Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/CA33CCAA8F3511F1AF0744BCCE1D38B0.roa
File: CA33CCAA8F3511F1AF0744BCCE1D38B0.roa (raw, json)
Hash identifier: Pf8pSEvPzbp3mCZrhY4nmiOnucfIEd3zlq6ral1PDgM=
Subject key identifier: 72:11:92:F6:ED:0D:60:46:9D:56:2D:E2:D9:68:2D:5B:63:F1:46:2F
Certificate issuer: /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial: 0A1C
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/CA33CCAA8F3511F1AF0744BCCE1D38B0.roa
Signing time: Mon 03 Aug 2026 12:21:02 +0000
ROA not before: Mon 03 Aug 2026 12:20:58 +0000
ROA not after: Sat 30 Jul 2033 12:20:58 +0000
asID: 37119
IP address blocks: 105.175.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.mft
rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2588 (0xa1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D0F50AF, serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Validity
Not Before: Aug 3 12:20:58 2026 GMT
Not After : Jul 30 12:20:58 2033 GMT
Subject: CN=6a7087ae-78d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:1d:65:b6:7a:7c:61:6b:1a:f5:a6:c7:70:55:
68:b3:08:4f:77:a2:16:2f:23:32:b8:41:f6:32:44:
7c:f8:9f:ce:0e:fe:2a:a2:99:e7:64:0d:83:b8:0a:
92:a6:65:22:ab:87:09:05:10:6c:0b:8b:b8:87:d2:
d4:01:99:f7:2c:60:9c:14:f9:65:b8:4a:78:d1:95:
58:00:f8:00:95:5b:7f:78:23:d1:84:87:e2:b5:9d:
42:93:ac:ab:f3:12:3e:22:a9:c6:5d:ae:55:90:0b:
6f:17:f5:76:1c:a4:34:d9:cd:8f:16:58:65:4b:7b:
c8:9b:2c:49:65:77:d2:3d:7e:15:e9:82:c7:89:32:
a5:5f:83:ee:ad:49:24:ce:b3:a6:ed:d2:0d:60:5e:
fb:5c:d9:2d:b3:0f:a8:9b:ca:15:17:a2:ac:7a:e5:
67:fb:5a:91:50:58:42:a5:d2:70:2b:b6:13:b4:50:
fb:6d:7a:61:33:ac:63:6f:17:62:4e:1c:35:a1:62:
08:45:44:74:e9:06:67:9d:6c:d1:eb:a8:f2:7c:a7:
61:3f:ec:67:af:c3:cc:e8:05:a9:e6:7f:41:b4:e7:
87:73:8f:c6:cc:cb:32:c5:ad:2f:d8:13:6b:4a:5d:
4e:37:5f:80:eb:f3:f1:51:12:27:6f:0c:2c:f2:dd:
f3:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:11:92:F6:ED:0D:60:46:9D:56:2D:E2:D9:68:2D:5B:63:F1:46:2F
X509v3 Authority Key Identifier:
keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/CA33CCAA8F3511F1AF0744BCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
105.175.128.0/17
Signature Algorithm: sha256WithRSAEncryption
a6:d0:e0:9a:0b:d5:ab:99:a6:c3:ea:ff:fb:f2:4f:85:27:35:
0f:3f:c9:95:26:20:e1:b6:bc:16:59:75:8a:8b:60:f3:a4:54:
8d:1a:06:eb:b3:06:16:50:06:58:89:f2:e6:1c:be:e7:f4:d0:
a2:1b:84:2e:dc:8c:08:28:30:a8:45:4e:34:44:1d:31:da:9d:
a9:b1:bf:29:b0:d6:0a:1e:a5:2a:71:9c:cb:b9:dc:b3:d2:96:
dd:4e:da:52:88:f1:39:b2:d8:9c:41:69:e5:a3:7e:8a:b1:23:
ad:2a:27:c3:c4:b8:6d:28:73:77:33:5e:03:8b:51:a6:be:fc:
2b:69:d2:41:8e:27:dd:43:7b:07:cd:64:c5:fb:f7:b4:60:1f:
98:be:d4:93:73:56:dd:f2:fa:57:04:02:7e:4c:77:21:1d:10:
5b:a3:3f:d0:50:2f:eb:d0:7d:c6:a0:96:5b:41:87:4a:41:45:
10:93:e0:f2:db:3b:14:85:f4:3a:0b:3b:2d:a0:2c:64:67:61:
77:af:06:09:88:e7:c6:4f:64:bf:a3:b7:70:7e:d3:c7:73:4d:
48:23:da:b7:8d:49:1d:bf:4b:b1:00:e1:68:30:86:91:0a:53:
82:e7:cf:1f:81:59:b5:71:0b:6c:b4:bd:be:49:a5:e0:03:e2:
49:cd:fb:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:27:46 2026 by rpki-client