Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/0034EA488F2511F1B1651BD8CE1D38B0.roa
File: 0034EA488F2511F1B1651BD8CE1D38B0.roa (raw, json)
Hash identifier: OnOPnaXlb0k56jpsv6NWNuvpk1EnGoYT82K6e/T9o1c=
Subject key identifier: E3:D6:B2:61:56:EA:DC:C7:B0:C5:A3:79:9F:1A:D0:95:23:2A:C7:D1
Certificate issuer: /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial: 09E6
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/0034EA488F2511F1B1651BD8CE1D38B0.roa
Signing time: Mon 03 Aug 2026 10:20:51 +0000
ROA not before: Mon 03 Aug 2026 10:20:47 +0000
ROA not after: Sat 30 Jul 2033 10:20:47 +0000
asID: 37119
IP address blocks: 105.169.0.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.mft
rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2534 (0x9e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D0F50AF, serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Validity
Not Before: Aug 3 10:20:47 2026 GMT
Not After : Jul 30 10:20:47 2033 GMT
Subject: CN=6a706b83-0846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:54:65:be:87:2c:a9:e3:d8:d0:78:94:bf:d9:
0f:a9:a1:fd:ad:39:fd:35:63:57:45:fe:0b:5f:fc:
42:f1:7d:36:2d:48:db:c9:b3:d6:78:a6:6d:05:32:
d4:16:ac:7c:2b:6b:5e:09:a7:ad:f7:ba:ac:9c:c4:
dc:12:70:f5:46:57:25:d1:ba:59:d6:75:80:20:f4:
87:d8:6a:68:10:fd:fe:d2:86:ca:9f:3e:f5:51:af:
b3:8c:5b:74:62:54:57:7b:51:2b:e3:71:e4:fc:fc:
62:23:90:f2:40:10:50:3c:f0:aa:ad:51:2a:a3:8d:
7d:05:66:8d:3a:0b:08:14:db:d2:a0:f2:a8:4a:01:
85:f1:45:4f:bd:60:cb:c9:19:96:5e:20:3b:f5:58:
59:b8:11:e9:8e:31:b6:e5:c2:68:0c:5c:f8:39:88:
da:7e:94:06:a8:fc:47:d2:f4:34:45:2b:6e:ae:a0:
d2:27:3b:6a:22:fa:6b:31:9b:b7:e8:fc:ff:40:2b:
10:09:c7:44:49:e6:2d:9a:76:2f:12:48:f4:91:e2:
7c:49:56:95:c7:17:12:78:af:e9:4b:37:e7:94:e7:
88:ff:df:77:f4:af:b9:e7:b3:80:17:69:99:46:b7:
87:20:7c:d1:14:06:8c:e8:44:19:20:f5:cc:f0:15:
44:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:D6:B2:61:56:EA:DC:C7:B0:C5:A3:79:9F:1A:D0:95:23:2A:C7:D1
X509v3 Authority Key Identifier:
keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/0034EA488F2511F1B1651BD8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
105.169.0.0/19
Signature Algorithm: sha256WithRSAEncryption
55:a2:1e:0e:51:0a:f7:d1:f5:6e:b9:60:8d:97:d7:dc:6b:7a:
29:fc:c8:9b:d5:12:16:06:cf:91:a6:6d:fd:58:70:80:4c:16:
1e:40:6a:39:6a:6d:b4:2a:9a:85:bc:3f:ef:33:fd:5b:48:fd:
c7:6b:1c:bd:c6:43:71:90:17:27:e5:39:cf:b5:f0:98:94:30:
d0:c0:6b:18:c6:49:be:ee:41:9d:19:82:3c:0c:48:2e:af:a1:
97:c9:d6:51:62:46:f0:c4:59:47:72:07:89:83:e6:90:23:a7:
e4:53:fb:a3:59:7d:23:3e:03:3f:a5:f7:b6:e1:fd:ef:e2:82:
19:f0:6a:db:f1:b8:6e:9f:c3:ef:70:26:f2:e9:43:cf:a5:18:
ce:ff:78:2e:bc:f8:a6:2f:0e:2a:d3:be:39:e8:7b:26:83:af:
4c:7c:70:e0:a7:07:92:48:e9:17:23:8b:07:4f:b3:a8:8e:2e:
e8:fd:ce:f2:f2:1f:bd:c8:7f:62:b8:91:0c:82:71:62:9f:6c:
9e:68:53:65:de:ba:73:b2:04:98:37:fe:7e:72:bf:95:62:ef:
ce:4f:41:e0:9d:ea:0e:d3:19:85:ca:ef:47:4f:4d:3c:83:99:
23:8a:4d:fe:83:97:70:55:bc:54:b2:86:c3:fa:52:f0:03:03:
6c:90:6a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:27:55 2026 by rpki-client