Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/668453B88F3611F19FC04CC0CE1D38B0.roa
File: 668453B88F3611F19FC04CC0CE1D38B0.roa (raw, json)
Hash identifier: jDe6JYT8MiBh+q6CLLUJHlXhM/+X1HEXLEAlgYtmKbk=
Subject key identifier: 0E:A1:1E:AD:0A:E0:79:BC:8C:B1:F3:C6:C6:67:99:64:E7:72:89:E9
Certificate issuer: /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial: 0A20
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/668453B88F3611F19FC04CC0CE1D38B0.roa
Signing time: Mon 03 Aug 2026 12:25:24 +0000
ROA not before: Mon 03 Aug 2026 12:25:20 +0000
ROA not after: Sat 30 Jul 2033 12:25:20 +0000
asID: 37119
IP address blocks: 105.169.192.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.mft
rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2592 (0xa20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D0F50AF, serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Validity
Not Before: Aug 3 12:25:20 2026 GMT
Not After : Jul 30 12:25:20 2033 GMT
Subject: CN=6a7088b4-175e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:b6:b7:e8:3f:c3:52:43:e4:c1:d8:f4:69:f6:
ed:85:96:26:b6:5a:9e:c2:a9:08:85:55:72:75:97:
a5:ae:64:2d:83:65:97:ce:91:b0:b1:6f:85:53:81:
63:ee:51:19:f3:f2:65:2a:01:fd:2b:dc:ed:dd:b1:
cc:ad:ad:1a:a0:39:84:2e:32:22:b9:94:4c:75:b8:
0e:8a:d8:ac:37:56:31:bc:e3:ad:28:da:d3:13:0f:
1a:e3:b3:c2:67:a8:b5:3a:ca:46:20:c6:ab:6f:34:
23:bf:3c:9f:2e:63:67:74:6c:67:18:13:9e:08:87:
e2:31:8e:57:38:df:0b:b0:4d:43:cd:5a:c9:b0:71:
1e:f4:cd:fb:9c:63:c9:7a:13:ed:d6:25:11:4d:8f:
ae:e1:a6:0c:5a:40:c4:43:6c:e5:f0:99:96:a7:28:
9e:fd:3d:c8:92:4f:42:a0:82:48:98:88:c8:eb:ec:
ab:f4:3e:bd:97:92:93:23:45:73:fc:83:4c:07:19:
10:49:41:7b:9f:44:60:ae:2d:9f:ec:9f:c8:04:b5:
0d:04:40:fa:b6:fb:6e:97:9a:39:b4:9d:ce:88:ae:
2e:c5:e2:06:02:99:90:ff:f9:a0:6f:c0:e0:2c:80:
a2:86:3c:a5:7c:fb:d1:59:dc:0b:66:a5:cf:e7:4b:
35:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:A1:1E:AD:0A:E0:79:BC:8C:B1:F3:C6:C6:67:99:64:E7:72:89:E9
X509v3 Authority Key Identifier:
keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/668453B88F3611F19FC04CC0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
105.169.192.0/18
Signature Algorithm: sha256WithRSAEncryption
9c:04:91:08:52:4a:d8:19:d3:20:6e:9d:18:53:a1:cc:12:86:
08:78:44:84:67:68:38:2f:51:24:4b:b8:af:bf:eb:23:93:66:
ff:87:60:8a:24:fa:41:1d:e4:25:f7:f3:3e:ce:b6:a7:73:26:
5c:e4:83:e8:3f:15:7f:02:9d:be:ee:5f:68:75:49:07:1b:23:
d9:e7:e4:78:c3:6b:3d:45:a9:dd:9e:83:18:af:58:f8:dc:e8:
28:ce:08:60:14:75:ca:38:4f:30:7c:97:9e:3d:54:3f:71:cd:
df:f6:fd:91:cb:3a:d0:e2:35:8e:33:63:68:c2:c8:75:c7:0d:
81:41:bc:a0:c8:3d:03:a1:29:75:98:c0:e7:d8:eb:5c:23:60:
e2:64:96:e4:09:08:fc:2a:24:85:1b:70:c4:94:20:ff:65:6d:
a3:a0:d8:3c:77:78:5d:58:b5:76:73:a9:31:14:0f:b9:19:42:
b5:28:42:47:35:04:52:67:c2:3c:4e:72:d2:a7:9b:05:0f:08:
dc:84:30:90:96:29:83:72:c0:cc:5f:7a:e5:7b:17:4b:9f:07:
04:72:e1:05:0f:0f:1a:3a:75:95:aa:d0:5a:8a:cf:95:e8:31:
b9:6e:88:ae:64:dc:68:fa:e5:ca:e6:96:6f:35:67:0e:10:c4:
69:b0:7d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:27:44 2026 by rpki-client