Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/5A99F2A08F3211F19483B8A6CE1D38B0.roa
File: 5A99F2A08F3211F19483B8A6CE1D38B0.roa (raw, json)
Hash identifier: TfBdCKNKTxO8tHifqvv4EywF9A+cLROu6WoaUZERWTo=
Subject key identifier: 31:1B:ED:5C:CE:E1:C8:77:CE:16:8B:EE:A2:53:21:3B:5B:73:71:63
Certificate issuer: /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial: 0A0C
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/5A99F2A08F3211F19483B8A6CE1D38B0.roa
Signing time: Mon 03 Aug 2026 11:56:26 +0000
ROA not before: Mon 03 Aug 2026 11:56:22 +0000
ROA not after: Sat 30 Jul 2033 11:56:22 +0000
asID: 37119
IP address blocks: 105.172.96.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.mft
rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2572 (0xa0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D0F50AF, serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Validity
Not Before: Aug 3 11:56:22 2026 GMT
Not After : Jul 30 11:56:22 2033 GMT
Subject: CN=6a7081ea-cb2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1f:df:99:35:ef:a2:34:7f:af:e2:e9:78:77:
6c:c4:99:2a:62:00:62:35:d5:c9:eb:10:d1:be:fc:
03:9f:e4:bd:c0:62:d5:ca:4b:0f:78:b2:02:2f:53:
1a:0c:d6:45:10:4f:cb:72:d2:4e:ed:02:04:0e:7f:
96:18:81:a7:b3:04:34:93:2d:0c:d5:4e:df:2b:cb:
8c:7c:07:78:97:fd:bf:95:85:ea:16:9a:56:ca:09:
de:d4:64:af:0c:fd:ac:8a:c0:5a:27:ff:5c:e7:d6:
31:83:79:7e:ca:df:6a:a6:fc:0f:0f:b5:29:bc:bd:
b1:42:10:77:1b:eb:c5:35:f1:3a:56:a6:f9:47:75:
08:06:ba:f0:7c:18:e0:89:85:c3:61:23:90:22:9a:
a0:4e:02:1f:3b:fa:b2:27:7c:2b:24:cb:b7:f1:2a:
d3:df:fc:10:70:6b:e3:1a:0e:a8:c9:0b:55:18:2d:
12:dc:34:b9:cf:33:6a:04:1b:b1:12:e3:36:7f:fd:
8d:66:50:59:ec:c1:14:34:be:9c:58:ee:eb:59:1e:
b2:96:38:0b:b5:7d:33:73:40:cc:d9:5d:90:b9:86:
fe:73:7c:82:ec:ab:20:44:7e:9c:a6:fe:19:72:3b:
65:d5:7f:4a:de:27:03:1e:56:c1:48:d8:1b:fd:ab:
73:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:1B:ED:5C:CE:E1:C8:77:CE:16:8B:EE:A2:53:21:3B:5B:73:71:63
X509v3 Authority Key Identifier:
keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/5A99F2A08F3211F19483B8A6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
105.172.96.0/19
Signature Algorithm: sha256WithRSAEncryption
21:2f:4e:3e:4e:a7:e4:b9:27:1d:49:de:7e:31:84:e8:cb:9e:
8c:c0:41:38:ce:f8:ba:ee:72:a8:d2:f8:48:d9:38:1f:3a:51:
dc:43:17:4a:09:70:6b:a2:32:1c:d4:11:49:f7:2f:3d:a7:56:
de:b3:68:1e:e0:ac:09:fd:7a:6e:2d:d6:48:5a:77:c4:d4:77:
dd:d1:3c:b4:e1:03:eb:6c:43:91:b5:41:17:d9:44:2d:27:f0:
a1:98:71:77:a5:c3:e6:cc:ef:fc:09:17:09:de:36:3d:7f:12:
fa:cf:e7:8a:8f:d1:d7:7d:74:40:11:7b:58:9b:db:83:8a:02:
db:85:08:3e:58:ca:ad:86:61:b6:69:7a:f2:c5:9d:fe:fe:4c:
56:e6:b6:19:cb:b0:f6:64:21:7c:47:31:1d:19:5d:08:8c:5f:
c1:f4:04:e3:cf:f2:de:8d:a4:88:3d:2d:80:dd:70:32:a6:94:
f5:11:6a:9f:24:9d:94:c7:62:c2:04:30:8d:41:08:12:96:80:
4c:d8:96:fc:1a:c3:3e:d4:d7:72:06:6f:9c:c1:7b:14:aa:f4:
f5:4b:a0:2f:9c:f1:50:51:29:0a:10:92:51:cd:46:60:e1:c7:
0f:15:ca:65:79:53:5e:8e:c3:24:9c:83:10:aa:50:32:d5:ce:
d3:36:68:08
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCgwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RDBGNTBBRjExMC8GA1UEBRMoQUU5OEE1RkRBRDJEQzlGNEZDMUJFNDdGNjY4NTdB
OEM0Nzk4ODEwMjAeFw0yNjA4MDMxMTU2MjJaFw0zMzA3MzAxMTU2MjJaMBgxFjAU
BgNVBAMTDTZhNzA4MWVhLWNiMmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDIH9+ZNe+iNH+v4ul4d2zEmSpiAGI11cnrENG+/AOf5L3AYtXKSw94sgIv
UxoM1kUQT8ty0k7tAgQOf5YYgaezBDSTLQzVTt8ry4x8B3iX/b+VheoWmlbKCd7U
ZK8M/ayKwFon/1zn1jGDeX7K32qm/A8PtSm8vbFCEHcb68U18TpWpvlHdQgGuvB8
GOCJhcNhI5AimqBOAh87+rInfCsky7fxKtPf/BBwa+MaDqjJC1UYLRLcNLnPM2oE
G7ES4zZ//Y1mUFnswRQ0vpxY7utZHrKWOAu1fTNzQMzZXZC5hv5zfILsqyBEfpym
/hlyO2XVf0reJwMeVsFI2Bv9q3OrAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUMRvt
XM7hyHfOFovuolMhO1tzcWMwHwYDVR0jBBgwFoAUrpil/a0tyfT8G+R/ZoV6jEeY
gQIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkQwRjUwLzVFQUFBNkI4MjU4RjExRUJCNzBCN0MxOUY4QUVBMjI4L3JwaWxf
YTB0eWZUOEctUl9ab1Y2akVlWWdRSS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3JwaWxfYTB0eWZUOEctUl9ab1Y2akVlWWdRSS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkQwRjUwLzVFQUFBNkI4MjU4RjExRUJCNzBCN0MxOUY4
QUVBMjI4LzVBOTlGMkEwOEYzMjExRjE5NDgzQjhBNkNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAVprGAwDQYJKoZIhvcNAQEL
BQADggEBACEvTj5Op+S5Jx1J3n4xhOjLnozAQTjO+LrucqjS+EjZOB86UdxDF0oJ
cGuiMhzUEUn3Lz2nVt6zaB7grAn9em4t1khad8TUd93RPLThA+tsQ5G1QRfZRC0n
8KGYcXelw+bM7/wJFwneNj1/EvrP54qP0dd9dEARe1ib24OKAtuFCD5Yyq2GYbZp
evLFnf7+TFbmthnLsPZkIXxHMR0ZXQiMX8H0BOPP8t6NpIg9LYDdcDKmlPURap8k
nZTHYsIEMI1BCBKWgEzYlvwawz7U13IGb5zBexSq9PVLoC+c8VBRKQoQklHNRmDh
xw8VymV5U16OwyScgxCqUDLVztM2aAg=
-----END CERTIFICATE-----
Generated at Thu Aug 6 12:27:39 2026 by rpki-client