Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CC035/71F69968715811ED8B19339FF1222468/A9B39EA48D7F11F198E60BDACE1D38B0.roa
File: A9B39EA48D7F11F198E60BDACE1D38B0.roa (raw, json)
Hash identifier: GexUwewXFwIgcK2EC7XmhRa1RpB4eqf6pDb3pMOsQNg=
Subject key identifier: D4:C7:00:30:C5:31:B5:65:DC:14:89:09:2B:0F:9D:8B:A9:8F:9F:04
Certificate issuer: /CN=F36CC035AF/serialNumber=E3B07BB9D0957749FFE48C7E7325A9E11B416AB9
Certificate serial: 057A
Authority key identifier: E3:B0:7B:B9:D0:95:77:49:FF:E4:8C:7E:73:25:A9:E1:1B:41:6A:B9
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/47B7udCVd0n_5Ix-cyWp4RtBark.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CC035/71F69968715811ED8B19339FF1222468/A9B39EA48D7F11F198E60BDACE1D38B0.roa
Signing time: Sat 01 Aug 2026 08:04:48 +0000
ROA not before: Sat 01 Aug 2026 08:04:43 +0000
ROA not after: Wed 01 Dec 2032 08:04:43 +0000
asID: 37009
IP address blocks: 105.232.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36CC035/71F69968715811ED8B19339FF1222468/47B7udCVd0n_5Ix-cyWp4RtBark.crl
rsync://rpki.afrinic.net/repository/member_repository/F36CC035/71F69968715811ED8B19339FF1222468/47B7udCVd0n_5Ix-cyWp4RtBark.mft
rsync://rpki.afrinic.net/repository/afrinic/47B7udCVd0n_5Ix-cyWp4RtBark.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1402 (0x57a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CC035AF, serialNumber=E3B07BB9D0957749FFE48C7E7325A9E11B416AB9
Validity
Not Before: Aug 1 08:04:43 2026 GMT
Not After : Dec 1 08:04:43 2032 GMT
Subject: CN=6a6da89f-7347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:62:a7:c3:39:e2:9d:ee:80:93:a1:0c:c3:8f:
f9:1f:f6:9e:1d:86:21:64:94:34:91:4b:e9:ca:1f:
6f:7c:01:ff:e2:cc:59:ba:e3:2f:32:81:51:46:91:
99:e9:06:d8:5a:9d:76:75:1b:f7:a0:e1:2e:ae:58:
eb:3d:6c:70:30:a2:32:1d:b3:c3:b6:50:c8:f7:ba:
31:f1:fa:f1:e6:0b:23:8b:4e:d1:b7:7b:41:11:38:
ec:08:88:a3:b8:26:62:b4:e6:41:32:b6:c1:d1:6b:
a0:70:9e:07:ae:ed:d7:d7:03:9a:70:0b:c7:67:36:
08:a8:1a:1b:bb:fc:44:2d:ba:32:67:49:01:89:67:
e8:59:e2:b4:07:04:01:0b:80:62:4b:e3:d9:09:35:
15:22:b7:96:9e:48:a3:60:e6:b9:9f:a3:e5:b4:6b:
a5:39:62:fd:6d:3f:6f:b0:ac:24:63:88:52:04:84:
05:c3:29:2d:b6:fa:c9:a4:70:6f:4e:88:72:f1:87:
63:26:a6:98:ca:ae:aa:b9:89:f4:da:b6:78:0d:04:
68:49:96:6f:34:47:5b:38:04:3e:0d:41:41:54:fa:
9f:11:bb:f7:8d:cd:b9:fe:3c:ca:f4:7b:a4:5b:ae:
0d:aa:78:25:cf:99:93:4b:4c:59:3d:9d:04:91:05:
64:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:C7:00:30:C5:31:B5:65:DC:14:89:09:2B:0F:9D:8B:A9:8F:9F:04
X509v3 Authority Key Identifier:
keyid:E3:B0:7B:B9:D0:95:77:49:FF:E4:8C:7E:73:25:A9:E1:1B:41:6A:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC035/71F69968715811ED8B19339FF1222468/47B7udCVd0n_5Ix-cyWp4RtBark.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/47B7udCVd0n_5Ix-cyWp4RtBark.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC035/71F69968715811ED8B19339FF1222468/A9B39EA48D7F11F198E60BDACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
105.232.0.0/16
Signature Algorithm: sha256WithRSAEncryption
04:d6:1a:7e:59:2a:a5:10:7e:32:f7:f9:b3:0d:92:84:fd:bb:
4c:e0:60:7d:56:73:e2:45:c3:55:a8:39:ac:73:c5:92:db:86:
c0:fa:f9:bc:05:c2:99:d3:57:27:7b:57:d1:9e:b6:b8:b8:43:
0e:14:e0:ec:45:81:f2:d9:31:4f:c1:6c:2f:44:6e:8d:df:80:
27:02:5d:94:6e:71:60:ee:3b:b9:d8:0a:86:bf:85:7f:5e:5b:
ba:c9:6f:47:08:cf:2d:09:06:ad:bb:cb:03:46:60:8b:7f:d0:
6c:13:2a:cc:d0:97:5a:60:23:86:8b:e1:fe:8a:6f:4c:59:52:
4a:da:73:93:57:0e:83:5b:24:65:32:d7:a6:3e:fa:98:30:ab:
ce:f5:fc:12:79:64:c4:5c:ce:c8:91:36:5c:0f:65:c3:7d:50:
4d:8f:16:31:96:9f:40:21:41:9f:00:86:af:a3:8b:a7:ff:d8:
a4:5a:91:c0:b3:5c:16:1a:ad:b2:ce:18:ab:cf:0c:fa:9d:fb:
6c:78:8a:69:55:ce:59:f0:1a:8e:a3:45:f2:95:eb:71:5d:52:
60:75:3d:31:fd:41:61:71:78:41:3e:b8:ef:62:ed:7f:15:15:
fa:20:3d:c7:b9:c5:91:75:0e:7f:93:36:8b:12:fe:38:6d:3a:
52:84:ef:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:27:45 2026 by rpki-client