Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/02CD82A88F3211F1854D7EA4CE1D38B0.roa
File: 02CD82A88F3211F1854D7EA4CE1D38B0.roa (raw, json)
Hash identifier: oQZ/wj9L8Ipes+ujhyuW52ijVOUJqT+OLu50R6iYM9g=
Subject key identifier: 8E:37:FD:1C:41:E0:1D:87:F9:A4:1E:F5:16:73:22:7A:F7:E1:B0:63
Certificate issuer: /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial: 0A0A
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/02CD82A88F3211F1854D7EA4CE1D38B0.roa
Signing time: Mon 03 Aug 2026 11:53:59 +0000
ROA not before: Mon 03 Aug 2026 11:53:54 +0000
ROA not after: Sat 30 Jul 2033 11:53:54 +0000
asID: 37119
IP address blocks: 105.172.64.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.mft
rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2570 (0xa0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D0F50AF, serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Validity
Not Before: Aug 3 11:53:54 2026 GMT
Not After : Jul 30 11:53:54 2033 GMT
Subject: CN=6a708156-3adc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:09:53:17:db:a5:4b:e8:7a:d6:e4:f1:95:c4:
a5:4f:41:eb:e0:dc:1f:d0:df:21:b3:e6:04:29:68:
63:64:a6:00:a6:0e:40:63:73:16:bf:73:64:84:6f:
31:be:9a:f5:05:9a:ca:1e:6d:d8:a0:93:51:b3:cb:
d7:90:9d:a6:a6:de:94:04:71:bd:64:24:d4:30:a2:
d9:84:9a:63:13:87:48:8e:e1:5e:b0:0b:9a:e8:5e:
fb:82:64:e0:e5:db:c8:19:b7:27:f7:fa:4d:aa:58:
91:7a:46:15:e9:1a:cb:c7:a1:80:b5:11:6c:c9:72:
8f:1d:c3:d0:ec:a9:cf:69:b9:88:ca:ea:04:a4:17:
eb:03:77:8d:69:ff:e2:87:04:49:76:4f:11:77:37:
c9:d3:2e:30:c4:7b:ec:5d:ff:3a:4b:d1:a0:7d:69:
95:ae:53:05:09:89:70:db:77:6f:86:2b:42:2b:17:
cb:28:e3:96:f1:05:07:d5:30:a0:5b:3e:c6:1c:c9:
60:25:86:70:be:92:c1:a7:88:eb:35:55:1b:b0:d1:
25:3f:db:1b:8a:89:39:02:38:50:81:89:08:63:44:
48:9b:1e:af:99:f9:e0:d7:5e:96:1f:0b:9c:41:46:
54:cd:6d:93:3d:86:06:7d:14:64:b0:4e:14:a8:07:
50:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:37:FD:1C:41:E0:1D:87:F9:A4:1E:F5:16:73:22:7A:F7:E1:B0:63
X509v3 Authority Key Identifier:
keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/02CD82A88F3211F1854D7EA4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
105.172.64.0/19
Signature Algorithm: sha256WithRSAEncryption
97:06:c9:85:b4:28:1a:7e:ff:d0:bc:33:22:9b:39:e8:eb:6b:
da:58:b5:7f:16:ad:2f:c0:fe:d7:32:5d:5b:51:f3:9f:2d:4e:
20:54:f2:c5:5a:59:89:3c:37:7a:47:99:f9:8b:79:00:13:84:
1d:f4:c5:ec:54:e6:6b:c6:44:b9:59:a5:a4:70:be:ec:3e:88:
ff:fd:f9:ae:95:69:50:63:0e:a2:5c:b1:a4:c5:5f:11:5f:00:
20:51:df:62:fa:52:f3:98:ea:5c:d6:9f:18:6c:6c:35:26:52:
9d:e6:1e:f1:ee:ec:7d:07:b9:14:1b:7c:e9:fc:06:66:1b:a4:
98:05:8e:da:52:57:29:9a:40:57:7e:87:db:d6:d2:ba:26:d9:
b4:09:c5:6c:e7:b7:c9:77:44:29:1f:89:6e:b1:b9:f9:d7:42:
fc:58:12:41:11:16:c9:d9:e5:67:03:50:e5:38:70:69:79:10:
f6:63:a3:9b:19:d8:39:5c:e3:ca:a6:e0:27:1c:c7:9e:5f:03:
b8:a8:64:88:5a:bf:6e:1a:73:eb:71:62:3e:56:11:c6:b6:65:
22:d9:df:3f:09:7f:bb:80:03:97:1e:ea:d6:e9:54:12:e8:0f:
36:73:a4:5a:f4:38:f6:f8:6d:e0:68:5f:a9:49:2b:d3:4c:fe:
7f:12:a1:4d
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCgowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RDBGNTBBRjExMC8GA1UEBRMoQUU5OEE1RkRBRDJEQzlGNEZDMUJFNDdGNjY4NTdB
OEM0Nzk4ODEwMjAeFw0yNjA4MDMxMTUzNTRaFw0zMzA3MzAxMTUzNTRaMBgxFjAU
BgNVBAMTDTZhNzA4MTU2LTNhZGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCrCVMX26VL6HrW5PGVxKVPQevg3B/Q3yGz5gQpaGNkpgCmDkBjcxa/c2SE
bzG+mvUFmsoebdigk1Gzy9eQnaam3pQEcb1kJNQwotmEmmMTh0iO4V6wC5roXvuC
ZODl28gZtyf3+k2qWJF6RhXpGsvHoYC1EWzJco8dw9Dsqc9puYjK6gSkF+sDd41p
/+KHBEl2TxF3N8nTLjDEe+xd/zpL0aB9aZWuUwUJiXDbd2+GK0IrF8so45bxBQfV
MKBbPsYcyWAlhnC+ksGniOs1VRuw0SU/2xuKiTkCOFCBiQhjREibHq+Z+eDXXpYf
C5xBRlTNbZM9hgZ9FGSwThSoB1BxAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUjjf9
HEHgHYf5pB71FnMievfhsGMwHwYDVR0jBBgwFoAUrpil/a0tyfT8G+R/ZoV6jEeY
gQIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkQwRjUwLzVFQUFBNkI4MjU4RjExRUJCNzBCN0MxOUY4QUVBMjI4L3JwaWxf
YTB0eWZUOEctUl9ab1Y2akVlWWdRSS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3JwaWxfYTB0eWZUOEctUl9ab1Y2akVlWWdRSS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkQwRjUwLzVFQUFBNkI4MjU4RjExRUJCNzBCN0MxOUY4
QUVBMjI4LzAyQ0Q4MkE4OEYzMjExRjE4NTREN0VBNENFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAVprEAwDQYJKoZIhvcNAQEL
BQADggEBAJcGyYW0KBp+/9C8MyKbOejra9pYtX8WrS/A/tcyXVtR858tTiBU8sVa
WYk8N3pHmfmLeQAThB30xexU5mvGRLlZpaRwvuw+iP/9+a6VaVBjDqJcsaTFXxFf
ACBR32L6UvOY6lzWnxhsbDUmUp3mHvHu7H0HuRQbfOn8BmYbpJgFjtpSVymaQFd+
h9vW0rom2bQJxWznt8l3RCkfiW6xufnXQvxYEkERFsnZ5WcDUOU4cGl5EPZjo5sZ
2Dlc48qm4Cccx55fA7ioZIhav24ac+txYj5WEca2ZSLZ3z8Jf7uAA5ce6tbpVBLo
DzZzpFr0OPb4beBoX6lJK9NM/n8SoU0=
-----END CERTIFICATE-----
Generated at Thu Aug 6 12:27:43 2026 by rpki-client