Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/42A1FF168F3811F1BAEE92C8CE1D38B0.roa
File: 42A1FF168F3811F1BAEE92C8CE1D38B0.roa (raw, json)
Hash identifier: vyKFNB+V/rui/uvyg2VRwzqDjtj2DxJ4hqjDvehDI4o=
Subject key identifier: 78:44:83:02:AA:5C:7D:C4:84:D7:DE:6F:5B:44:5F:1F:32:EA:17:50
Certificate issuer: /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial: 0A28
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/42A1FF168F3811F1BAEE92C8CE1D38B0.roa
Signing time: Mon 03 Aug 2026 12:38:43 +0000
ROA not before: Mon 03 Aug 2026 12:38:39 +0000
ROA not after: Sat 30 Jul 2033 12:38:39 +0000
asID: 37119
IP address blocks: 105.173.64.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.mft
rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2600 (0xa28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D0F50AF, serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Validity
Not Before: Aug 3 12:38:39 2026 GMT
Not After : Jul 30 12:38:39 2033 GMT
Subject: CN=6a708bd3-e406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:64:32:b8:52:ed:f2:47:40:fb:5b:d1:6f:d7:
30:83:ee:3b:dc:c2:9d:9d:ac:ae:80:09:ca:c0:39:
8f:c5:09:7c:83:16:49:30:0c:96:9b:12:3d:2b:41:
ea:9e:33:a1:b8:02:69:5e:43:56:20:ec:48:55:65:
32:53:6b:7d:62:6e:ab:8c:18:71:a4:02:1b:a6:ae:
63:66:c6:86:94:94:44:13:aa:1a:75:e7:40:cb:2a:
b2:3b:35:dc:d3:8c:ca:d1:57:4b:df:bc:e9:cc:71:
56:56:37:ff:a7:05:20:44:83:c6:ef:36:85:61:e0:
c0:56:ad:2d:73:3a:84:19:0a:2b:77:e9:75:60:1e:
35:be:29:fb:08:a4:8a:7f:5d:81:f0:79:7b:f2:69:
87:ed:9a:37:7c:a6:89:c4:4b:82:25:0b:83:f8:31:
6e:db:14:b0:2b:b8:27:a2:45:fe:c6:a1:3b:ee:54:
42:91:cf:2d:e2:d8:b3:b3:93:40:24:91:03:74:bf:
6c:61:94:b8:df:fe:31:31:44:76:19:da:b1:f3:af:
bc:1f:bd:60:ad:40:11:b7:08:1c:75:7b:6d:8c:1b:
b9:3f:d2:a6:63:2d:c0:4e:fa:cd:02:4b:d9:1d:9a:
99:46:cf:a5:66:d3:9a:7c:88:75:23:78:21:17:94:
d0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:44:83:02:AA:5C:7D:C4:84:D7:DE:6F:5B:44:5F:1F:32:EA:17:50
X509v3 Authority Key Identifier:
keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/42A1FF168F3811F1BAEE92C8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
105.173.64.0/18
Signature Algorithm: sha256WithRSAEncryption
ca:18:82:4c:60:79:e2:b5:b5:27:ba:a7:6d:7c:e6:f4:1c:dc:
d0:a5:78:71:8c:a4:3c:da:c4:46:d3:ed:6e:81:88:5a:b0:b4:
dc:18:de:f6:ec:9a:5a:81:d7:5a:24:05:4f:c7:74:ef:0c:42:
9c:0f:b6:05:ef:15:70:ce:ec:de:23:ae:e8:d8:2c:55:d3:30:
89:94:b0:ca:e7:ab:34:96:91:63:72:eb:65:c8:63:35:a7:4b:
9e:71:34:6c:25:04:be:cb:a4:7e:16:89:f8:f2:b0:3e:9c:aa:
09:21:c7:9a:e4:2c:c1:e9:19:02:a7:a1:08:ba:8d:07:53:f9:
64:07:0e:a6:66:e0:f0:f9:d2:62:a5:ce:c5:98:a1:28:71:d8:
ed:8a:e9:9a:d9:0a:da:4d:23:e7:df:4c:c0:21:18:0b:f5:3e:
d2:46:8a:58:e8:3f:a4:34:9b:e0:35:d8:3f:ed:18:11:df:0c:
3c:fc:2c:8c:35:9e:18:a6:29:34:6a:a1:a5:e8:f6:8e:3b:a0:
29:84:c5:31:a3:bb:59:29:6e:25:ee:79:13:37:a6:d9:9e:41:
3a:8e:82:0e:0d:38:69:ff:c1:93:fd:72:ff:d7:8f:33:18:3e:
fc:49:76:33:2e:0c:2c:db:5b:66:c8:b5:3e:c3:35:5c:35:55:
29:aa:af:d3
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCigwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RDBGNTBBRjExMC8GA1UEBRMoQUU5OEE1RkRBRDJEQzlGNEZDMUJFNDdGNjY4NTdB
OEM0Nzk4ODEwMjAeFw0yNjA4MDMxMjM4MzlaFw0zMzA3MzAxMjM4MzlaMBgxFjAU
BgNVBAMTDTZhNzA4YmQzLWU0MDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDIZDK4Uu3yR0D7W9Fv1zCD7jvcwp2drK6ACcrAOY/FCXyDFkkwDJabEj0r
QeqeM6G4AmleQ1Yg7EhVZTJTa31ibquMGHGkAhumrmNmxoaUlEQTqhp150DLKrI7
NdzTjMrRV0vfvOnMcVZWN/+nBSBEg8bvNoVh4MBWrS1zOoQZCit36XVgHjW+KfsI
pIp/XYHweXvyaYftmjd8ponES4IlC4P4MW7bFLAruCeiRf7GoTvuVEKRzy3i2LOz
k0AkkQN0v2xhlLjf/jExRHYZ2rHzr7wfvWCtQBG3CBx1e22MG7k/0qZjLcBO+s0C
S9kdmplGz6Vm05p8iHUjeCEXlNApAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUeESD
AqpcfcSE195vW0RfHzLqF1AwHwYDVR0jBBgwFoAUrpil/a0tyfT8G+R/ZoV6jEeY
gQIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkQwRjUwLzVFQUFBNkI4MjU4RjExRUJCNzBCN0MxOUY4QUVBMjI4L3JwaWxf
YTB0eWZUOEctUl9ab1Y2akVlWWdRSS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3JwaWxfYTB0eWZUOEctUl9ab1Y2akVlWWdRSS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkQwRjUwLzVFQUFBNkI4MjU4RjExRUJCNzBCN0MxOUY4
QUVBMjI4LzQyQTFGRjE2OEYzODExRjFCQUVFOTJDOENFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAZprUAwDQYJKoZIhvcNAQEL
BQADggEBAMoYgkxgeeK1tSe6p2185vQc3NCleHGMpDzaxEbT7W6BiFqwtNwY3vbs
mlqB11okBU/HdO8MQpwPtgXvFXDO7N4jrujYLFXTMImUsMrnqzSWkWNy62XIYzWn
S55xNGwlBL7LpH4WifjysD6cqgkhx5rkLMHpGQKnoQi6jQdT+WQHDqZm4PD50mKl
zsWYoShx2O2K6ZrZCtpNI+ffTMAhGAv1PtJGiljoP6Q0m+A12D/tGBHfDDz8LIw1
nhimKTRqoaXo9o47oCmExTGju1kpbiXueRM3ptmeQTqOgg4NOGn/wZP9cv/XjzMY
PvxJdjMuDCzbW2bItT7DNVw1VSmqr9M=
-----END CERTIFICATE-----
Generated at Thu Aug 6 12:27:43 2026 by rpki-client