Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/71F08C428F2911F18A4775F0CE1D38B0.roa
File: 71F08C428F2911F18A4775F0CE1D38B0.roa (raw, json)
Hash identifier: qTwOCAARQlVBYksRhCjgmNX8/xK3SVTtCs0e1CJCwXg=
Subject key identifier: 25:96:D0:2C:0B:A2:6A:8D:7A:F5:77:B6:31:77:0F:75:3E:3F:1B:7B
Certificate issuer: /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial: 09F6
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/71F08C428F2911F18A4775F0CE1D38B0.roa
Signing time: Mon 03 Aug 2026 10:52:40 +0000
ROA not before: Mon 03 Aug 2026 10:52:35 +0000
ROA not after: Sat 30 Jul 2033 10:52:35 +0000
asID: 37119
IP address blocks: 105.169.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.mft
rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2550 (0x9f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D0F50AF, serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Validity
Not Before: Aug 3 10:52:35 2026 GMT
Not After : Jul 30 10:52:35 2033 GMT
Subject: CN=6a7072f7-db07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a7:24:79:2e:f3:0c:1b:25:63:18:4f:ae:79:
d9:5d:e5:2d:95:8f:b1:b9:4e:ac:5a:08:8e:13:5b:
d5:ff:a3:a0:92:bd:21:49:e9:69:7f:87:a9:cd:5b:
74:50:b7:dd:8f:8b:ae:1a:a6:63:b7:e8:f8:97:42:
3e:ff:1d:69:b2:b9:55:e9:57:83:11:fa:a5:8a:48:
88:32:2c:88:77:7f:cd:d5:9c:b6:ca:dc:c5:6d:99:
a3:4d:55:49:08:cc:1e:b4:99:77:38:5a:cf:af:c1:
d5:a0:df:81:01:01:6b:c2:43:b4:5b:06:9d:74:01:
da:c2:c4:86:70:d9:84:e5:20:f7:19:b6:10:8d:22:
ab:06:01:ea:e3:60:3e:f5:70:9a:2f:a4:9c:4b:20:
4c:a5:f9:da:7a:04:34:e9:4b:2a:b3:f4:34:75:40:
d4:9f:66:a7:99:25:2b:d5:0f:ba:ab:7c:5e:9a:15:
34:8a:c7:81:91:df:3f:b6:75:cd:45:86:ca:f6:0a:
4f:21:3c:90:e7:71:9b:fd:34:38:49:68:3c:90:a5:
af:22:02:8d:26:4b:a1:48:1e:b4:7c:4c:dc:53:b1:
1c:59:1e:bb:03:7d:fb:61:04:97:3c:9b:3b:c9:2c:
90:d9:d6:f1:80:8b:cc:e1:f9:1c:e6:64:d3:0a:a3:
af:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:96:D0:2C:0B:A2:6A:8D:7A:F5:77:B6:31:77:0F:75:3E:3F:1B:7B
X509v3 Authority Key Identifier:
keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/71F08C428F2911F18A4775F0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
105.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c2:85:9d:32:19:00:e3:93:c3:f7:cf:96:a8:a5:0b:f7:86:16:
23:2b:20:7b:89:96:49:95:9e:fc:95:aa:a3:ff:b0:c1:db:c2:
c1:60:45:09:be:58:2e:d1:05:a4:e9:32:35:03:22:f0:a5:f7:
8d:4c:be:dc:59:89:2b:e8:15:f7:0d:58:17:b5:f4:58:f5:46:
b6:3f:1d:91:3c:a7:a5:1c:16:b2:5b:40:6d:73:e3:12:18:72:
6c:a0:2a:0c:49:10:61:57:3f:3e:f1:16:49:b8:cc:dc:a9:65:
63:52:53:fe:05:61:e6:78:44:4d:0e:a3:31:c0:9d:f8:33:7f:
16:7b:a8:47:8e:ce:ce:b3:3e:ce:db:59:1d:30:63:31:fa:49:
c0:d6:5c:ed:31:00:71:6f:03:d5:f6:fe:1f:58:27:42:cd:c2:
1c:ab:bb:12:dd:73:6a:30:b6:1f:dc:71:12:4c:20:9a:66:98:
b6:57:54:b9:ba:fd:fa:0f:d7:2d:65:82:f3:9b:09:63:a7:3f:
d6:ea:66:7c:8d:00:f8:8c:db:41:a7:06:a8:7c:c0:57:9c:ca:
3e:2a:7c:dc:57:db:25:2a:0e:d2:33:77:81:2e:55:66:16:7b:
7e:7f:8b:f4:09:ef:df:05:68:2a:6a:25:76:fa:3a:4a:43:81:
de:6b:b5:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:27:46 2026 by rpki-client