Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/04CACE468F3511F1A8B030B8CE1D38B0.roa
File: 04CACE468F3511F1A8B030B8CE1D38B0.roa (raw, json)
Hash identifier: BrSHgtH5yv5or2JApRWok1IgXxT7eucfyIpwpfSEdUA=
Subject key identifier: C2:94:1F:4E:C4:39:4F:26:94:82:9F:A2:06:8A:0B:D7:83:3B:76:6D
Certificate issuer: /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial: 0A18
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/04CACE468F3511F1A8B030B8CE1D38B0.roa
Signing time: Mon 03 Aug 2026 12:15:30 +0000
ROA not before: Mon 03 Aug 2026 12:15:26 +0000
ROA not after: Sat 30 Jul 2033 12:15:26 +0000
asID: 37119
IP address blocks: 105.174.34.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.mft
rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2584 (0xa18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D0F50AF, serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Validity
Not Before: Aug 3 12:15:26 2026 GMT
Not After : Jul 30 12:15:26 2033 GMT
Subject: CN=6a708662-09c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:b0:5b:0b:75:f3:4a:c9:d9:94:ab:7a:d0:46:
2e:97:9d:91:76:18:fd:a4:cf:b7:02:5d:01:54:7b:
3b:3f:97:95:36:d1:09:0d:8b:a8:af:23:99:3a:a0:
27:bc:96:b0:12:fb:b8:e0:cd:46:86:df:7f:54:da:
1d:ce:bd:48:70:5c:d4:01:f4:cd:98:0b:89:0d:47:
b8:51:ba:8e:1b:b2:32:74:7e:f6:59:bd:e4:1c:ed:
71:05:a7:8d:a8:ea:0e:77:ab:03:b6:23:94:80:72:
e5:31:70:1c:cf:2b:67:d9:e9:f1:9b:c0:be:a0:43:
e7:cb:fe:ef:d9:e7:b4:ec:dd:68:c4:fe:10:ab:40:
b8:a0:73:35:8e:13:89:27:29:97:f4:63:f0:56:c3:
a6:87:3f:85:f6:a8:d4:a0:63:24:b2:05:f5:e7:2e:
33:4d:51:c5:9c:f2:24:bc:23:d6:e0:77:c0:96:4f:
7e:04:bd:17:2a:b6:99:0f:e6:84:9e:b4:6b:d9:1f:
9f:8d:7b:57:7c:21:49:eb:28:84:07:cd:18:68:f5:
0d:ef:d5:5c:2f:c3:19:71:af:65:b9:52:73:07:88:
b7:5c:c3:80:ec:8c:e8:80:05:b5:5e:74:d1:a4:3a:
88:a7:a1:c5:11:f1:39:34:ec:c2:91:35:6d:bc:e8:
47:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:94:1F:4E:C4:39:4F:26:94:82:9F:A2:06:8A:0B:D7:83:3B:76:6D
X509v3 Authority Key Identifier:
keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/04CACE468F3511F1A8B030B8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
105.174.34.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:8e:1d:fa:2f:9f:bb:21:e1:60:3a:5f:dc:33:36:ac:05:0a:
75:36:d0:88:c7:bf:79:80:04:2c:43:5d:4c:32:ef:0d:07:83:
70:5c:48:0b:45:e1:23:70:c2:ca:80:d3:bd:10:10:e2:71:df:
16:a4:3a:2e:72:22:36:71:20:cf:43:c9:e6:75:4f:6c:fa:40:
a2:d9:37:15:16:3c:8d:f2:2f:93:6f:dc:45:a7:81:a6:fc:25:
da:14:4e:7e:8c:71:34:15:e7:ef:e6:87:ab:db:4a:63:34:d1:
6b:b0:59:4b:4e:56:39:f6:39:e9:93:25:91:21:0a:dc:4f:2f:
b4:72:45:20:77:2c:7d:4c:42:ba:df:34:47:88:b6:8b:1e:c9:
ca:a8:34:12:0c:a8:9b:3d:35:56:68:58:29:b3:15:ff:3a:44:
d1:78:77:fc:55:eb:08:08:34:a8:63:e0:25:8d:1c:0b:e6:d7:
ff:07:f6:c3:fd:0d:3b:5c:f1:5a:1a:cc:fe:ef:24:91:55:89:
c3:a1:31:27:6b:ef:ae:c4:d1:bc:b1:d7:62:44:fa:33:fb:40:
95:50:fd:fa:00:ee:03:19:4f:29:73:4b:88:ed:1a:59:b3:d0:
67:0e:8b:5b:f2:c8:91:79:56:97:b5:f5:09:89:30:25:b8:47:
40:a7:2b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:27:46 2026 by rpki-client