Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/8EC722848F2611F1B23636E0CE1D38B0.roa
File: 8EC722848F2611F1B23636E0CE1D38B0.roa (raw, json)
Hash identifier: rHK+Y6M32E/bjXsz9hxXjsraE+b2QOjL9z4pv34Oy8k=
Subject key identifier: AF:2A:20:1E:C7:8C:21:9A:03:90:7F:39:D1:06:00:DE:DC:51:F5:5F
Certificate issuer: /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial: 09EA
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/8EC722848F2611F1B23636E0CE1D38B0.roa
Signing time: Mon 03 Aug 2026 10:31:59 +0000
ROA not before: Mon 03 Aug 2026 10:31:55 +0000
ROA not after: Sat 30 Jul 2033 10:31:55 +0000
asID: 37119
IP address blocks: 105.169.64.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.mft
rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2538 (0x9ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D0F50AF, serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Validity
Not Before: Aug 3 10:31:55 2026 GMT
Not After : Jul 30 10:31:55 2033 GMT
Subject: CN=6a706e1f-41e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:05:9d:e3:a6:c5:3d:51:eb:97:b0:c6:67:9f:
66:19:32:7d:c4:bf:57:09:61:24:0d:fd:f4:36:11:
30:49:3b:62:03:e9:de:78:b4:46:3d:2a:ed:b9:ab:
7a:fe:37:15:83:f6:38:5c:90:89:84:20:89:16:16:
dd:38:bc:61:ea:23:5f:f3:a5:93:61:5a:8f:5a:72:
ee:ae:50:8a:ca:e7:61:0a:f0:31:e0:93:c0:a8:55:
b2:ed:0f:3f:7d:69:bd:1b:43:5f:65:21:e6:7f:dc:
65:4d:b4:3c:b6:dd:b1:8d:88:3f:2c:10:ce:c8:53:
0f:6c:fc:cf:4f:1d:50:99:f4:c3:9e:2d:f1:47:bb:
cc:55:61:37:03:e7:94:53:04:60:dd:d9:20:12:42:
6d:5d:27:49:ca:b2:54:d8:11:62:27:47:94:f0:35:
03:72:db:ef:b1:59:bd:8c:90:7e:2e:b2:27:ee:93:
eb:d9:bf:c1:ea:41:59:6f:75:21:6a:84:a3:db:c8:
f7:ad:29:cc:02:a8:c4:a8:c4:52:ed:5c:25:53:2a:
a5:bb:cf:be:2b:04:3c:1f:61:e2:62:fe:1e:c4:51:
4a:8e:39:ba:e3:be:ae:a9:d2:b8:1b:04:2c:75:0e:
37:b8:bd:d1:c0:8e:8f:c6:17:2d:f7:74:8f:ab:1c:
1d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:2A:20:1E:C7:8C:21:9A:03:90:7F:39:D1:06:00:DE:DC:51:F5:5F
X509v3 Authority Key Identifier:
keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/8EC722848F2611F1B23636E0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
105.169.64.0/19
Signature Algorithm: sha256WithRSAEncryption
3b:60:a0:72:59:89:17:0e:82:f4:c4:38:94:95:40:a0:a3:8a:
5c:75:e6:db:82:63:98:14:cd:b9:16:df:ec:1f:65:b5:ab:87:
f4:e3:85:7d:ba:ec:8d:b0:ae:05:7c:55:6f:84:b0:35:86:ec:
e4:01:c9:aa:35:ec:8d:d7:9d:2c:fd:13:86:47:46:f8:d1:d4:
42:60:99:df:be:8f:4f:ac:a9:34:0e:3f:77:4b:f8:a1:f9:c6:
b4:3a:e7:c1:46:53:96:19:ff:82:41:4a:19:69:90:64:d5:9b:
51:72:61:6b:7c:29:ec:02:74:c4:ea:d7:67:b7:b9:bc:8a:70:
6c:e3:a8:59:b7:a2:f1:c1:d5:2f:c0:61:fe:61:80:49:9b:14:
59:5a:90:70:80:44:5c:b8:08:a9:c8:9b:5e:88:ab:27:4a:da:
fa:28:42:74:6d:31:1e:02:6e:ef:40:1c:4a:c2:c6:77:13:61:
42:72:5d:66:4c:47:ce:a0:5e:5b:c8:51:37:61:03:8b:70:1b:
06:92:bf:96:a9:ed:3e:d4:a9:8f:86:1d:ee:ba:b8:74:1a:94:
4c:6f:8f:85:d8:f6:bc:d5:36:7a:51:32:20:3d:07:92:70:e7:
b3:ba:9a:7c:cc:17:b8:74:a1:7e:b0:0a:3e:5a:75:84:ff:14:
e5:b8:c3:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:27:38 2026 by rpki-client