Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/85FA51BA8F1E11F18A3982B0CE1D38B0.roa
File: 85FA51BA8F1E11F18A3982B0CE1D38B0.roa (raw, json)
Hash identifier: uwyFjasWsfbOIDTdqnFlx57qRZPACRfTeT6hzm/ycDo=
Subject key identifier: 24:1F:7F:AC:BD:8F:8C:15:D1:D3:9D:8A:5F:EF:34:EB:37:73:00:6E
Certificate issuer: /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial: 09DC
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/85FA51BA8F1E11F18A3982B0CE1D38B0.roa
Signing time: Mon 03 Aug 2026 09:34:29 +0000
ROA not before: Mon 03 Aug 2026 09:34:25 +0000
ROA not after: Sat 30 Jul 2033 09:34:25 +0000
asID: 37119
IP address blocks: 105.168.128.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.mft
rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2524 (0x9dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D0F50AF, serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Validity
Not Before: Aug 3 09:34:25 2026 GMT
Not After : Jul 30 09:34:25 2033 GMT
Subject: CN=6a7060a5-3f0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:6b:b3:25:26:c1:4c:a6:21:58:50:d6:c0:be:
34:63:6b:26:b1:7c:ef:24:98:e0:ad:81:12:ca:5d:
c0:59:a1:d1:dc:7b:ec:df:44:13:3b:cc:d3:6c:b2:
86:29:da:bf:ff:6a:79:8c:34:1b:5b:34:6c:de:b8:
01:82:65:22:b6:17:05:4b:84:10:b4:37:04:5c:80:
c7:e1:06:56:83:e6:12:76:66:aa:a9:29:0d:c9:d3:
56:42:b4:95:a6:22:62:04:ba:49:c7:d8:ed:01:42:
58:80:92:72:19:4f:38:f8:61:e4:bc:7c:17:38:65:
d5:db:c9:59:69:69:21:8b:c3:d5:f2:d5:d5:ab:8d:
22:8a:be:35:85:dd:63:66:b0:3d:d2:d2:cb:57:0a:
81:63:6a:ed:d0:6c:bf:6d:4f:00:1e:4c:01:7f:4b:
c6:a8:99:ca:bd:3e:f6:2f:34:5b:d1:a1:8b:fb:17:
89:ff:4f:ce:bf:d7:4a:4e:53:a2:cb:05:56:0d:23:
ac:ab:f0:01:1f:8a:57:6c:96:51:d5:9a:cb:8c:31:
ee:ac:cc:90:04:21:b8:47:83:63:32:73:68:40:d1:
f2:f9:5f:75:d2:5c:a4:81:fd:14:68:8a:02:72:8b:
9d:6b:f3:89:42:b0:12:70:4c:d5:4b:23:7e:0b:b9:
3a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:1F:7F:AC:BD:8F:8C:15:D1:D3:9D:8A:5F:EF:34:EB:37:73:00:6E
X509v3 Authority Key Identifier:
keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/85FA51BA8F1E11F18A3982B0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
105.168.128.0/19
Signature Algorithm: sha256WithRSAEncryption
a4:8d:1e:46:bc:36:20:4c:99:60:6d:10:8d:c7:33:3d:e9:2d:
59:89:76:f9:e6:38:e0:49:a5:70:9a:d8:5b:05:91:06:1a:db:
c6:c5:1a:61:60:3a:c1:20:f6:83:48:b4:ee:ff:fd:e9:2b:30:
ea:a8:d0:f2:82:a3:d2:20:3d:ce:5b:e8:2b:dd:9c:5e:6c:3d:
7a:3b:53:ae:b9:9c:13:76:31:9d:72:61:6f:41:08:5f:7f:c7:
ba:79:6c:79:d4:1b:6b:a9:23:89:5d:0c:c2:b7:23:bf:58:98:
93:1b:eb:fa:8d:a0:52:8c:1c:7c:0a:dc:ed:44:01:2c:40:d1:
be:47:3e:88:68:f9:82:f4:67:30:f6:e0:a6:e7:eb:69:c7:5e:
c0:f0:5a:7b:96:7d:31:cd:bb:a1:b1:a0:f2:65:ff:c7:dc:79:
a2:72:db:5f:92:c4:f5:f7:a9:bf:ee:18:1c:77:55:0c:a8:0b:
8e:77:04:2b:78:c0:24:95:b9:28:a7:b4:51:36:31:45:99:37:
23:7f:b3:86:67:1c:93:51:8d:0c:3c:87:1d:ed:f5:39:0a:eb:
43:0b:90:eb:c3:4a:5d:9e:d7:00:6f:eb:3f:7b:ce:b1:d0:14:
49:4f:cf:5b:1e:00:8e:e8:f7:6e:e6:e3:f6:97:e6:f3:02:fd:
a4:29:de:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:27:44 2026 by rpki-client