Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/8EF871868F3011F1B84FF418CF1D38B0.roa
File: 8EF871868F3011F1B84FF418CF1D38B0.roa (raw, json)
Hash identifier: RA/qQBY5DMKEX+uKJXMbmSp4ZF8LCc985i9PeiqR6Ec=
Subject key identifier: A0:ED:E4:A0:91:14:E6:DE:80:AC:70:2F:D5:45:8F:83:87:67:B4:5F
Certificate issuer: /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial: 0A04
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/8EF871868F3011F1B84FF418CF1D38B0.roa
Signing time: Mon 03 Aug 2026 11:43:35 +0000
ROA not before: Mon 03 Aug 2026 11:43:31 +0000
ROA not after: Sat 30 Jul 2033 11:43:31 +0000
asID: 37119
IP address blocks: 105.172.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.mft
rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2564 (0xa04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D0F50AF, serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Validity
Not Before: Aug 3 11:43:31 2026 GMT
Not After : Jul 30 11:43:31 2033 GMT
Subject: CN=6a707ee7-f727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c8:34:1a:9f:2a:dc:bc:3d:a6:08:a8:fa:38:
eb:e5:ab:3a:15:88:2f:dd:ac:09:5f:9a:30:bf:bb:
a0:be:33:4a:a7:97:5e:aa:23:59:d0:f3:9f:b8:49:
a7:5b:c6:43:44:4e:53:10:de:4e:3a:d1:51:13:60:
ce:4f:f4:d9:d5:25:a6:89:60:fc:e4:e0:fb:70:35:
d6:a2:fd:93:ba:e1:e7:24:f0:4a:bf:42:41:b2:a0:
ec:48:9c:e2:f1:e1:6d:fb:93:3d:ae:71:54:ab:ac:
fc:4a:0a:f6:c1:57:e3:dd:9e:75:98:fe:e9:38:74:
de:2c:13:09:9b:80:93:f8:ce:1b:f4:50:d2:e9:a7:
6d:b5:95:cc:d9:26:9a:da:72:af:9c:ce:bd:d3:c6:
14:16:74:a0:bc:ed:0d:ff:ff:5e:bb:bf:a9:db:6f:
6f:bb:a3:41:f0:df:d9:c9:7e:e1:15:a8:df:02:36:
42:94:df:e6:8e:78:22:0c:22:91:ab:12:6a:f7:f6:
f8:c5:19:9c:02:0e:18:c9:64:43:5d:0f:7d:70:8b:
c6:c1:14:1e:42:bc:e9:93:cd:f5:30:91:0b:4a:f4:
f9:e7:b2:0c:8d:54:f2:8a:47:d3:e4:3c:32:69:fc:
a6:d2:68:70:cb:c5:23:b6:ae:de:91:0f:21:81:8c:
49:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:ED:E4:A0:91:14:E6:DE:80:AC:70:2F:D5:45:8F:83:87:67:B4:5F
X509v3 Authority Key Identifier:
keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/8EF871868F3011F1B84FF418CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
105.172.0.0/16
Signature Algorithm: sha256WithRSAEncryption
02:13:4f:c2:85:8d:24:0c:d6:b2:82:4f:0f:d7:50:e4:92:f9:
0d:30:5a:4b:2d:a9:b7:e4:8d:d5:04:1d:2b:60:f1:87:24:93:
d8:ce:9e:13:f6:7a:7f:67:75:6f:cf:d5:46:60:82:07:10:d5:
50:8e:cc:cd:22:2c:b3:53:7f:58:40:2f:6d:8b:72:1c:d6:78:
6b:29:fa:5a:50:b6:4a:be:4d:06:d0:80:d2:72:b2:49:37:11:
eb:46:59:86:c7:3f:81:42:a9:1e:a2:b6:d3:25:f2:b1:06:2d:
f0:92:97:df:8a:e4:37:28:fe:1b:a3:2f:07:e7:ba:01:58:e6:
58:9f:2c:89:ed:60:db:0a:48:20:fa:4e:1b:3c:ff:09:55:99:
e3:0b:5a:64:ab:32:95:61:b7:51:f0:36:d3:75:a7:e8:25:d1:
88:30:ee:4c:35:86:68:a6:28:12:a7:ae:50:6f:a5:65:b3:f3:
a0:33:3d:cf:a3:ca:ef:83:2b:62:6c:c1:14:2d:02:61:85:43:
0f:4a:5f:e6:0d:bc:2b:bb:c4:67:ff:9d:57:4c:ff:bf:02:b0:
1e:72:b2:82:7a:ec:c9:a3:7e:a1:0e:14:a4:88:d1:c3:d3:3c:
1b:4b:3a:b6:6b:8b:a0:96:e7:e2:5c:61:fb:39:2e:de:a6:58:
b7:e4:57:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:28:00 2026 by rpki-client