
Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E94D7/42D42708D28511EC92ED97AFF1222468/F532EE8E8D7511F1969D33A0CE1D38B0.roa
File: F532EE8E8D7511F1969D33A0CE1D38B0.roa (raw, json)
Hash identifier: SIxmlHckbhsXHCegpL/XNKa7J+R67ZPGCubikG2qARU=
Subject key identifier: 27:7A:D6:51:2B:05:A5:D6:49:D6:02:71:1A:80:EE:BB:CD:2A:B0:B4
Certificate issuer: /CN=F36E94D7AF/serialNumber=6F80C0A1907680D97900DF451CD554D7FADBCC66
Certificate serial: 0639
Authority key identifier: 6F:80:C0:A1:90:76:80:D9:79:00:DF:45:1C:D5:54:D7:FA:DB:CC:66
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/b4DAoZB2gNl5AN9FHNVU1_rbzGY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E94D7/42D42708D28511EC92ED97AFF1222468/F532EE8E8D7511F1969D33A0CE1D38B0.roa
Signing time: Sat 01 Aug 2026 06:55:19 +0000
ROA not before: Sat 01 Aug 2026 06:55:15 +0000
ROA not after: Thu 13 May 2032 06:55:15 +0000
asID: 328510
IP address blocks: 2c0f:ede8::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E94D7/42D42708D28511EC92ED97AFF1222468/b4DAoZB2gNl5AN9FHNVU1_rbzGY.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E94D7/42D42708D28511EC92ED97AFF1222468/b4DAoZB2gNl5AN9FHNVU1_rbzGY.mft
rsync://rpki.afrinic.net/repository/afrinic/b4DAoZB2gNl5AN9FHNVU1_rbzGY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1593 (0x639)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E94D7AF, serialNumber=6F80C0A1907680D97900DF451CD554D7FADBCC66
Validity
Not Before: Aug 1 06:55:15 2026 GMT
Not After : May 13 06:55:15 2032 GMT
Subject: CN=6a6d9857-78ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1d:d7:cf:0d:57:50:11:ac:e7:6c:aa:9c:40:
4e:35:41:f9:6e:46:e3:76:46:04:ed:87:f0:52:c2:
67:db:85:00:a3:3f:62:5b:de:a8:54:50:8c:e8:46:
b0:3a:2a:aa:d6:49:52:6e:cb:79:82:4a:e0:5a:25:
d3:63:6c:f2:bb:27:6c:95:24:79:1b:50:cc:ba:70:
d1:6c:bb:6c:17:fd:8a:8f:1c:d6:31:26:b7:8b:9e:
21:85:01:d7:e3:bc:36:af:11:4b:2c:1e:2a:c9:c1:
d9:df:fe:56:9c:a1:70:39:d0:70:e3:0d:ca:4c:92:
2d:ad:08:b9:cb:05:3e:af:a1:d1:c0:1e:d7:5b:de:
e8:d6:b3:d3:8f:d7:45:0c:cc:b9:9f:61:b5:2d:f8:
68:5c:07:2a:69:23:fa:2e:eb:06:0a:fb:fb:02:23:
48:b0:97:3f:cf:91:08:83:aa:15:27:39:4d:5c:ff:
47:a3:57:54:c6:60:16:23:a2:6b:6e:1f:b4:e8:5d:
bc:da:06:26:39:fc:73:4b:ad:50:fb:c2:af:b5:63:
87:d4:b2:70:58:40:75:22:9f:d1:96:b0:42:d8:26:
07:10:f6:ab:fe:b4:64:80:79:ce:d8:52:84:bc:e5:
da:25:b8:2b:60:c0:60:b5:77:82:76:5d:b4:51:e9:
04:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:7A:D6:51:2B:05:A5:D6:49:D6:02:71:1A:80:EE:BB:CD:2A:B0:B4
X509v3 Authority Key Identifier:
keyid:6F:80:C0:A1:90:76:80:D9:79:00:DF:45:1C:D5:54:D7:FA:DB:CC:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E94D7/42D42708D28511EC92ED97AFF1222468/b4DAoZB2gNl5AN9FHNVU1_rbzGY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/b4DAoZB2gNl5AN9FHNVU1_rbzGY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E94D7/42D42708D28511EC92ED97AFF1222468/F532EE8E8D7511F1969D33A0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:ede8::/32
Signature Algorithm: sha256WithRSAEncryption
16:08:7c:aa:5a:24:a9:29:db:9c:b6:50:c9:74:f3:1f:b0:55:
6d:14:9b:bd:a6:ca:ee:fe:e7:9e:f0:1b:85:5f:6b:91:ec:b3:
46:97:f0:4c:1a:d3:08:91:99:8e:ce:68:9d:9d:ae:d4:72:cb:
23:3a:78:39:d7:6c:9e:10:1d:52:1d:ca:b9:07:30:c5:e1:98:
ec:77:cd:cc:bf:6a:b4:95:db:9e:96:d9:d0:9e:88:93:98:b0:
32:d7:e3:d4:bb:dc:65:af:26:74:29:2e:12:60:a4:dc:ea:58:
5d:62:4e:bd:90:89:45:23:a1:0e:5a:da:21:01:c2:c3:d4:e2:
58:21:ac:00:be:3d:42:61:47:87:b0:e6:04:3e:df:c6:1a:8b:
a8:c6:21:0a:e1:3e:4d:f5:f1:3b:e9:9e:89:91:46:ef:62:d8:
c8:3c:84:9a:36:84:cb:30:67:b6:41:75:0b:fb:92:e4:4b:72:
a9:db:f1:2b:d7:eb:87:0d:c7:ae:60:aa:86:37:24:84:45:50:
0e:16:0e:22:48:a7:23:ad:77:5a:83:a0:b3:80:1a:04:41:6b:
70:32:f7:cc:a1:35:17:0c:24:22:b6:b9:4a:6d:84:a3:e8:9c:
f8:ff:73:dd:d7:87:5a:21:d8:fa:eb:47:1a:f7:6e:40:12:a1:
4a:fe:01:ca
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBjkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RTk0RDdBRjExMC8GA1UEBRMoNkY4MEMwQTE5MDc2ODBEOTc5MDBERjQ1MUNENTU0
RDdGQURCQ0M2NjAeFw0yNjA4MDEwNjU1MTVaFw0zMjA1MTMwNjU1MTVaMBgxFjAU
BgNVBAMTDTZhNmQ5ODU3LTc4Y2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC6HdfPDVdQEaznbKqcQE41QfluRuN2RgTth/BSwmfbhQCjP2Jb3qhUUIzo
RrA6KqrWSVJuy3mCSuBaJdNjbPK7J2yVJHkbUMy6cNFsu2wX/YqPHNYxJreLniGF
AdfjvDavEUssHirJwdnf/lacoXA50HDjDcpMki2tCLnLBT6vodHAHtdb3ujWs9OP
10UMzLmfYbUt+GhcByppI/ou6wYK+/sCI0iwlz/PkQiDqhUnOU1c/0ejV1TGYBYj
omtuH7ToXbzaBiY5/HNLrVD7wq+1Y4fUsnBYQHUin9GWsELYJgcQ9qv+tGSAec7Y
UoS85doluCtgwGC1d4J2XbRR6QSVAgMBAAGjggKmMIICojAdBgNVHQ4EFgQUJ3rW
USsFpdZJ1gJxGoDuu80qsLQwHwYDVR0jBBgwFoAUb4DAoZB2gNl5AN9FHNVU1/rb
zGYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkU5NEQ3LzQyRDQyNzA4RDI4NTExRUM5MkVEOTdBRkYxMjIyNDY4L2I0REFv
WkIyZ05sNUFOOUZITlZVMV9yYnpHWS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2I0REFvWkIyZ05sNUFOOUZITlZVMV9yYnpHWS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkU5NEQ3LzQyRDQyNzA4RDI4NTExRUM5MkVEOTdBRkYx
MjIyNDY4L0Y1MzJFRThFOEQ3NTExRjE5NjlEMzNBMENFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAsD+3oMA0GCSqGSIb3DQEB
CwUAA4IBAQAWCHyqWiSpKductlDJdPMfsFVtFJu9psru/uee8BuFX2uR7LNGl/BM
GtMIkZmOzmidna7UcssjOng512yeEB1SHcq5BzDF4Zjsd83Mv2q0ldueltnQnoiT
mLAy1+PUu9xlryZ0KS4SYKTc6lhdYk69kIlFI6EOWtohAcLD1OJYIawAvj1CYUeH
sOYEPt/GGouoxiEK4T5N9fE76Z6JkUbvYtjIPISaNoTLMGe2QXUL+5LkS3Kp2/Er
1+uHDceuYKqGNySERVAOFg4iSKcjrXdag6CzgBoEQWtwMvfMoTUXDCQitrlKbYSj
6Jz4/3Pd14daIdj660ca925AEqFK/gHK
-----END CERTIFICATE-----
Generated at Thu Aug 6 12:36:15 2026 by rpki-client