Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/A3A2BD8A8F1C11F18A5B43A6CE1D38B0.roa
File: A3A2BD8A8F1C11F18A5B43A6CE1D38B0.roa (raw, json)
Hash identifier: F9wAdZx4Yi+oaXnWwQ01K08IwbnMtcCLCqaZswfWBXM=
Subject key identifier: 89:9D:00:80:48:F3:EA:A6:34:29:81:11:0C:68:AA:00:74:D2:9C:96
Certificate issuer: /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial: 09D6
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/A3A2BD8A8F1C11F18A5B43A6CE1D38B0.roa
Signing time: Mon 03 Aug 2026 09:20:59 +0000
ROA not before: Mon 03 Aug 2026 09:20:56 +0000
ROA not after: Sat 30 Jul 2033 09:20:56 +0000
asID: 37119
IP address blocks: 105.168.0.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.mft
rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2518 (0x9d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D0F50AF, serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Validity
Not Before: Aug 3 09:20:56 2026 GMT
Not After : Jul 30 09:20:56 2033 GMT
Subject: CN=6a705d7b-b611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4b:0f:7a:6d:52:1c:b1:38:4e:ef:44:8d:9a:
9c:83:8f:f0:6d:80:0d:67:7b:0e:78:15:07:07:4b:
2d:a3:74:2c:49:da:fd:3f:b6:84:8b:54:a6:90:77:
ef:c8:e3:e3:5c:6b:4e:39:b9:a6:8f:93:e9:c4:92:
92:4a:90:e7:9f:2d:73:4f:6c:4e:ce:4d:05:c9:52:
28:a2:ef:ee:98:6f:0b:9d:16:56:7d:4a:91:19:c9:
f2:12:a8:66:b9:c2:2a:cb:c9:02:84:38:77:f9:80:
9e:a1:55:64:87:43:19:e7:57:b8:49:94:96:b1:66:
b3:d4:69:43:9c:a7:ae:03:64:e2:92:92:e3:88:d2:
24:55:d7:52:a5:66:19:8a:e3:fa:6b:48:51:1c:ea:
40:4c:63:25:07:fc:d6:5d:95:21:a9:af:7b:90:a3:
30:7f:d5:28:9c:6b:91:08:2f:8d:b1:17:12:63:9d:
a7:da:81:ce:c5:eb:2c:46:95:0e:99:11:3b:ea:1c:
72:79:26:0b:a4:a0:9e:73:ec:ab:bf:56:a0:f3:66:
22:c1:c8:7d:9f:b9:8f:e4:15:20:e0:32:7e:33:d0:
c8:30:20:79:5a:33:d8:df:0a:61:d3:5f:e8:c8:33:
cd:e8:c1:8f:61:79:b1:33:27:5b:ac:d5:6a:82:10:
68:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:9D:00:80:48:F3:EA:A6:34:29:81:11:0C:68:AA:00:74:D2:9C:96
X509v3 Authority Key Identifier:
keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/A3A2BD8A8F1C11F18A5B43A6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
105.168.0.0/19
Signature Algorithm: sha256WithRSAEncryption
40:cb:96:0e:f8:02:46:58:48:f7:da:59:69:d5:ab:b6:39:d1:
f4:0f:64:34:9d:55:ed:0b:7b:45:d0:24:fe:97:5e:9b:60:3f:
29:59:c8:c9:e7:e9:90:c1:fb:27:1d:ea:24:75:04:78:70:e1:
c1:4a:f3:16:69:28:40:92:60:e4:4c:ee:30:ab:02:bc:06:cc:
5f:73:06:a3:18:be:14:68:c8:7b:5d:7b:7e:a8:5d:69:59:13:
dd:8b:99:91:cc:c2:e9:bf:4e:0f:61:97:e2:37:76:ad:b1:66:
ca:5d:fd:82:b9:01:32:e3:34:d6:e1:c0:25:2f:f3:5d:85:b5:
6e:7c:00:e4:9b:e3:d3:02:bf:1f:87:fb:5a:14:cb:82:1d:2f:
23:dc:4a:8c:f3:dc:1c:0a:12:e9:a7:55:ba:54:39:d1:b8:e4:
b4:7c:8a:c3:48:ab:4f:db:34:d0:45:d7:81:39:ea:e5:de:02:
dd:ec:eb:99:eb:a2:2b:bf:59:89:94:0b:44:75:46:5a:b6:72:
72:48:c4:30:d2:49:4a:2a:c3:11:2b:65:1c:a3:e3:63:b7:46:
c9:4c:82:25:fa:65:07:04:84:c9:e1:74:3e:65:48:e0:56:a4:
6b:03:ca:b6:0c:a9:2d:15:78:f8:d6:38:f6:34:7a:62:d9:51:
1b:e3:f0:47
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCdYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RDBGNTBBRjExMC8GA1UEBRMoQUU5OEE1RkRBRDJEQzlGNEZDMUJFNDdGNjY4NTdB
OEM0Nzk4ODEwMjAeFw0yNjA4MDMwOTIwNTZaFw0zMzA3MzAwOTIwNTZaMBgxFjAU
BgNVBAMTDTZhNzA1ZDdiLWI2MTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDISw96bVIcsThO70SNmpyDj/BtgA1new54FQcHSy2jdCxJ2v0/toSLVKaQ
d+/I4+Nca045uaaPk+nEkpJKkOefLXNPbE7OTQXJUiii7+6YbwudFlZ9SpEZyfIS
qGa5wirLyQKEOHf5gJ6hVWSHQxnnV7hJlJaxZrPUaUOcp64DZOKSkuOI0iRV11Kl
ZhmK4/prSFEc6kBMYyUH/NZdlSGpr3uQozB/1Sica5EIL42xFxJjnafagc7F6yxG
lQ6ZETvqHHJ5JgukoJ5z7Ku/VqDzZiLByH2fuY/kFSDgMn4z0MgwIHlaM9jfCmHT
X+jIM83owY9hebEzJ1us1WqCEGhDAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUiZ0A
gEjz6qY0KYERDGiqAHTSnJYwHwYDVR0jBBgwFoAUrpil/a0tyfT8G+R/ZoV6jEeY
gQIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkQwRjUwLzVFQUFBNkI4MjU4RjExRUJCNzBCN0MxOUY4QUVBMjI4L3JwaWxf
YTB0eWZUOEctUl9ab1Y2akVlWWdRSS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3JwaWxfYTB0eWZUOEctUl9ab1Y2akVlWWdRSS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkQwRjUwLzVFQUFBNkI4MjU4RjExRUJCNzBCN0MxOUY4
QUVBMjI4L0EzQTJCRDhBOEYxQzExRjE4QTVCNDNBNkNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAVpqAAwDQYJKoZIhvcNAQEL
BQADggEBAEDLlg74AkZYSPfaWWnVq7Y50fQPZDSdVe0Le0XQJP6XXptgPylZyMnn
6ZDB+ycd6iR1BHhw4cFK8xZpKECSYORM7jCrArwGzF9zBqMYvhRoyHtde36oXWlZ
E92LmZHMwum/Tg9hl+I3dq2xZspd/YK5ATLjNNbhwCUv812FtW58AOSb49MCvx+H
+1oUy4IdLyPcSozz3BwKEumnVbpUOdG45LR8isNIq0/bNNBF14E56uXeAt3s65nr
oiu/WYmUC0R1Rlq2cnJIxDDSSUoqwxErZRyj42O3RslMgiX6ZQcEhMnhdD5lSOBW
pGsDyrYMqS0VePjWOPY0emLZURvj8Ec=
-----END CERTIFICATE-----
Generated at Thu Aug 6 12:27:58 2026 by rpki-client