Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F51F8/B4BA7E2E955A11E8B7B21D7FF8AEA228/CEFEEC808B6411F1936DA1F3CE1D38B0.roa
File: CEFEEC808B6411F1936DA1F3CE1D38B0.roa (raw, json)
Hash identifier: XglJ0uhy4sNkIBBRSrMKRGPstU3401znCZ/NG+6Ge/s=
Subject key identifier: B0:BE:12:29:0E:36:23:BE:1D:B3:F7:B7:91:96:A5:95:58:08:09:12
Certificate issuer: /CN=F36F51F8AF/serialNumber=4DEFB41D3B42CCFD73B1A04477C0E825C74D6C6E
Certificate serial: 0BC0
Authority key identifier: 4D:EF:B4:1D:3B:42:CC:FD:73:B1:A0:44:77:C0:E8:25:C7:4D:6C:6E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Te-0HTtCzP1zsaBEd8DoJcdNbG4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/B4BA7E2E955A11E8B7B21D7FF8AEA228/CEFEEC808B6411F1936DA1F3CE1D38B0.roa
Signing time: Wed 29 Jul 2026 15:47:31 +0000
ROA not before: Wed 29 Jul 2026 15:47:27 +0000
ROA not after: Mon 16 Dec 2030 15:47:27 +0000
asID: 36924
IP address blocks: 2c0f:f048::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/B4BA7E2E955A11E8B7B21D7FF8AEA228/Te-0HTtCzP1zsaBEd8DoJcdNbG4.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/B4BA7E2E955A11E8B7B21D7FF8AEA228/Te-0HTtCzP1zsaBEd8DoJcdNbG4.mft
rsync://rpki.afrinic.net/repository/afrinic/Te-0HTtCzP1zsaBEd8DoJcdNbG4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Aug 2026 00:07:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3008 (0xbc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F51F8AF, serialNumber=4DEFB41D3B42CCFD73B1A04477C0E825C74D6C6E
Validity
Not Before: Jul 29 15:47:27 2026 GMT
Not After : Dec 16 15:47:27 2030 GMT
Subject: CN=6a6a2093-ef77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:76:00:2b:d2:82:3e:c8:7a:5b:09:32:cd:38:
a7:c1:7c:9d:91:0a:ff:cd:e2:c2:f6:91:6a:8f:7d:
d3:93:7c:d6:ad:d3:73:f4:e3:88:92:29:2e:19:d3:
24:97:95:66:7d:f4:39:68:87:66:49:7e:24:e6:b8:
b7:6c:f0:32:f8:9f:4a:88:41:75:79:df:69:34:17:
40:98:9d:ca:41:5f:61:f9:99:1d:67:3e:07:50:3c:
6c:ce:cc:d0:8d:e8:24:d1:82:81:51:af:be:5b:df:
09:11:c2:63:ed:fd:d0:00:9a:70:c2:be:ef:87:fd:
a3:25:85:cc:23:36:8f:51:6f:fd:a7:6c:0d:58:aa:
00:a0:ea:88:7e:00:34:21:df:1a:f0:9a:8a:f4:a1:
f4:1a:80:0a:22:ac:ef:3d:b9:0f:3b:f8:cc:c2:17:
41:5c:15:9a:87:1c:ce:30:2e:50:10:dc:b4:0b:da:
31:f1:6f:07:96:07:6d:79:92:9c:f6:08:5d:6e:da:
84:64:69:40:5e:1d:d4:df:70:a8:19:8c:d1:71:ad:
69:7a:7c:71:c5:89:5e:2f:71:99:ac:f9:69:00:fd:
d6:e1:42:8e:04:4a:d5:59:9a:71:79:10:77:d2:fe:
d8:0f:02:81:4c:46:b4:68:39:e9:6f:08:14:f7:b0:
4b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:BE:12:29:0E:36:23:BE:1D:B3:F7:B7:91:96:A5:95:58:08:09:12
X509v3 Authority Key Identifier:
keyid:4D:EF:B4:1D:3B:42:CC:FD:73:B1:A0:44:77:C0:E8:25:C7:4D:6C:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/B4BA7E2E955A11E8B7B21D7FF8AEA228/Te-0HTtCzP1zsaBEd8DoJcdNbG4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Te-0HTtCzP1zsaBEd8DoJcdNbG4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/B4BA7E2E955A11E8B7B21D7FF8AEA228/CEFEEC808B6411F1936DA1F3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:f048::/32
Signature Algorithm: sha256WithRSAEncryption
1f:a8:ed:c8:27:70:07:c4:a3:69:b6:73:fe:a3:a4:d5:3d:58:
21:0a:19:71:c8:fd:06:37:10:96:36:9c:79:b0:52:68:0b:14:
10:ff:0a:ae:fc:c5:63:9f:81:52:85:28:47:6a:55:01:fe:cb:
9e:f2:35:84:3f:a7:bc:0f:06:21:ec:51:a0:de:61:05:85:0e:
7c:4f:9f:2c:c9:9a:1c:46:3e:1d:ca:5c:1f:21:c8:f0:1a:7b:
f8:ff:02:e9:d1:de:b7:23:c0:90:67:37:4b:3c:e2:8d:7b:21:
11:26:f4:36:9a:c2:cc:12:bd:d4:f2:72:fc:ea:fc:56:66:d2:
d8:d7:51:02:26:fc:17:b8:fc:15:59:fc:79:81:62:ff:48:cf:
43:93:9e:a1:aa:f3:d0:36:82:0a:63:c6:64:43:12:6c:ad:12:
2c:10:d4:c7:85:95:75:b6:d7:77:62:2d:b3:46:10:6d:83:3f:
da:0d:b0:59:ba:40:3c:0e:dd:0f:bd:93:dd:2e:e6:c2:c4:85:
78:c4:a9:b6:a2:de:ba:63:52:3c:11:e0:aa:fb:3c:29:80:6b:
7f:f5:ae:36:0e:26:f9:b3:20:c5:ec:3f:9d:72:40:7e:b4:ce:
44:35:e7:9d:a5:73:2f:ae:ac:a1:86:b6:d3:14:74:e0:4d:34:
19:64:b7:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 12:39:28 2026 by rpki-client