Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/2698AA8E8F3A11F1B1D5A7D4CE1D38B0.roa
File: 2698AA8E8F3A11F1B1D5A7D4CE1D38B0.roa (raw, json)
Hash identifier: uZCnnR7SDxwc0tYVs2hsKoh/oLNQc8l2s3ujatfRLE0=
Subject key identifier: 3E:FB:3F:EB:2D:64:41:DB:32:9E:1C:75:CC:37:05:C8:F5:64:CF:11
Certificate issuer: /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial: 0A30
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/2698AA8E8F3A11F1B1D5A7D4CE1D38B0.roa
Signing time: Mon 03 Aug 2026 12:52:15 +0000
ROA not before: Mon 03 Aug 2026 12:52:11 +0000
ROA not after: Sat 30 Jul 2033 12:52:11 +0000
asID: 37119
IP address blocks: 105.174.4.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.mft
rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2608 (0xa30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D0F50AF, serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Validity
Not Before: Aug 3 12:52:11 2026 GMT
Not After : Jul 30 12:52:11 2033 GMT
Subject: CN=6a708eff-2a62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0a:33:ed:7e:31:57:50:4e:b8:66:8a:1a:e7:
ca:f9:13:0a:68:a4:da:ce:9c:4d:90:3d:53:0b:57:
3d:8b:05:88:df:e9:3f:0e:70:57:17:3b:d9:eb:e7:
a9:1f:f0:08:12:ad:dd:07:51:3f:86:06:1c:f1:c0:
6b:17:a6:26:5e:2b:47:4f:7f:6b:8e:f2:e7:db:c3:
5b:1b:23:77:87:60:7b:06:30:5b:0a:aa:b6:61:96:
e5:4d:eb:ac:14:26:84:1a:47:52:34:04:ee:10:a3:
45:db:83:24:c8:a0:5f:2e:5c:04:a5:68:99:c9:75:
3a:5b:cc:8a:e1:f9:de:a7:eb:62:03:a8:f7:c1:81:
a1:d4:a8:70:24:30:e2:a1:68:d3:e9:17:3b:83:92:
65:24:4d:31:42:48:25:4f:d9:36:42:c7:44:aa:13:
ad:82:26:ab:68:12:47:7c:2b:47:73:1a:6c:b4:26:
eb:ab:6b:0b:5a:5c:39:2a:be:bd:3d:49:4d:ba:a3:
9d:eb:a3:9a:76:15:8d:fd:35:70:35:a5:97:8d:8c:
f0:2d:05:f9:87:9a:28:ea:fe:d2:bd:25:e3:3f:48:
90:f7:d2:1e:d8:ef:dd:29:c0:d1:02:49:5a:f4:bf:
de:fd:fd:7f:08:bd:c5:b9:87:b8:9f:86:04:15:0a:
0d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:FB:3F:EB:2D:64:41:DB:32:9E:1C:75:CC:37:05:C8:F5:64:CF:11
X509v3 Authority Key Identifier:
keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/2698AA8E8F3A11F1B1D5A7D4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
105.174.4.0/22
Signature Algorithm: sha256WithRSAEncryption
58:8e:e4:d5:96:c6:62:46:c8:69:fe:7e:e8:89:8f:0d:df:88:
90:ea:80:ca:41:e7:2f:35:b6:a6:9e:d9:44:df:b9:f3:ee:5d:
de:ac:67:aa:92:53:a1:3e:bd:6a:af:6f:67:74:d8:ae:33:03:
09:5e:6a:f9:6c:bd:9c:02:42:96:08:e7:36:fd:e4:2c:65:28:
e6:6a:e1:41:c9:53:4a:23:c4:36:fb:0a:06:a7:ec:34:25:e6:
12:50:6c:b4:ed:10:b8:53:22:01:e6:ac:72:ec:ea:46:71:a0:
af:8f:a1:17:be:65:3b:fb:5e:0d:d7:b8:d2:cf:42:7e:b8:75:
f0:99:c0:6b:66:f6:ba:cd:0c:19:0d:f5:21:7a:84:d7:4d:44:
4d:9c:76:6e:65:ad:cc:ff:cf:51:89:8b:bf:8a:f1:f9:ea:a5:
50:22:88:23:f7:f7:13:bd:a5:fb:86:cd:31:d3:af:c3:95:05:
bc:58:ed:e8:b2:fb:b2:61:d3:b8:1d:ff:25:d3:30:67:3c:e0:
5a:cc:e7:fa:ef:39:57:64:43:d9:d0:5c:7f:8d:f6:20:00:fd:
e8:37:ed:d9:25:fc:46:5f:be:f9:46:5f:e6:c8:20:9b:49:6a:
77:2c:f5:8a:2b:68:b2:a9:14:6b:fc:fc:1f:4e:19:e6:4a:46:
a7:32:36:62
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCjAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RDBGNTBBRjExMC8GA1UEBRMoQUU5OEE1RkRBRDJEQzlGNEZDMUJFNDdGNjY4NTdB
OEM0Nzk4ODEwMjAeFw0yNjA4MDMxMjUyMTFaFw0zMzA3MzAxMjUyMTFaMBgxFjAU
BgNVBAMTDTZhNzA4ZWZmLTJhNjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDMCjPtfjFXUE64Zooa58r5EwpopNrOnE2QPVMLVz2LBYjf6T8OcFcXO9nr
56kf8AgSrd0HUT+GBhzxwGsXpiZeK0dPf2uO8ufbw1sbI3eHYHsGMFsKqrZhluVN
66wUJoQaR1I0BO4Qo0XbgyTIoF8uXASlaJnJdTpbzIrh+d6n62IDqPfBgaHUqHAk
MOKhaNPpFzuDkmUkTTFCSCVP2TZCx0SqE62CJqtoEkd8K0dzGmy0JuurawtaXDkq
vr09SU26o53ro5p2FY39NXA1pZeNjPAtBfmHmijq/tK9JeM/SJD30h7Y790pwNEC
SVr0v979/X8IvcW5h7ifhgQVCg31AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUPvs/
6y1kQdsynhx1zDcFyPVkzxEwHwYDVR0jBBgwFoAUrpil/a0tyfT8G+R/ZoV6jEeY
gQIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkQwRjUwLzVFQUFBNkI4MjU4RjExRUJCNzBCN0MxOUY4QUVBMjI4L3JwaWxf
YTB0eWZUOEctUl9ab1Y2akVlWWdRSS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3JwaWxfYTB0eWZUOEctUl9ab1Y2akVlWWdRSS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkQwRjUwLzVFQUFBNkI4MjU4RjExRUJCNzBCN0MxOUY4
QUVBMjI4LzI2OThBQThFOEYzQTExRjFCMUQ1QTdENENFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJprgQwDQYJKoZIhvcNAQEL
BQADggEBAFiO5NWWxmJGyGn+fuiJjw3fiJDqgMpB5y81tqae2UTfufPuXd6sZ6qS
U6E+vWqvb2d02K4zAwleavlsvZwCQpYI5zb95CxlKOZq4UHJU0ojxDb7Cgan7DQl
5hJQbLTtELhTIgHmrHLs6kZxoK+PoRe+ZTv7Xg3XuNLPQn64dfCZwGtm9rrNDBkN
9SF6hNdNRE2cdm5lrcz/z1GJi7+K8fnqpVAiiCP39xO9pfuGzTHTr8OVBbxY7eiy
+7Jh07gd/yXTMGc84FrM5/rvOVdkQ9nQXH+N9iAA/eg37dkl/EZfvvlGX+bIIJtJ
ancs9YoraLKpFGv8/B9OGeZKRqcyNmI=
-----END CERTIFICATE-----
Generated at Thu Aug 6 12:27:59 2026 by rpki-client