYIZ6P18srQo1elye5QS4DCWVdLwIE2xGZrJqxmmaWZUf5CR
Ma3ONebHkjXNniPS0XNNDwf6zCRDqeTLHGqoOG7AyfPTh4flkJ2KLu/hVdwljadq
oux2gqVbTlDEfdmfMRh3NlmSohU/P42zxqiGcGVBLEC+5bBpHMnwqhP+uOiNKbnf
YZywA+EgqbkVfqOZc706dTRPdhf3k5qDaiy8e7/LsJBd64JJsKafx7LpjJ9PxedA
jZWMQ2bxNJFa0PHtFpfikhj33kHATYnS
-----END CERTIFICATE-----
Generated at Sat Mar 7 19:14:28 2026 by rpki-client