Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/5ACEA91C8F2F11F185837014CF1D38B0.roa
File: 5ACEA91C8F2F11F185837014CF1D38B0.roa (raw, json)
Hash identifier: r5K0QQtoQ9rdoPqeqIkOm6ki8bD0A0BxJ9dX69hLeVw=
Subject key identifier: 0C:8A:BD:F5:3C:39:43:10:D3:CA:07:21:66:62:A0:EA:6F:D4:E1:24
Certificate issuer: /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial: 0A00
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/5ACEA91C8F2F11F185837014CF1D38B0.roa
Signing time: Mon 03 Aug 2026 11:34:58 +0000
ROA not before: Mon 03 Aug 2026 11:34:54 +0000
ROA not after: Sat 30 Jul 2033 11:34:54 +0000
asID: 37119
IP address blocks: 105.168.0.0/14 maxlen: 14
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.mft
rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2560 (0xa00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D0F50AF, serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Validity
Not Before: Aug 3 11:34:54 2026 GMT
Not After : Jul 30 11:34:54 2033 GMT
Subject: CN=6a707ce2-4adb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7f:1e:a8:0a:bc:36:47:a8:d2:8c:25:3b:e5:
ca:7a:af:20:d2:d3:ec:a7:f1:86:8b:d6:6c:67:d8:
a3:b0:7a:0c:9f:84:ce:3d:be:4b:0d:aa:e1:bc:28:
95:ff:65:bc:64:66:a2:94:5b:3a:bd:62:6f:5e:42:
70:9b:8c:08:91:07:35:b9:16:d3:1c:c6:49:62:db:
7b:e7:43:29:15:24:17:59:7a:c1:ce:a8:ea:ef:c2:
e1:c7:8e:a1:aa:82:31:b3:cd:f5:8e:6e:22:ba:b1:
4f:c3:a2:a2:d5:6c:ae:32:e0:9b:d2:fa:27:91:0d:
c0:99:47:29:24:9a:b6:8c:4e:14:c2:bf:3f:83:cf:
dc:83:4f:90:a1:e5:d4:02:0a:f3:c4:92:db:7a:56:
3d:83:a2:ea:b7:d5:d0:84:f0:cd:81:1f:3d:f8:a9:
87:cd:57:57:fa:37:47:0d:44:4e:c6:81:0d:51:44:
44:36:4c:a3:93:c6:46:0a:d3:16:ee:5e:90:0c:d5:
fb:c4:87:aa:5a:c3:29:b7:85:f3:a0:57:c3:ba:6a:
9f:a7:3a:d6:39:ea:98:f3:4c:96:65:20:79:c9:52:
9a:a5:15:6b:bf:92:ec:2f:b1:d9:52:3a:96:b9:96:
e8:d0:f1:4a:3c:a3:27:f2:72:b7:d8:dd:d8:f5:20:
5f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:8A:BD:F5:3C:39:43:10:D3:CA:07:21:66:62:A0:EA:6F:D4:E1:24
X509v3 Authority Key Identifier:
keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/5ACEA91C8F2F11F185837014CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
105.168.0.0/14
Signature Algorithm: sha256WithRSAEncryption
43:85:72:15:af:34:3a:44:12:f3:e3:86:9f:d4:6b:7c:0c:bb:
e3:26:62:c6:fd:13:c8:65:ff:fe:32:a3:1d:55:12:00:80:98:
96:dd:94:8a:fc:20:9c:0d:7a:87:b7:fa:25:94:82:ab:b5:56:
69:cc:61:2e:c8:84:20:71:e2:a2:19:b6:e6:95:12:61:06:28:
8a:77:2d:2a:d5:fd:37:ec:fa:37:c5:ee:1b:89:28:58:b3:c3:
77:99:d7:a7:50:ba:07:7a:1d:fc:d3:2c:c8:51:a8:4b:f7:58:
7c:71:a2:cc:3a:68:08:dc:9a:3a:9d:1f:db:48:55:06:a7:28:
54:11:c1:97:17:c8:c0:81:3c:05:e2:e7:9c:70:24:b3:ac:ed:
0e:d8:8c:52:14:92:b7:49:f8:76:95:b9:98:09:e5:47:b4:a5:
de:ad:5a:50:8f:92:de:06:12:61:ce:2b:a1:b5:03:0e:2b:aa:
76:2e:f2:42:8d:d4:f5:2b:ee:d9:92:36:9d:e8:66:46:12:fb:
a2:df:49:2e:6d:0b:2b:05:16:2e:88:6c:1d:0d:1f:d2:c4:9a:
04:e6:05:0c:11:0d:c0:ef:e4:7b:bb:33:36:52:b1:75:00:58:
2b:3e:27:35:cb:26:65:05:a4:5a:06:7e:9a:e1:aa:64:76:61:
03:0e:59:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:27:36 2026 by rpki-client