Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/7066F2EE8F2E11F18795C20CCF1D38B0.roa
File: 7066F2EE8F2E11F18795C20CCF1D38B0.roa (raw, json)
Hash identifier: d8uwk7IhIh18DQxEKEwU9x6RXiNO01k7W8HwS3kfP3k=
Subject key identifier: 77:23:47:7D:97:70:7C:B6:87:46:F1:58:AD:02:7B:1C:EF:B4:41:9D
Certificate issuer: /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial: 09FC
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/7066F2EE8F2E11F18795C20CCF1D38B0.roa
Signing time: Mon 03 Aug 2026 11:28:24 +0000
ROA not before: Mon 03 Aug 2026 11:28:21 +0000
ROA not after: Sat 30 Jul 2033 11:28:21 +0000
asID: 37119
IP address blocks: 41.78.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.mft
rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2556 (0x9fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D0F50AF, serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Validity
Not Before: Aug 3 11:28:21 2026 GMT
Not After : Jul 30 11:28:21 2033 GMT
Subject: CN=6a707b58-6ada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c3:66:1a:f3:ba:79:bf:39:29:96:cf:3c:74:
5d:b9:20:14:3b:fd:2f:2e:92:32:5c:33:4d:47:c5:
33:4f:92:ca:17:64:24:08:2f:9b:84:8c:0a:41:de:
d1:c3:10:72:05:d1:c2:fd:a0:0d:df:6f:94:6c:f0:
c4:a3:3d:96:a2:3a:75:b1:81:cf:24:44:13:bc:96:
fd:2f:38:2d:49:d4:30:72:b9:3a:18:77:c4:00:e3:
e8:72:94:2d:4a:7e:b9:7a:f8:8f:a0:38:af:4a:86:
15:7e:07:94:99:76:88:59:b6:4f:33:3a:bb:fa:44:
3d:d9:8e:6b:ed:51:1f:0c:7c:eb:b8:02:36:5d:55:
2d:11:89:81:c1:2a:e4:b5:a4:c3:5d:37:d8:20:73:
91:a4:20:3f:70:37:ec:1a:ac:44:aa:49:14:00:d4:
94:7d:c6:c1:68:37:f5:b3:18:72:72:87:08:60:9b:
4e:ac:3c:1e:ea:b7:4c:e5:33:d6:5f:b6:3a:02:26:
5b:c2:e1:7d:78:f2:a8:8d:8a:58:2d:4b:02:32:b7:
f4:f9:b9:59:79:4e:db:ca:37:16:03:6f:dd:c6:f4:
0f:46:7c:4d:b1:1c:21:4b:37:5c:38:ff:f7:5e:0c:
2f:91:ca:bd:98:f8:b8:d9:46:2d:ba:04:69:c7:67:
65:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:23:47:7D:97:70:7C:B6:87:46:F1:58:AD:02:7B:1C:EF:B4:41:9D
X509v3 Authority Key Identifier:
keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/7066F2EE8F2E11F18795C20CCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.78.18.0/24
Signature Algorithm: sha256WithRSAEncryption
68:6f:d6:db:c9:bd:7b:c6:d1:6c:6d:06:b5:7d:37:58:0a:75:
3d:e4:33:08:ea:f9:95:0f:5a:3d:14:a3:76:54:2b:20:b7:32:
aa:f7:3a:3d:58:eb:fd:bd:4d:ec:1a:c5:de:38:4e:1e:52:56:
a3:51:5e:4b:d4:ca:c5:55:98:ec:8d:58:38:c8:78:74:ba:e8:
45:55:09:13:92:50:77:af:df:77:92:c2:a8:d1:1b:c0:3f:6b:
53:e0:63:7f:7d:8a:db:45:a0:7f:7b:b4:52:60:96:b5:ed:4b:
e6:33:6c:af:db:f8:32:2c:26:ba:95:a8:0b:14:72:03:0a:20:
3c:45:88:dd:a5:f3:45:27:be:91:28:0b:44:30:20:05:29:f1:
4a:d3:86:af:29:03:bb:77:32:54:f0:7e:3e:df:26:17:01:3a:
9f:f7:b4:94:82:7b:ff:5a:c3:92:0f:69:41:d6:0e:3b:b4:7c:
71:5e:dd:47:8c:c6:44:40:03:ab:0c:a1:2c:50:61:f0:6a:19:
84:4d:f2:bc:bc:c2:16:bf:a4:17:e6:3f:b1:d2:fc:ca:31:57:
89:58:1e:31:47:a3:3c:3d:d2:88:97:df:ef:f6:90:54:b8:66:
c7:74:26:ca:a7:5c:71:ab:6e:05:b8:97:05:ef:4b:97:92:db:
7c:7d:81:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:27:34 2026 by rpki-client