Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FCE84/A8E1336817F111ED9F98A8C0F1222468/A5C2EA3C8EFD11F1A7C6A7EBCE1D38B0.roa
File: A5C2EA3C8EFD11F1A7C6A7EBCE1D38B0.roa (raw, json)
Hash identifier: AvCgqa5zlcvalfse8/atLbCPh7tRWm6AcKPl3OV70Ps=
Subject key identifier: 6A:01:05:41:AB:53:3F:24:87:25:BA:BE:47:99:06:30:CF:7E:E2:B9
Certificate issuer: /CN=F36FCE84AF/serialNumber=F8C24D4BD80A5F021A6D85CDD0FF07683DE17167
Certificate serial: 05DF
Authority key identifier: F8:C2:4D:4B:D8:0A:5F:02:1A:6D:85:CD:D0:FF:07:68:3D:E1:71:67
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/-MJNS9gKXwIabYXN0P8HaD3hcWc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FCE84/A8E1336817F111ED9F98A8C0F1222468/A5C2EA3C8EFD11F1A7C6A7EBCE1D38B0.roa
Signing time: Mon 03 Aug 2026 05:39:09 +0000
ROA not before: Mon 03 Aug 2026 05:39:05 +0000
ROA not after: Tue 28 Feb 2045 05:39:05 +0000
asID: 37425
IP address blocks: 2c0f:fb38::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FCE84/A8E1336817F111ED9F98A8C0F1222468/-MJNS9gKXwIabYXN0P8HaD3hcWc.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FCE84/A8E1336817F111ED9F98A8C0F1222468/-MJNS9gKXwIabYXN0P8HaD3hcWc.mft
rsync://rpki.afrinic.net/repository/afrinic/-MJNS9gKXwIabYXN0P8HaD3hcWc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1503 (0x5df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FCE84AF, serialNumber=F8C24D4BD80A5F021A6D85CDD0FF07683DE17167
Validity
Not Before: Aug 3 05:39:05 2026 GMT
Not After : Feb 28 05:39:05 2045 GMT
Subject: CN=6a70297d-3027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:77:f6:80:d9:8e:6a:f5:18:61:4f:ff:54:f2:
e3:f2:6a:ad:57:10:c6:dd:2a:44:91:35:2c:21:f0:
ab:98:59:dd:24:88:46:1a:59:91:5a:11:a5:65:fc:
9b:36:dc:f8:d7:cc:d5:a1:2c:96:7f:3e:39:4d:5e:
59:ed:0b:65:db:51:ab:3d:4b:1a:22:00:c4:31:9b:
18:72:51:be:76:ec:dd:29:1d:25:07:92:95:05:33:
f1:db:c0:fd:78:c8:57:da:6f:9f:78:72:c5:4d:40:
5b:c8:38:aa:cf:3f:20:34:9e:f7:7e:3e:0c:71:7d:
d2:b6:c1:1a:1a:b5:2d:f0:1c:fc:d1:c5:05:81:aa:
95:3b:78:9b:6c:22:91:3a:35:9b:cf:56:4a:9d:f2:
93:bc:5d:e6:dc:54:ec:ab:32:37:e2:a1:8a:4e:42:
f1:d2:69:19:e4:84:ca:fe:e4:67:54:0b:d0:a7:9b:
99:4b:a9:11:7c:11:b5:d6:d4:c9:d8:84:a3:4b:ac:
2a:6a:2c:aa:8c:ea:86:55:3a:44:d4:04:c5:a5:e2:
f4:cb:64:df:7c:ad:d0:ba:2b:25:d3:b1:29:b0:1f:
85:fb:3a:ad:9e:6d:53:e1:7b:2e:66:9c:2b:de:d6:
f3:c9:55:63:9a:fe:6e:3d:df:69:73:e0:3f:ff:84:
ec:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:01:05:41:AB:53:3F:24:87:25:BA:BE:47:99:06:30:CF:7E:E2:B9
X509v3 Authority Key Identifier:
keyid:F8:C2:4D:4B:D8:0A:5F:02:1A:6D:85:CD:D0:FF:07:68:3D:E1:71:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FCE84/A8E1336817F111ED9F98A8C0F1222468/-MJNS9gKXwIabYXN0P8HaD3hcWc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-MJNS9gKXwIabYXN0P8HaD3hcWc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FCE84/A8E1336817F111ED9F98A8C0F1222468/A5C2EA3C8EFD11F1A7C6A7EBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:fb38::/32
Signature Algorithm: sha256WithRSAEncryption
01:69:65:d8:9e:76:7f:8c:95:80:d7:57:d6:3f:3a:12:b3:5b:
65:04:f7:c0:c3:ae:72:bd:1b:0c:a8:69:35:7d:8d:75:b6:44:
cb:6c:3b:f9:e3:81:22:5d:dd:5c:21:1e:ff:0a:dc:3d:40:a8:
a2:c1:05:ce:2d:17:84:4a:c0:a0:69:c1:5a:a5:87:1a:3f:86:
03:6f:e3:64:47:64:2b:f7:6e:74:41:75:cb:ac:04:30:79:3e:
3c:b5:2b:5c:b1:7a:6e:0e:3f:28:ef:5d:ff:62:31:39:9c:3f:
08:ee:33:3a:09:ff:fe:93:ba:a8:08:aa:af:a9:8d:5b:a0:48:
1a:05:24:f9:3e:ce:19:45:53:f7:69:e0:da:1b:e2:5a:9a:08:
ee:a2:29:00:44:d5:6b:5b:16:ee:6b:86:23:a7:68:df:0b:2d:
22:99:b7:62:27:93:d1:74:a6:d6:b0:91:5f:e2:5a:72:31:6b:
a9:82:68:d7:aa:cf:a2:94:af:71:0e:df:2a:ce:53:57:10:88:
4d:99:31:97:72:d2:ea:65:df:55:c1:0a:d2:49:20:46:ba:d3:
fe:69:9d:b4:79:e2:5f:f3:30:69:c6:27:92:49:b7:eb:bf:c0:
77:8f:cf:f3:93:0b:bd:d2:5c:a7:b2:6b:f2:86:70:98:7e:b8:
75:fe:14:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:32:26 2026 by rpki-client