Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F61A5/06F7F66C0FC911EC8545E973D8A014CE/90F79C7C60D811F19F96B0D2CE1D38B0.roa
File: 90F79C7C60D811F19F96B0D2CE1D38B0.roa (raw, json)
Hash identifier: T65kjrw8rJ3A6xr2pSO5MnSqwbL9mSOLIEsI6tFtcqs=
Subject key identifier: 1E:3B:6A:12:22:C2:B8:A2:55:DE:8E:00:D6:97:16:68:D9:36:C2:DC
Certificate issuer: /CN=F36F61A5AF/serialNumber=E2EDF446EC252E12FF858EEBE318A6D9AE0431B0
Certificate serial: 06F5
Authority key identifier: E2:ED:F4:46:EC:25:2E:12:FF:85:8E:EB:E3:18:A6:D9:AE:04:31:B0
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/4u30RuwlLhL_hY7r4xim2a4EMbA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F61A5/06F7F66C0FC911EC8545E973D8A014CE/90F79C7C60D811F19F96B0D2CE1D38B0.roa
Signing time: Fri 05 Jun 2026 12:17:49 +0000
ROA not before: Fri 05 Jun 2026 12:17:44 +0000
ROA not after: Thu 05 Jun 2031 12:17:44 +0000
asID: 329474
IP address blocks: 2c0f:4e20::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F61A5/06F7F66C0FC911EC8545E973D8A014CE/4u30RuwlLhL_hY7r4xim2a4EMbA.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F61A5/06F7F66C0FC911EC8545E973D8A014CE/4u30RuwlLhL_hY7r4xim2a4EMbA.mft
rsync://rpki.afrinic.net/repository/afrinic/4u30RuwlLhL_hY7r4xim2a4EMbA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 14 Jun 2026 00:07:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1781 (0x6f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F61A5AF, serialNumber=E2EDF446EC252E12FF858EEBE318A6D9AE0431B0
Validity
Not Before: Jun 5 12:17:44 2026 GMT
Not After : Jun 5 12:17:44 2031 GMT
Subject: CN=6a22be6d-6889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a4:55:9a:c9:db:29:34:b7:6d:94:27:c5:62:
e1:34:5d:f9:45:ac:8e:cc:7d:87:f0:bc:0f:01:6f:
7d:3c:b0:8f:44:4d:b6:35:4c:ef:a8:4f:21:e0:4e:
80:d6:f1:f8:2e:54:78:17:dd:60:90:37:b4:51:6f:
40:7d:48:10:33:f9:8e:5e:f4:63:73:e7:da:f0:48:
bd:ea:da:32:c7:50:ac:2e:63:f9:1a:11:d2:11:9f:
87:23:be:b3:79:07:7a:42:30:ad:59:a9:d8:73:b3:
00:8d:99:7c:a8:ff:d5:77:1d:93:6e:99:62:83:f6:
8b:49:02:46:6b:15:4f:bf:be:05:14:83:5d:7c:94:
f1:14:e6:28:3a:fb:ba:a3:4f:33:c6:02:d4:84:38:
e6:38:0b:7c:ac:e9:ba:6c:19:4c:d8:08:b9:06:71:
db:b4:36:cc:ed:a2:8c:37:dd:50:a3:81:00:c5:d8:
23:20:73:10:70:9d:29:09:1f:58:56:ff:14:01:c4:
61:7a:14:ff:f9:0a:23:88:85:c2:ca:7f:40:5a:27:
e5:66:f5:89:1c:1d:69:2f:29:7c:00:be:7a:7d:14:
8c:fb:f1:8a:2a:99:93:97:a9:dc:62:50:dd:2c:90:
8e:2e:0a:31:d8:f9:c5:9c:89:c0:ee:b5:8a:a5:44:
de:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:3B:6A:12:22:C2:B8:A2:55:DE:8E:00:D6:97:16:68:D9:36:C2:DC
X509v3 Authority Key Identifier:
keyid:E2:ED:F4:46:EC:25:2E:12:FF:85:8E:EB:E3:18:A6:D9:AE:04:31:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F61A5/06F7F66C0FC911EC8545E973D8A014CE/4u30RuwlLhL_hY7r4xim2a4EMbA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4u30RuwlLhL_hY7r4xim2a4EMbA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F61A5/06F7F66C0FC911EC8545E973D8A014CE/90F79C7C60D811F19F96B0D2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:4e20::/32
Signature Algorithm: sha256WithRSAEncryption
05:70:fe:11:07:0d:bd:95:32:e2:d0:7b:d1:b3:f0:af:8d:6f:
96:32:6a:a6:c0:48:39:f5:63:df:ae:94:90:fe:94:6d:6e:39:
01:d6:c2:82:25:9b:d7:8d:36:d7:ee:14:c3:e7:2b:a4:e8:95:
cd:2b:04:ac:50:6c:79:ed:d3:dc:88:0f:e6:a9:cd:ff:7e:e3:
d8:e5:20:72:fa:72:25:b1:72:f5:64:02:fc:aa:24:31:64:39:
69:66:36:8c:c5:6d:e4:32:c1:33:6a:35:f3:5b:74:5a:2f:2a:
da:85:9c:f9:7d:71:a8:ac:3d:c8:8a:45:62:c0:79:91:fd:ec:
31:7c:fe:c1:6a:94:3b:52:0c:f6:7e:a4:d6:5c:3f:40:51:90:
90:75:dc:c8:85:06:cb:21:6f:14:b9:75:08:34:fb:5d:49:45:
a6:8b:89:1c:5a:9c:be:2a:07:e6:ad:11:f6:5a:ac:3a:1a:1e:
ba:66:c8:18:0a:87:2a:96:35:38:37:b8:b3:93:04:fd:c3:c8:
69:2a:03:09:53:65:a9:38:36:2e:c4:1c:89:f5:72:dd:a7:5b:
90:20:b4:fb:ab:79:c8:5e:b5:22:9c:00:09:2f:fd:75:f0:9f:
14:18:29:5d:d2:a0:bb:2c:e8:71:38:f1:65:f8:78:7f:d8:c7:
b0:fe:c4:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:55:46 2026 by rpki-client