Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/0C44F7748F2A11F194FE7EF4CE1D38B0.roa
File: 0C44F7748F2A11F194FE7EF4CE1D38B0.roa (raw, json)
Hash identifier: /qCuGRYadAiV8ftf3WJvuLBKD5WC9WNV1wiKego62W0=
Subject key identifier: FE:1F:93:65:C3:E2:A1:32:A7:F8:B9:4B:8E:6C:95:E9:4B:27:12:1B
Certificate issuer: /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial: 09F8
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/0C44F7748F2A11F194FE7EF4CE1D38B0.roa
Signing time: Mon 03 Aug 2026 10:56:59 +0000
ROA not before: Mon 03 Aug 2026 10:56:55 +0000
ROA not after: Sat 30 Jul 2033 10:56:55 +0000
asID: 37119
IP address blocks: 41.78.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.mft
rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2552 (0x9f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D0F50AF, serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Validity
Not Before: Aug 3 10:56:55 2026 GMT
Not After : Jul 30 10:56:55 2033 GMT
Subject: CN=6a7073fa-7c42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ce:22:f8:9d:25:d3:e1:49:4d:11:8b:5c:0f:
45:6d:2f:7f:82:1b:67:1f:c9:56:6c:51:b1:bc:cd:
cd:02:87:ab:5f:24:39:9a:4f:f8:55:5e:41:ed:2e:
3c:69:9e:a3:cf:39:7d:8a:bc:1e:94:3b:21:7f:0f:
f7:4a:2a:52:6f:4c:09:1a:92:ec:1b:57:fd:24:a8:
78:ef:f6:3c:b4:7a:9b:e3:63:8f:26:fd:c1:02:4d:
77:ae:2e:c1:d8:79:e9:2b:51:af:c0:73:77:68:62:
f5:19:63:30:79:1f:8d:59:27:0d:f6:1f:a8:67:87:
4e:a2:24:9d:c7:06:ed:c0:b2:28:f4:9a:2c:f0:0b:
df:90:f6:8e:00:34:0e:34:ca:82:c6:76:93:d4:f5:
91:94:35:f2:04:81:38:52:5a:5f:cf:77:55:2f:28:
eb:15:26:3f:29:11:41:cd:64:96:5e:ac:06:fb:d3:
d6:9e:38:8d:c7:c4:34:aa:6b:90:15:f5:a2:de:5a:
92:8f:54:73:86:6d:18:2a:63:91:49:22:16:1c:cb:
dc:89:a3:e2:7e:60:01:24:bb:13:ea:21:9a:8a:ed:
de:2a:0d:a7:34:e8:b3:59:3c:b3:91:b9:6c:7c:0b:
e6:b5:ed:b8:54:bb:b2:f3:58:dd:df:5e:52:05:f1:
29:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:1F:93:65:C3:E2:A1:32:A7:F8:B9:4B:8E:6C:95:E9:4B:27:12:1B
X509v3 Authority Key Identifier:
keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/0C44F7748F2A11F194FE7EF4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.78.16.0/24
Signature Algorithm: sha256WithRSAEncryption
23:d9:9b:4b:78:82:5e:01:63:10:eb:55:ad:82:96:c0:92:b6:
0b:c6:99:ed:fd:56:32:28:34:af:74:54:f9:2f:f0:a2:dd:6e:
54:d1:f9:08:f2:29:66:fd:df:07:c8:6d:2f:ed:81:e4:5b:81:
b3:0a:9c:44:ec:4e:f4:f0:41:9a:51:86:38:47:45:12:23:e7:
78:e0:b4:36:04:19:c8:d0:41:b4:42:df:69:a9:49:d9:af:ce:
95:e2:21:cf:df:8b:e0:d6:67:d6:ce:69:fc:95:43:62:07:3e:
64:a8:46:eb:50:bf:09:8c:43:a3:91:b2:ef:48:39:96:97:88:
21:62:18:94:41:77:16:eb:c0:bf:22:27:1e:07:3a:98:d5:61:
eb:73:43:da:e0:5f:a2:38:77:37:bf:8b:4e:b0:1a:68:5d:c5:
0d:dd:8c:9c:90:ae:be:da:51:b0:e1:b0:f5:ad:e5:c2:c2:5b:
ad:ff:ed:f9:e8:09:32:01:a8:91:43:71:e4:70:4e:79:eb:c8:
e4:71:ed:a2:1a:9d:5a:68:78:d0:16:37:b0:52:5a:ba:33:3a:
67:df:45:25:74:09:d5:29:48:83:17:22:42:12:65:13:8f:e4:
49:19:1b:53:6d:5f:04:fa:f6:2d:9e:26:de:02:d5:23:63:14:
32:f5:35:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:27:32 2026 by rpki-client