Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/B6B99F861C6E11F18CC2268CDAE4EC9C.roa
File: B6B99F861C6E11F18CC2268CDAE4EC9C.roa (raw, json)
Hash identifier: Nk9KcupgaFrT9HYjwhwayvcsckASnFKmSYP5X4ruEFg=
Subject key identifier: CB:9C:3B:7F:EA:20:C0:9B:C6:8D:16:A3:11:02:9A:F3:7F:12:9F:F7
Certificate issuer: /CN=F36F6E4AAF/serialNumber=4FEE129D09AB850DA039E7F5BB24B6699A0F8179
Certificate serial: 0910
Authority key identifier: 4F:EE:12:9D:09:AB:85:0D:A0:39:E7:F5:BB:24:B6:69:9A:0F:81:79
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/T-4SnQmrhQ2gOef1uyS2aZoPgXk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/B6B99F861C6E11F18CC2268CDAE4EC9C.roa
Signing time: Tue 10 Mar 2026 10:48:47 +0000
ROA not before: Tue 10 Mar 2026 10:48:42 +0000
ROA not after: Sat 10 Mar 2046 10:48:42 +0000
asID: 3491
IP address blocks: 2c0f:f3d0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/T-4SnQmrhQ2gOef1uyS2aZoPgXk.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/T-4SnQmrhQ2gOef1uyS2aZoPgXk.mft
rsync://rpki.afrinic.net/repository/afrinic/T-4SnQmrhQ2gOef1uyS2aZoPgXk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 15 Mar 2026 00:07:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2320 (0x910)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F6E4AAF, serialNumber=4FEE129D09AB850DA039E7F5BB24B6699A0F8179
Validity
Not Before: Mar 10 10:48:42 2026 GMT
Not After : Mar 10 10:48:42 2046 GMT
Subject: CN=69aff70f-701a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b7:cd:0e:c8:40:be:ed:8f:61:f7:07:49:00:
46:6a:43:83:24:cd:2e:31:4c:f6:8a:8b:b2:d0:bf:
f8:d4:80:c6:87:fa:35:f8:84:85:44:32:9f:05:75:
e4:f7:d3:8e:0a:95:b7:1c:3e:ed:40:c5:50:91:a0:
5a:9a:cf:8b:13:89:53:76:87:4a:d9:b5:82:ee:1e:
f9:92:65:22:3d:38:d8:5a:e4:6c:fe:52:a0:a6:89:
75:9e:5f:c2:38:95:f8:e2:eb:1a:dd:e0:f7:59:63:
99:a8:aa:1d:d2:b1:08:fc:67:ba:1a:aa:28:c5:60:
25:94:9d:43:03:e5:70:99:13:2e:59:0c:32:96:24:
0b:2d:b3:f2:b6:43:d4:87:06:21:5e:34:03:64:00:
01:cf:5a:65:4e:12:a2:25:f0:3f:cc:86:c7:d7:e2:
b9:78:17:95:d6:a3:5a:11:06:4b:81:20:eb:43:cd:
34:60:ba:5c:40:50:8d:c9:c5:7e:5a:5b:1a:d2:a9:
1f:ff:a9:f1:78:29:8c:a5:46:b7:07:c0:f7:41:87:
42:7a:1d:e0:68:41:f3:eb:a5:f0:1a:11:88:35:f8:
21:90:3d:14:6a:52:cf:fa:4e:37:39:70:e8:a6:03:
69:9e:a6:24:f9:d0:b9:86:03:90:19:bd:36:b1:47:
e1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:9C:3B:7F:EA:20:C0:9B:C6:8D:16:A3:11:02:9A:F3:7F:12:9F:F7
X509v3 Authority Key Identifier:
keyid:4F:EE:12:9D:09:AB:85:0D:A0:39:E7:F5:BB:24:B6:69:9A:0F:81:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/T-4SnQmrhQ2gOef1uyS2aZoPgXk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/T-4SnQmrhQ2gOef1uyS2aZoPgXk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/B6B99F861C6E11F18CC2268CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:f3d0::/32
Signature Algorithm: sha256WithRSAEncryption
10:cf:41:7e:10:fb:ff:95:c6:2f:9c:c7:a2:46:81:3a:f1:bd:
e8:1b:f4:1c:ba:f4:7f:a3:8b:eb:9d:bd:97:3c:31:e5:e7:77:
d0:64:0e:95:a4:49:27:82:35:66:0e:60:c9:0c:04:cb:2e:13:
ed:75:3b:38:8c:91:6d:23:2e:03:97:a8:5a:14:20:bd:3b:e8:
20:0a:e4:c1:9e:6f:11:31:c2:22:57:6a:c0:59:5e:a8:a3:be:
b1:4d:4b:4f:cd:78:32:3c:5c:ed:83:fa:c4:05:5f:84:30:d7:
21:87:93:09:b8:3b:15:19:48:fd:50:cb:bf:ec:d1:6a:ed:d3:
ee:65:c9:40:4d:ad:12:32:31:c8:e0:1d:cb:5a:0b:d4:bb:d5:
31:27:63:34:77:bd:a9:da:47:bd:30:21:03:c4:32:65:f0:15:
08:95:1f:f3:a0:d0:5b:09:29:d8:f7:fc:ab:f2:07:bd:e1:f3:
e0:4b:a0:59:ce:1b:4d:5a:9d:21:99:f6:5c:cd:03:e7:2c:5d:
6d:80:62:7c:24:57:f4:ae:79:4a:e6:b0:56:82:fb:8b:87:e9:
4f:fd:87:da:13:f4:44:19:ad:bf:01:08:37:e3:1b:bd:06:9f:
a9:05:c9:c7:49:40:34:2d:5f:0e:1c:27:c0:5b:f5:6f:98:36:
50:17:e0:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 13:49:18 2026 by rpki-client