Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/0DB39D548F3411F1A55420AFCE1D38B0.roa
File: 0DB39D548F3411F1A55420AFCE1D38B0.roa (raw, json)
Hash identifier: hRKQq58aT+XsRe4nuVj956eqK9kmE3gs9/zasZBfp7g=
Subject key identifier: 8D:2C:4F:73:5E:39:4A:F6:C5:AB:17:B3:7E:71:BC:ED:8C:D3:87:6D
Certificate issuer: /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial: 0A14
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/0DB39D548F3411F1A55420AFCE1D38B0.roa
Signing time: Mon 03 Aug 2026 12:08:36 +0000
ROA not before: Mon 03 Aug 2026 12:08:32 +0000
ROA not after: Sat 30 Jul 2033 12:08:32 +0000
asID: 37119
IP address blocks: 105.172.224.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.mft
rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2580 (0xa14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D0F50AF, serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Validity
Not Before: Aug 3 12:08:32 2026 GMT
Not After : Jul 30 12:08:32 2033 GMT
Subject: CN=6a7084c4-b532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c0:ad:92:e3:92:99:a8:43:69:ea:dd:2b:ce:
81:a9:a4:3f:06:18:dc:2f:35:b1:95:a3:56:6d:4f:
c8:1d:00:e6:70:b1:d0:74:af:42:f7:4f:8d:d2:c6:
c4:2b:2f:64:c5:b8:48:5b:24:cb:8b:ba:fc:e0:e9:
28:c9:fe:2c:76:ac:1d:9f:c1:c4:45:48:15:5e:47:
87:7e:2f:e9:29:26:c2:e1:5a:ad:95:24:9f:5c:d9:
3c:b5:fe:53:32:35:41:19:05:ac:64:61:1f:e9:6f:
b1:a4:66:ba:d9:64:32:7f:c6:1d:a2:d9:a6:75:52:
c1:8a:4e:ed:5c:26:98:66:2a:25:ec:08:2a:e0:f9:
9b:26:08:5c:2d:a9:f7:9e:76:67:b8:a7:58:df:e9:
50:bd:d8:f5:d8:04:17:36:1d:22:97:a3:53:bf:87:
96:11:61:0f:02:94:3d:56:87:5c:34:17:bf:d6:e5:
0e:ea:3f:b8:e5:a3:1c:d8:f5:e3:3d:35:c1:72:45:
eb:35:ef:14:0b:ca:cf:a0:aa:73:90:e2:58:60:11:
7e:00:f8:09:c7:95:95:e7:bd:6f:94:a5:32:e0:72:
98:8d:8e:2b:a0:c5:00:a3:a7:d6:34:ce:9b:0f:12:
00:dd:cb:1d:fe:2a:bc:e5:3a:b7:95:2b:17:e8:a0:
20:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:2C:4F:73:5E:39:4A:F6:C5:AB:17:B3:7E:71:BC:ED:8C:D3:87:6D
X509v3 Authority Key Identifier:
keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/0DB39D548F3411F1A55420AFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
105.172.224.0/19
Signature Algorithm: sha256WithRSAEncryption
88:ee:47:07:36:b8:37:b0:6e:a4:b4:1d:24:26:8e:17:64:60:
5d:96:c4:d5:5d:33:ee:91:a4:1b:1d:10:11:55:ed:90:65:0d:
28:b4:38:2c:44:1b:96:e6:42:59:b3:21:75:aa:b7:25:3f:cb:
e5:aa:cf:cd:f0:a4:bd:e5:95:45:72:1d:2a:1f:73:1b:17:19:
18:47:e4:6c:a7:ea:5e:2f:8d:d1:a7:ff:c9:ce:54:66:45:54:
98:f0:7e:84:07:e0:72:ee:4d:cf:19:e3:e8:60:93:13:6e:f7:
fe:36:4d:5c:6f:d5:9d:a9:be:62:d4:3c:8c:a1:30:2f:67:df:
11:da:07:1d:13:f3:ff:93:c4:07:05:f7:2b:96:96:6e:83:b9:
b3:7f:cd:f0:3d:ea:6c:31:dc:a0:37:79:61:da:40:77:0f:66:
79:85:70:35:56:03:43:a1:c4:49:ed:7d:29:d3:a0:cd:81:90:
fe:e7:b4:06:85:91:30:35:56:06:2a:c1:9b:29:31:7a:60:a1:
49:56:b7:1f:48:13:f9:7c:70:90:29:17:fe:10:61:14:c9:70:
17:c2:69:6b:74:7c:6b:b1:f2:6c:e8:3a:05:66:a8:7d:7e:7a:
fa:5a:32:ce:d3:e9:dc:d1:84:08:d2:15:be:76:9e:de:f8:29:
b2:4c:a2:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:27:41 2026 by rpki-client