Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/B2964C228F3411F1BE8F34B4CE1D38B0.roa
File: B2964C228F3411F1BE8F34B4CE1D38B0.roa (raw, json)
Hash identifier: OIjBnDtINMxg27cFnxCIzFl3vDw1mRhtQe23TUJ/pEU=
Subject key identifier: 0B:6E:F7:4C:E5:62:92:44:17:08:30:1D:D1:7C:5E:96:58:91:EC:57
Certificate issuer: /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial: 0A16
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/B2964C228F3411F1BE8F34B4CE1D38B0.roa
Signing time: Mon 03 Aug 2026 12:13:13 +0000
ROA not before: Mon 03 Aug 2026 12:13:08 +0000
ROA not after: Sat 30 Jul 2033 12:13:08 +0000
asID: 37119
IP address blocks: 105.174.32.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.mft
rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2582 (0xa16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D0F50AF, serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Validity
Not Before: Aug 3 12:13:08 2026 GMT
Not After : Jul 30 12:13:08 2033 GMT
Subject: CN=6a7085d8-b88c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c8:3b:62:b7:1d:f4:5b:bb:ee:ad:84:91:af:
f6:d3:16:07:51:3e:4a:3b:c4:ae:92:2e:50:15:2e:
1d:1f:06:d8:8d:78:7e:a8:b4:0f:32:76:35:01:75:
03:ec:c0:b7:c9:a9:6e:44:c1:66:c7:a0:f7:e0:ce:
a3:f9:6d:cd:4b:6f:e4:58:08:e4:54:93:fc:b1:01:
ad:61:32:a0:46:5d:f9:12:1d:2e:df:1f:ac:58:07:
e0:bb:e9:20:bb:fd:a5:9b:b0:d8:66:48:f0:80:13:
04:57:4c:8b:22:0f:ea:6c:ff:30:31:f0:61:89:1c:
17:44:33:f8:6b:4b:53:c0:3e:43:7e:6a:ad:a0:ab:
af:7c:a0:a7:e7:4d:70:c1:4b:dc:81:d3:ae:31:17:
7a:a6:ed:33:7c:27:53:0a:e3:55:40:06:51:87:29:
d5:6f:29:14:76:38:19:94:95:a5:0b:8b:dd:6d:5d:
66:8b:2b:b1:ff:a4:69:e2:36:21:ab:11:b4:f7:35:
9a:22:96:43:9d:e6:3d:93:00:97:15:38:0a:24:7f:
f6:19:4e:ea:29:d8:6a:81:c1:bc:10:f4:1c:08:ee:
13:1f:e1:8d:e8:84:b6:2f:9b:b9:9c:83:07:a3:e7:
a8:b2:b8:77:f8:3e:46:c2:c4:68:4e:4e:08:44:5b:
ee:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:6E:F7:4C:E5:62:92:44:17:08:30:1D:D1:7C:5E:96:58:91:EC:57
X509v3 Authority Key Identifier:
keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/B2964C228F3411F1BE8F34B4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
105.174.32.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:99:9f:32:72:c6:b4:76:b7:fe:5d:69:c9:cb:31:40:9c:e5:
e8:93:2a:d6:a9:05:72:fa:c9:6c:32:34:b1:24:f1:ed:af:f9:
55:a8:6d:ec:b3:ad:e5:38:04:67:10:cf:2f:a4:40:57:86:dc:
c6:03:dc:d3:bc:fb:80:fd:60:f7:ae:e1:13:bd:4c:41:13:26:
ef:bb:52:23:ba:53:bb:28:2b:55:0e:fd:de:4a:6b:a6:eb:07:
0e:6c:46:ae:ed:3f:db:70:17:74:76:43:ed:c9:a0:84:e3:b8:
2a:b6:9e:bf:1d:37:02:54:5c:a3:15:32:05:29:c8:1b:cc:3e:
be:c1:04:55:73:54:bc:7f:29:d2:81:03:eb:6f:18:98:12:67:
a8:47:75:4a:14:7d:ec:6c:31:5b:77:29:20:60:4e:75:66:81:
0d:9c:0d:9f:9b:bb:d9:e4:f2:37:dd:5b:35:4a:1f:1a:38:61:
2c:73:cb:ac:07:64:b7:78:2f:9f:6e:7c:60:d5:5f:66:1a:a7:
ed:ea:75:ef:80:31:e6:f6:12:6a:25:40:9d:78:66:f7:ea:80:
ad:91:b2:ff:44:3a:c0:cc:26:79:af:2f:75:14:79:d0:bc:05:
6a:92:6f:df:f3:e0:1a:c9:f3:16:98:71:30:7f:a3:fa:ea:6f:
a4:ce:67:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:27:44 2026 by rpki-client