Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F1344/6C278A18F61711EC8170AAABF1222468/FA0A10268D8011F18F4379E0CE1D38B0.roa
File: FA0A10268D8011F18F4379E0CE1D38B0.roa (raw, json)
Hash identifier: isvF0Tax/20iYi7ZXFeg6uIx+YUxx5ER2b6kv6sd4Js=
Subject key identifier: D5:22:E8:69:B4:3D:AC:64:AD:A6:15:72:85:57:87:BD:16:09:93:0A
Certificate issuer: /CN=F36F1344AF/serialNumber=63E0A90C2B2A4B42A44AD44C8570E4BFFBF75CF4
Certificate serial: 060F
Authority key identifier: 63:E0:A9:0C:2B:2A:4B:42:A4:4A:D4:4C:85:70:E4:BF:FB:F7:5C:F4
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Y-CpDCsqS0KkStRMhXDkv_v3XPQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F1344/6C278A18F61711EC8170AAABF1222468/FA0A10268D8011F18F4379E0CE1D38B0.roa
Signing time: Sat 01 Aug 2026 08:14:12 +0000
ROA not before: Sat 01 Aug 2026 08:14:08 +0000
ROA not after: Sun 27 Jun 2032 08:14:08 +0000
asID: 328948
IP address blocks: 2c0f:4300::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F1344/6C278A18F61711EC8170AAABF1222468/Y-CpDCsqS0KkStRMhXDkv_v3XPQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F1344/6C278A18F61711EC8170AAABF1222468/Y-CpDCsqS0KkStRMhXDkv_v3XPQ.mft
rsync://rpki.afrinic.net/repository/afrinic/Y-CpDCsqS0KkStRMhXDkv_v3XPQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1551 (0x60f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F1344AF, serialNumber=63E0A90C2B2A4B42A44AD44C8570E4BFFBF75CF4
Validity
Not Before: Aug 1 08:14:08 2026 GMT
Not After : Jun 27 08:14:08 2032 GMT
Subject: CN=6a6daad4-f8fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:67:f5:98:82:94:ba:ae:7c:86:e2:b2:fc:42:
76:1b:4d:9a:f7:bf:fe:4b:4e:db:f1:04:5f:0f:89:
91:18:fe:06:4f:f4:5e:9e:49:c9:2c:34:6d:90:f2:
ce:9b:b0:c1:91:c6:62:d0:14:32:f3:fa:78:11:9f:
b9:fb:09:7d:d5:5c:44:ee:f4:54:ae:13:b5:c7:88:
82:02:14:f4:71:40:b8:b0:a6:58:e5:7e:9d:84:3b:
9b:4f:0f:f2:45:91:ee:52:16:fa:2a:d0:69:2d:44:
b5:52:0b:cd:cd:97:55:89:63:19:4f:82:84:d2:99:
c6:05:33:0d:89:3d:a3:30:da:d7:c9:07:47:69:fb:
c0:b1:5e:f9:86:59:6f:75:8b:93:3e:3b:c5:af:dc:
26:3a:5d:83:c8:f8:28:2d:1c:a0:b7:56:1f:86:a4:
29:dc:16:50:82:1f:45:b9:4b:e4:8c:69:af:82:ad:
6b:db:e8:32:46:44:3f:f3:6e:77:74:94:c4:41:4d:
5c:c9:11:8c:c5:51:06:3a:a2:71:00:92:1f:a1:fd:
03:8c:9f:16:4d:5b:50:8b:cc:a7:08:b8:5e:9e:38:
42:bb:9b:75:2c:14:aa:50:ec:9e:35:b4:c3:af:6c:
96:8a:9e:e1:02:35:da:83:e9:73:1e:a6:5d:70:c7:
27:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:22:E8:69:B4:3D:AC:64:AD:A6:15:72:85:57:87:BD:16:09:93:0A
X509v3 Authority Key Identifier:
keyid:63:E0:A9:0C:2B:2A:4B:42:A4:4A:D4:4C:85:70:E4:BF:FB:F7:5C:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F1344/6C278A18F61711EC8170AAABF1222468/Y-CpDCsqS0KkStRMhXDkv_v3XPQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Y-CpDCsqS0KkStRMhXDkv_v3XPQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F1344/6C278A18F61711EC8170AAABF1222468/FA0A10268D8011F18F4379E0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:4300::/32
Signature Algorithm: sha256WithRSAEncryption
a5:3b:70:12:c2:dd:7e:ae:2d:7d:7d:8c:8d:46:a7:c6:81:6d:
f9:28:72:be:8f:8a:7d:00:ab:5c:b3:74:e6:14:41:5d:b6:4e:
7a:11:77:cd:65:95:c9:3d:c9:50:1a:65:72:f4:57:2e:e6:7f:
b0:4b:37:d0:11:c2:6f:08:f0:d4:2b:e2:de:ba:5e:1d:72:53:
ca:76:c3:20:44:11:6e:8e:2e:44:85:7e:8a:9c:2e:96:47:c0:
67:2e:2a:7a:2d:b3:41:82:f0:13:82:ab:0e:84:45:2b:93:57:
15:0b:9d:2e:72:c7:ab:5e:f5:fe:8f:f4:bf:b0:5f:7a:c4:67:
7f:17:dd:72:c4:e0:50:aa:2e:13:e4:80:d6:ae:9c:72:64:b8:
a0:b5:11:75:a1:ad:06:8b:43:5c:b6:e2:80:88:ab:15:e2:6e:
22:ef:63:54:c8:1a:c2:d3:56:be:b3:0f:68:02:ab:f8:4d:de:
c4:e5:f4:66:83:ed:8a:d5:70:9c:f5:ac:69:b2:d5:35:f1:3f:
6e:98:83:11:4a:19:bf:28:28:b8:1f:c8:22:2d:c6:c0:e8:86:
72:ae:7f:83:c3:88:22:ac:b6:2f:15:4a:b8:ce:59:d9:7c:0b:
a4:72:d5:25:31:02:92:e6:3c:df:5a:92:0b:92:8b:26:87:ce:
bf:4a:c5:95
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBg8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RjEzNDRBRjExMC8GA1UEBRMoNjNFMEE5MEMyQjJBNEI0MkE0NEFENDRDODU3MEU0
QkZGQkY3NUNGNDAeFw0yNjA4MDEwODE0MDhaFw0zMjA2MjcwODE0MDhaMBgxFjAU
BgNVBAMTDTZhNmRhYWQ0LWY4ZmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDHZ/WYgpS6rnyG4rL8QnYbTZr3v/5LTtvxBF8PiZEY/gZP9F6eScksNG2Q
8s6bsMGRxmLQFDLz+ngRn7n7CX3VXETu9FSuE7XHiIICFPRxQLiwpljlfp2EO5tP
D/JFke5SFvoq0GktRLVSC83Nl1WJYxlPgoTSmcYFMw2JPaMw2tfJB0dp+8CxXvmG
WW91i5M+O8Wv3CY6XYPI+CgtHKC3Vh+GpCncFlCCH0W5S+SMaa+CrWvb6DJGRD/z
bnd0lMRBTVzJEYzFUQY6onEAkh+h/QOMnxZNW1CLzKcIuF6eOEK7m3UsFKpQ7J41
tMOvbJaKnuECNdqD6XMepl1wxyeXAgMBAAGjggKmMIICojAdBgNVHQ4EFgQU1SLo
abQ9rGStphVyhVeHvRYJkwowHwYDVR0jBBgwFoAUY+CpDCsqS0KkStRMhXDkv/v3
XPQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkYxMzQ0LzZDMjc4QTE4RjYxNzExRUM4MTcwQUFBQkYxMjIyNDY4L1ktQ3BE
Q3NxUzBLa1N0Uk1oWERrdl92M1hQUS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1ktQ3BEQ3NxUzBLa1N0Uk1oWERrdl92M1hQUS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkYxMzQ0LzZDMjc4QTE4RjYxNzExRUM4MTcwQUFBQkYx
MjIyNDY4L0ZBMEExMDI2OEQ4MDExRjE4RjQzNzlFMENFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAsD0MAMA0GCSqGSIb3DQEB
CwUAA4IBAQClO3ASwt1+ri19fYyNRqfGgW35KHK+j4p9AKtcs3TmFEFdtk56EXfN
ZZXJPclQGmVy9Fcu5n+wSzfQEcJvCPDUK+Leul4dclPKdsMgRBFuji5EhX6KnC6W
R8BnLip6LbNBgvATgqsOhEUrk1cVC50ucserXvX+j/S/sF96xGd/F91yxOBQqi4T
5IDWrpxyZLigtRF1oa0Gi0NctuKAiKsV4m4i72NUyBrC01a+sw9oAqv4Td7E5fRm
g+2K1XCc9axpstU18T9umIMRShm/KCi4H8giLcbA6IZyrn+Dw4girLYvFUq4zlnZ
fAukctUlMQKS5jzfWpILkosmh86/SsWV
-----END CERTIFICATE-----
Generated at Thu Aug 6 12:27:39 2026 by rpki-client