Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/45CE84C68F3711F1B0726EC4CE1D38B0.roa
File: 45CE84C68F3711F1B0726EC4CE1D38B0.roa (raw, json)
Hash identifier: KHOZXYCewuejQEaCF3rl0S29VrS7ivF7yMqrkybvb8o=
Subject key identifier: AB:20:FC:B0:53:CB:17:9D:87:E1:CA:6C:FA:7C:23:62:04:CF:57:2F
Certificate issuer: /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial: 0A24
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/45CE84C68F3711F1B0726EC4CE1D38B0.roa
Signing time: Mon 03 Aug 2026 12:31:38 +0000
ROA not before: Mon 03 Aug 2026 12:31:34 +0000
ROA not after: Sat 30 Jul 2033 12:31:34 +0000
asID: 37119
IP address blocks: 105.173.192.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.mft
rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2596 (0xa24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D0F50AF, serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Validity
Not Before: Aug 3 12:31:34 2026 GMT
Not After : Jul 30 12:31:34 2033 GMT
Subject: CN=6a708a2a-b285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f7:7a:80:fd:2e:a1:9f:8b:d2:b0:96:2f:10:
a9:92:9d:e8:e3:f4:20:d9:ab:6f:8b:46:34:d2:53:
40:47:45:dc:90:4f:77:50:99:53:c8:55:50:15:b9:
76:44:62:a2:24:b1:e5:53:bb:d4:02:de:ca:3a:99:
e1:d9:68:38:2e:16:9b:67:48:3c:a2:85:0f:96:47:
c5:c5:7b:6c:50:35:f3:d8:15:73:91:d1:34:23:c0:
ab:11:08:c9:9f:58:9e:9b:75:ce:ac:00:c7:84:5e:
98:b9:b6:18:11:ff:d0:89:01:f6:f4:50:33:89:33:
4a:10:e4:3e:40:26:46:8e:18:65:d8:d4:89:0a:d7:
86:07:ee:a3:fb:4d:4c:34:4a:5a:6b:e8:5e:d5:26:
74:d3:fd:a9:e8:78:40:19:43:bc:20:d9:bf:6e:c9:
7e:14:23:a7:26:e7:e1:da:8d:42:d9:dd:67:e5:eb:
cf:d9:24:a4:9a:4c:aa:22:ff:13:76:d6:f8:8f:5a:
a7:18:9b:3b:88:d9:ce:6c:8b:ae:03:fd:43:58:1a:
fc:1d:8f:17:07:67:06:f9:ae:9c:8a:c2:a1:aa:58:
27:a9:72:63:f1:f3:35:f8:ba:47:f4:9c:0f:25:f1:
6d:b6:88:c6:0c:21:8b:7a:43:df:86:fd:d9:91:65:
1b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:20:FC:B0:53:CB:17:9D:87:E1:CA:6C:FA:7C:23:62:04:CF:57:2F
X509v3 Authority Key Identifier:
keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/45CE84C68F3711F1B0726EC4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
105.173.192.0/18
Signature Algorithm: sha256WithRSAEncryption
2b:cf:85:91:11:6b:cc:df:99:a6:7b:65:1e:f4:55:af:13:5a:
29:a3:90:64:bc:2a:d7:19:e0:38:8c:f7:73:42:dc:81:ef:53:
fe:ae:9a:e5:53:8b:a7:ab:e0:46:98:3c:cb:16:89:c5:d5:14:
de:28:15:46:14:af:bb:6e:96:a5:ac:77:2d:36:a2:8d:4d:f6:
3a:49:81:d4:0d:57:2d:ac:91:73:70:12:2b:cf:20:f5:4b:3a:
a3:7f:82:58:57:46:92:71:42:24:6d:d8:3c:04:6d:cd:18:e5:
b9:e1:a6:e5:49:70:9a:8f:33:75:f8:4c:72:77:75:d4:79:17:
6b:54:43:36:b1:3d:51:b3:09:15:e0:80:23:5c:7c:91:c7:f1:
60:33:8d:81:28:eb:8b:d4:2e:5e:22:ec:8c:bd:a0:d5:b8:da:
ed:8b:2e:22:03:9c:4c:f1:76:48:7e:a9:95:0d:5a:68:23:58:
96:56:90:0f:8a:c4:e3:85:2b:24:38:1b:11:1a:0c:50:37:4a:
39:15:39:cf:f1:c4:7e:b5:6d:12:91:7c:72:ef:c3:75:da:d0:
35:c3:c8:2c:9c:51:d5:00:70:c7:bd:89:56:57:ed:b3:df:42:
cf:8f:e0:b4:d2:d2:e5:75:14:f4:2c:aa:dd:64:fa:41:60:ee:
a2:93:fe:b5
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCiQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RDBGNTBBRjExMC8GA1UEBRMoQUU5OEE1RkRBRDJEQzlGNEZDMUJFNDdGNjY4NTdB
OEM0Nzk4ODEwMjAeFw0yNjA4MDMxMjMxMzRaFw0zMzA3MzAxMjMxMzRaMBgxFjAU
BgNVBAMTDTZhNzA4YTJhLWIyODUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDW93qA/S6hn4vSsJYvEKmSnejj9CDZq2+LRjTSU0BHRdyQT3dQmVPIVVAV
uXZEYqIkseVTu9QC3so6meHZaDguFptnSDyihQ+WR8XFe2xQNfPYFXOR0TQjwKsR
CMmfWJ6bdc6sAMeEXpi5thgR/9CJAfb0UDOJM0oQ5D5AJkaOGGXY1IkK14YH7qP7
TUw0Slpr6F7VJnTT/anoeEAZQ7wg2b9uyX4UI6cm5+HajULZ3Wfl68/ZJKSaTKoi
/xN21viPWqcYmzuI2c5si64D/UNYGvwdjxcHZwb5rpyKwqGqWCepcmPx8zX4ukf0
nA8l8W22iMYMIYt6Q9+G/dmRZRtfAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUqyD8
sFPLF52H4cps+nwjYgTPVy8wHwYDVR0jBBgwFoAUrpil/a0tyfT8G+R/ZoV6jEeY
gQIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkQwRjUwLzVFQUFBNkI4MjU4RjExRUJCNzBCN0MxOUY4QUVBMjI4L3JwaWxf
YTB0eWZUOEctUl9ab1Y2akVlWWdRSS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3JwaWxfYTB0eWZUOEctUl9ab1Y2akVlWWdRSS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkQwRjUwLzVFQUFBNkI4MjU4RjExRUJCNzBCN0MxOUY4
QUVBMjI4LzQ1Q0U4NEM2OEYzNzExRjFCMDcyNkVDNENFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAZprcAwDQYJKoZIhvcNAQEL
BQADggEBACvPhZERa8zfmaZ7ZR70Va8TWimjkGS8KtcZ4DiM93NC3IHvU/6umuVT
i6er4EaYPMsWicXVFN4oFUYUr7tulqWsdy02oo1N9jpJgdQNVy2skXNwEivPIPVL
OqN/glhXRpJxQiRt2DwEbc0Y5bnhpuVJcJqPM3X4THJ3ddR5F2tUQzaxPVGzCRXg
gCNcfJHH8WAzjYEo64vULl4i7Iy9oNW42u2LLiIDnEzxdkh+qZUNWmgjWJZWkA+K
xOOFKyQ4GxEaDFA3SjkVOc/xxH61bRKRfHLvw3Xa0DXDyCycUdUAcMe9iVZX7bPf
Qs+P4LTS0uV1FPQsqt1k+kFg7qKT/rU=
-----END CERTIFICATE-----
Generated at Thu Aug 6 12:27:32 2026 by rpki-client