Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/B6DDB2C68F2411F19A79E9D5CE1D38B0.roa
File: B6DDB2C68F2411F19A79E9D5CE1D38B0.roa (raw, json)
Hash identifier: ffhxfaGAp4eKx8J+QF+87YrE5GxEUZtfdtBedMuML7A=
Subject key identifier: DB:A5:43:9F:54:A0:F3:ED:8A:11:35:72:E1:D6:34:D5:CB:22:EF:1D
Certificate issuer: /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial: 09E4
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/B6DDB2C68F2411F19A79E9D5CE1D38B0.roa
Signing time: Mon 03 Aug 2026 10:18:48 +0000
ROA not before: Mon 03 Aug 2026 10:18:44 +0000
ROA not after: Sat 30 Jul 2033 10:18:44 +0000
asID: 37119
IP address blocks: 105.168.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.mft
rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2532 (0x9e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D0F50AF, serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Validity
Not Before: Aug 3 10:18:44 2026 GMT
Not After : Jul 30 10:18:44 2033 GMT
Subject: CN=6a706b08-93ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:34:f2:07:ca:57:54:9e:23:0f:48:4d:4f:61:
b6:c3:d6:65:7d:ed:72:05:22:f1:b8:79:ae:ae:dd:
bd:ce:b4:82:e2:62:c0:b8:39:1b:c2:af:21:7d:5c:
f2:9b:29:fc:01:8f:49:46:66:d6:8e:28:a9:5f:91:
ca:87:7d:0d:8c:3f:89:dd:82:fc:dc:46:e4:24:0e:
56:26:a5:d3:6a:33:ff:d4:a7:a4:64:7f:0f:af:e5:
66:67:e0:62:11:4e:ed:78:03:16:89:3c:11:bf:be:
92:5d:8d:90:74:36:9d:9b:cf:7a:f2:9b:cc:c5:e6:
d2:bb:3b:25:a3:2a:79:de:6e:0b:2b:b5:dd:94:f9:
b7:9e:44:fe:22:1d:94:cf:d3:0f:cb:e0:ad:1a:26:
ec:f2:20:a0:f7:61:97:76:3e:a5:bf:66:cb:e0:9a:
1e:58:a4:90:bd:04:3f:df:04:88:52:fc:c8:83:68:
ae:40:55:9e:ca:aa:c7:74:a5:26:3f:11:a8:7c:3e:
50:23:59:8f:c0:00:0d:33:80:3d:db:35:81:e7:47:
66:df:ec:0c:b2:aa:97:88:2e:ff:c7:7f:de:fe:60:
ad:45:74:9f:4f:28:93:39:a0:28:19:df:e2:14:2f:
e8:24:65:39:2d:1e:b5:04:2b:1e:30:ae:9c:cd:4a:
2d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:A5:43:9F:54:A0:F3:ED:8A:11:35:72:E1:D6:34:D5:CB:22:EF:1D
X509v3 Authority Key Identifier:
keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/B6DDB2C68F2411F19A79E9D5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
105.168.0.0/16
Signature Algorithm: sha256WithRSAEncryption
64:1f:c3:69:6b:cb:de:bd:7f:87:7e:4a:16:0f:2f:03:0c:f9:
76:d3:6d:86:25:fd:81:10:c1:e7:3a:b1:68:f4:c9:c1:53:21:
9d:41:7a:00:02:91:6e:a4:df:8c:2e:b7:d1:9a:7d:3b:c6:e9:
df:6c:fb:51:76:e0:07:67:5c:93:50:1c:22:00:42:7d:3a:a2:
7b:fb:6e:3b:bd:8e:8e:b8:da:10:8a:79:45:59:c1:96:84:69:
8d:48:6b:43:f0:a0:ab:35:83:2c:c7:cb:88:c1:61:1b:70:f8:
ae:19:4e:61:31:d6:ea:ba:e6:57:74:9b:7b:ad:f5:01:04:76:
84:eb:f5:64:34:35:41:37:7e:5b:89:06:19:fd:7f:d1:c7:3a:
cf:65:02:d3:70:f9:95:ba:15:ba:a2:49:f9:fa:21:41:2f:83:
97:92:d9:af:f1:13:a9:40:c1:23:cd:dc:01:6f:41:5a:b6:74:
0f:7c:ba:6d:64:58:6b:d9:e0:93:aa:f2:27:c2:d4:cf:5c:3e:
74:05:fe:71:70:33:79:71:f2:d9:42:42:b8:fb:9f:01:7f:f6:
f7:2a:7e:5d:c7:c7:d4:58:a7:a5:9d:07:96:00:50:bb:a2:48:
39:52:83:e2:7d:a7:f0:e2:64:61:7d:65:0e:86:27:47:94:b7:
7f:69:21:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:27:44 2026 by rpki-client