Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F51F8/B4BA7E2E955A11E8B7B21D7FF8AEA228/18465AD68B6511F1B80344F6CE1D38B0.roa
File: 18465AD68B6511F1B80344F6CE1D38B0.roa (raw, json)
Hash identifier: rxp1LYHtsrztjq5zC600yur4RG+dLMJAQtCO5n3hBKY=
Subject key identifier: 20:A1:D3:90:A5:90:0E:BD:41:6E:34:AD:93:F6:BC:9E:04:60:3B:76
Certificate issuer: /CN=F36F51F8AF/serialNumber=4DEFB41D3B42CCFD73B1A04477C0E825C74D6C6E
Certificate serial: 0BC2
Authority key identifier: 4D:EF:B4:1D:3B:42:CC:FD:73:B1:A0:44:77:C0:E8:25:C7:4D:6C:6E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Te-0HTtCzP1zsaBEd8DoJcdNbG4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/B4BA7E2E955A11E8B7B21D7FF8AEA228/18465AD68B6511F1B80344F6CE1D38B0.roa
Signing time: Wed 29 Jul 2026 15:49:34 +0000
ROA not before: Wed 29 Jul 2026 15:49:30 +0000
ROA not after: Mon 23 Dec 2030 15:49:30 +0000
asID: 36924
IP address blocks: 2c0f:f220::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/B4BA7E2E955A11E8B7B21D7FF8AEA228/Te-0HTtCzP1zsaBEd8DoJcdNbG4.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/B4BA7E2E955A11E8B7B21D7FF8AEA228/Te-0HTtCzP1zsaBEd8DoJcdNbG4.mft
rsync://rpki.afrinic.net/repository/afrinic/Te-0HTtCzP1zsaBEd8DoJcdNbG4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Aug 2026 00:07:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3010 (0xbc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F51F8AF, serialNumber=4DEFB41D3B42CCFD73B1A04477C0E825C74D6C6E
Validity
Not Before: Jul 29 15:49:30 2026 GMT
Not After : Dec 23 15:49:30 2030 GMT
Subject: CN=6a6a210e-67dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c2:46:1b:92:47:ae:0c:38:b5:13:a6:e5:8e:
f6:73:87:85:04:74:ec:26:e3:5d:7b:59:56:a6:f3:
24:02:77:f6:ba:2b:e1:75:2f:de:00:ee:40:32:30:
f8:a1:85:1c:04:ce:29:b2:87:67:cb:ed:2a:aa:16:
9f:07:ab:f3:34:13:a7:0b:3d:56:df:09:2e:bd:45:
d4:d3:d7:75:82:c8:a1:c0:d4:ac:60:3c:66:0f:0a:
a5:e8:76:ce:a7:67:9d:c1:b3:c4:29:4b:ee:15:3d:
7b:72:96:89:e2:f2:be:1b:10:ed:9e:60:da:74:2e:
14:54:44:00:06:73:64:ea:12:54:b3:22:01:ea:1b:
f8:7c:9e:b4:6a:6c:5a:bd:54:55:bb:99:1a:71:6e:
b7:36:f8:5c:fe:49:d3:80:c5:58:9f:69:28:2f:6d:
72:f1:f6:93:84:2f:26:5a:e8:f4:e3:28:b2:96:1d:
37:ea:a7:70:d6:46:a4:67:3e:83:68:a8:84:0d:c5:
92:13:1b:12:e5:3e:6c:d8:ed:3c:26:62:86:aa:87:
6e:55:e3:fb:c7:27:c3:c9:8c:64:01:8a:b3:0c:4a:
02:db:9e:6f:1c:81:f5:ce:a4:91:3c:01:de:f5:18:
13:a7:d5:cd:a4:4f:7d:8c:ac:2f:90:80:f8:cf:e8:
fd:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:A1:D3:90:A5:90:0E:BD:41:6E:34:AD:93:F6:BC:9E:04:60:3B:76
X509v3 Authority Key Identifier:
keyid:4D:EF:B4:1D:3B:42:CC:FD:73:B1:A0:44:77:C0:E8:25:C7:4D:6C:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/B4BA7E2E955A11E8B7B21D7FF8AEA228/Te-0HTtCzP1zsaBEd8DoJcdNbG4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Te-0HTtCzP1zsaBEd8DoJcdNbG4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/B4BA7E2E955A11E8B7B21D7FF8AEA228/18465AD68B6511F1B80344F6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:f220::/32
Signature Algorithm: sha256WithRSAEncryption
22:ea:90:3c:f4:8a:d4:16:4b:82:5a:24:3a:37:2c:5d:97:1b:
b1:47:7f:89:b3:35:e7:be:6c:eb:49:5c:d5:53:cd:f4:d3:34:
51:84:e3:dc:04:11:22:5b:5e:07:ac:49:94:16:0e:51:9b:8a:
ac:74:cf:c0:a3:50:c3:88:7a:37:75:10:f1:8c:aa:38:ab:9f:
d2:c0:0a:bb:90:d4:bf:e2:a3:8f:49:50:b0:ff:a2:24:39:56:
68:c7:fe:da:61:0c:09:47:72:9b:54:49:07:28:b7:ba:d8:4a:
a6:56:c5:83:db:a8:55:3e:8b:1d:c2:80:10:8c:26:ed:7f:0b:
2b:d1:4b:8a:6d:72:bd:9e:28:cf:7b:e5:df:37:98:35:cf:08:
03:35:11:df:bc:d8:e7:e4:21:d4:4a:c5:11:4c:30:c1:8b:3b:
a9:c0:2e:29:f5:8c:7a:50:16:32:9b:81:59:4f:f4:9d:4b:6d:
83:82:1d:7d:f5:88:5f:2d:0b:19:80:65:22:9e:53:a6:03:39:
2a:83:95:15:80:49:ba:bf:a4:14:e4:29:b1:02:88:9a:c4:3a:
0c:7b:f2:5a:41:8a:64:d0:68:b6:cc:f2:f9:59:e6:b7:1f:e2:
ed:5b:b5:23:1f:e9:2e:af:7c:c1:06:f9:f1:06:fc:94:3b:4e:
cd:8e:6a:52
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICC8IwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RjUxRjhBRjExMC8GA1UEBRMoNERFRkI0MUQzQjQyQ0NGRDczQjFBMDQ0NzdDMEU4
MjVDNzRENkM2RTAeFw0yNjA3MjkxNTQ5MzBaFw0zMDEyMjMxNTQ5MzBaMBgxFjAU
BgNVBAMTDTZhNmEyMTBlLTY3ZGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDnwkYbkkeuDDi1E6bljvZzh4UEdOwm4117WVam8yQCd/a6K+F1L94A7kAy
MPihhRwEzimyh2fL7SqqFp8Hq/M0E6cLPVbfCS69RdTT13WCyKHA1KxgPGYPCqXo
ds6nZ53Bs8QpS+4VPXtyloni8r4bEO2eYNp0LhRURAAGc2TqElSzIgHqG/h8nrRq
bFq9VFW7mRpxbrc2+Fz+SdOAxVifaSgvbXLx9pOELyZa6PTjKLKWHTfqp3DWRqRn
PoNoqIQNxZITGxLlPmzY7TwmYoaqh25V4/vHJ8PJjGQBirMMSgLbnm8cgfXOpJE8
Ad71GBOn1c2kT32MrC+QgPjP6P1JAgMBAAGjggKmMIICojAdBgNVHQ4EFgQUIKHT
kKWQDr1BbjStk/a8ngRgO3YwHwYDVR0jBBgwFoAUTe+0HTtCzP1zsaBEd8DoJcdN
bG4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkY1MUY4L0I0QkE3RTJFOTU1QTExRThCN0IyMUQ3RkY4QUVBMjI4L1RlLTBI
VHRDelAxenNhQkVkOERvSmNkTmJHNC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1RlLTBIVHRDelAxenNhQkVkOERvSmNkTmJHNC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkY1MUY4L0I0QkE3RTJFOTU1QTExRThCN0IyMUQ3RkY4
QUVBMjI4LzE4NDY1QUQ2OEI2NTExRjFCODAzNDRGNkNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAsD/IgMA0GCSqGSIb3DQEB
CwUAA4IBAQAi6pA89IrUFkuCWiQ6NyxdlxuxR3+JszXnvmzrSVzVU8300zRRhOPc
BBEiW14HrEmUFg5Rm4qsdM/Ao1DDiHo3dRDxjKo4q5/SwAq7kNS/4qOPSVCw/6Ik
OVZox/7aYQwJR3KbVEkHKLe62EqmVsWD26hVPosdwoAQjCbtfwsr0UuKbXK9nijP
e+XfN5g1zwgDNRHfvNjn5CHUSsURTDDBizupwC4p9Yx6UBYym4FZT/SdS22Dgh19
9YhfLQsZgGUinlOmAzkqg5UVgEm6v6QU5CmxAoiaxDoMe/JaQYpk0Gi2zPL5Wea3
H+LtW7UjH+kur3zBBvnxBvyUO07NjmpS
-----END CERTIFICATE-----
Generated at Tue Aug 4 12:39:36 2026 by rpki-client