Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/3A8E11FC8F3311F1905800ABCE1D38B0.roa
File: 3A8E11FC8F3311F1905800ABCE1D38B0.roa (raw, json)
Hash identifier: Tr02aSJlabY4YlmZFSMZIPSLHzmKkslECFvbwMhFXN4=
Subject key identifier: 05:2A:F5:53:AA:78:FA:8A:17:C4:5C:D1:F3:BC:B7:AC:80:D8:6F:9B
Certificate issuer: /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial: 0A10
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/3A8E11FC8F3311F1905800ABCE1D38B0.roa
Signing time: Mon 03 Aug 2026 12:02:42 +0000
ROA not before: Mon 03 Aug 2026 12:02:38 +0000
ROA not after: Sat 30 Jul 2033 12:02:38 +0000
asID: 37119
IP address blocks: 105.172.160.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.mft
rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2576 (0xa10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D0F50AF, serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Validity
Not Before: Aug 3 12:02:38 2026 GMT
Not After : Jul 30 12:02:38 2033 GMT
Subject: CN=6a708362-308f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d7:8b:2f:bf:ec:ee:8a:99:72:19:5e:0a:ec:
c2:7d:60:dc:5a:df:6d:91:89:7a:fe:66:3f:55:08:
d6:ee:30:59:33:8c:16:b8:aa:4a:25:36:48:3e:9d:
94:db:fb:9d:6b:2f:e1:06:d8:0e:c0:49:54:e5:62:
5b:c9:ee:3f:fc:08:52:fa:25:f3:c8:9f:b0:6d:4b:
97:8d:b5:8a:5c:21:50:ff:da:c6:f7:c3:d3:37:bb:
68:de:40:40:3e:61:17:48:75:9e:60:70:32:dc:d8:
39:61:72:a6:4a:26:bb:2d:80:1e:ec:46:cf:55:b5:
cc:b7:41:dd:ee:c1:92:46:8b:98:cc:8e:6f:7a:4f:
45:8e:94:58:68:d5:ed:8b:e8:db:4b:7b:45:d6:d9:
82:bb:8e:46:68:83:b9:fb:55:8f:60:4a:94:e9:67:
c2:4d:b5:ed:5d:56:e6:36:70:9c:89:c4:5a:89:ec:
00:3e:45:c3:4a:7f:82:47:05:18:65:2c:4f:24:09:
8e:3f:92:c4:c7:a0:97:99:59:25:bf:1a:12:5a:fc:
7e:c1:de:e6:fd:6a:5a:b3:fa:55:ba:16:18:72:1c:
42:7d:27:8f:b5:5b:b6:43:fe:37:23:09:33:2d:29:
09:0c:a6:fc:bc:29:a8:42:94:51:22:91:88:f0:ce:
49:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:2A:F5:53:AA:78:FA:8A:17:C4:5C:D1:F3:BC:B7:AC:80:D8:6F:9B
X509v3 Authority Key Identifier:
keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/3A8E11FC8F3311F1905800ABCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
105.172.160.0/19
Signature Algorithm: sha256WithRSAEncryption
2d:bd:1a:78:5a:b5:3d:41:2a:85:b6:a2:46:41:69:cd:fe:f4:
08:18:07:3e:f7:53:7d:1e:c7:4c:8a:11:51:6a:a9:1d:f3:9b:
15:2d:e5:f2:d9:3b:03:77:f2:de:43:c7:72:50:27:30:72:0d:
9a:13:38:e9:ac:44:5a:a4:d9:97:c0:48:f1:c7:3d:5d:75:89:
79:96:85:65:0b:dc:ee:77:ee:37:00:03:9f:f8:e5:58:7e:a0:
f6:9d:47:00:90:06:b5:73:00:d3:ee:59:9f:76:b2:f2:84:e0:
68:4e:b0:97:fc:05:be:68:6b:6b:dd:00:7b:fe:f5:9a:85:21:
8d:50:8a:e4:18:b2:16:b8:81:a8:0c:a5:05:ac:5d:86:ea:f9:
45:24:2d:ec:50:0b:31:3d:48:be:dd:d7:64:1e:43:ab:75:ed:
ef:99:c1:1a:03:2f:cb:31:fd:e4:2e:28:c4:7e:8b:f5:a2:87:
3a:39:49:3d:40:b4:56:90:61:64:38:dc:42:40:2f:27:61:03:
8f:44:c8:aa:5d:2e:63:27:96:fa:b4:d2:62:dd:1b:9c:2c:ee:
71:8e:2f:0d:6d:1e:13:99:46:ca:ee:7d:fc:06:a2:61:1f:ab:
8f:ec:ab:68:67:a8:83:74:2b:08:e0:0d:1a:e0:64:66:92:f1:
7a:8a:58:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:27:39 2026 by rpki-client