Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/DCB40AB28F3911F1A71D8ED4CE1D38B0.roa
File: DCB40AB28F3911F1A71D8ED4CE1D38B0.roa (raw, json)
Hash identifier: T03PLEuGY/uEI9dAK+/r9FNidGvVEJ8tuqIEU0hRYEI=
Subject key identifier: DE:CE:E6:F0:81:77:8C:0B:20:14:84:4D:6A:42:43:E8:B1:22:23:3B
Certificate issuer: /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial: 0A2E
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/DCB40AB28F3911F1A71D8ED4CE1D38B0.roa
Signing time: Mon 03 Aug 2026 12:50:11 +0000
ROA not before: Mon 03 Aug 2026 12:50:07 +0000
ROA not after: Sat 30 Jul 2033 12:50:07 +0000
asID: 37119
IP address blocks: 105.174.12.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.mft
rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2606 (0xa2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D0F50AF, serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Validity
Not Before: Aug 3 12:50:07 2026 GMT
Not After : Jul 30 12:50:07 2033 GMT
Subject: CN=6a708e83-210a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e4:e4:e5:8c:70:29:bd:ab:4b:05:ce:83:b5:
f1:18:c1:bc:b1:41:04:95:1a:c0:30:ff:ee:76:7f:
d1:68:64:cb:14:e7:8f:7b:20:d7:bd:06:05:46:13:
30:47:33:4f:de:d4:71:ca:dd:90:19:ec:2f:4f:d9:
36:f9:d2:11:e4:e2:7b:55:65:53:8c:12:48:d5:20:
dd:d9:3b:d4:e8:63:2f:61:0c:dc:4e:7e:c5:71:dd:
d7:4c:2b:69:d5:9d:62:94:bc:75:1d:c9:23:f6:0b:
d2:58:12:20:23:54:65:09:09:57:ad:71:25:dd:84:
fd:89:4b:0b:75:aa:4e:65:ea:9e:8f:40:d6:ac:0f:
da:3e:f9:ee:4d:f5:7c:96:c0:53:2c:c0:82:6d:7a:
78:65:cf:c2:3f:07:e9:4f:f2:df:0d:4e:b9:cb:a4:
95:68:29:f4:b7:5d:21:5c:ca:8b:aa:3a:d1:73:02:
51:d5:59:34:26:17:07:1c:ae:88:1e:88:42:ac:50:
89:48:92:2d:8c:ef:ea:2e:57:fa:ec:a9:9f:a9:06:
17:06:99:ac:a1:20:99:d8:54:5c:81:6a:5c:ab:0c:
dc:ca:9a:69:ff:94:56:77:5f:b1:6f:3c:58:8e:15:
5d:c2:e8:66:ec:91:90:5f:31:58:1d:c4:94:69:1c:
93:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:CE:E6:F0:81:77:8C:0B:20:14:84:4D:6A:42:43:E8:B1:22:23:3B
X509v3 Authority Key Identifier:
keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/DCB40AB28F3911F1A71D8ED4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
105.174.12.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:25:91:bd:f2:0b:8c:4f:3a:cf:ad:fe:1a:9f:e5:81:83:e8:
64:8f:9f:60:d4:25:8e:b8:07:9d:c9:b9:63:eb:32:d6:8a:6c:
eb:ed:da:d6:68:2e:22:4e:46:3a:29:19:6c:6e:34:d8:b5:8b:
09:69:76:50:de:95:29:fc:c6:c4:98:07:ea:45:35:1f:71:6c:
7f:3c:98:fc:4c:ab:f0:81:bb:63:5f:64:ca:2d:95:a3:39:ae:
64:37:71:8c:f6:3a:b4:47:6d:27:50:a1:85:f2:03:61:64:1e:
51:61:85:30:ae:89:4c:10:62:99:49:62:a6:c3:8d:1e:41:0d:
d7:83:3e:c7:4e:74:9a:a0:b4:04:04:15:d6:9c:36:ca:e9:1b:
69:0d:5e:b3:5b:99:c5:48:6c:f8:6e:c1:f3:02:04:2b:14:c6:
f5:b7:11:9a:7a:a1:8e:8d:07:6a:0d:8a:ba:a8:0c:53:cb:f8:
cb:60:9d:ff:db:f5:c5:cb:3b:e2:ef:7d:78:4a:5c:76:38:ac:
bd:a6:34:d8:df:be:44:6a:28:2f:bc:05:d1:2d:e4:74:d4:6c:
db:da:03:24:88:9a:0a:ce:50:b5:63:b5:4b:90:a1:52:29:2c:
25:6d:74:a7:a3:85:66:85:a6:47:b1:19:62:0a:57:4f:b6:59:
91:cc:f6:6a
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCi4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RDBGNTBBRjExMC8GA1UEBRMoQUU5OEE1RkRBRDJEQzlGNEZDMUJFNDdGNjY4NTdB
OEM0Nzk4ODEwMjAeFw0yNjA4MDMxMjUwMDdaFw0zMzA3MzAxMjUwMDdaMBgxFjAU
BgNVBAMTDTZhNzA4ZTgzLTIxMGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC45OTljHApvatLBc6DtfEYwbyxQQSVGsAw/+52f9FoZMsU5497INe9BgVG
EzBHM0/e1HHK3ZAZ7C9P2Tb50hHk4ntVZVOMEkjVIN3ZO9ToYy9hDNxOfsVx3ddM
K2nVnWKUvHUdySP2C9JYEiAjVGUJCVetcSXdhP2JSwt1qk5l6p6PQNasD9o++e5N
9XyWwFMswIJtenhlz8I/B+lP8t8NTrnLpJVoKfS3XSFcyouqOtFzAlHVWTQmFwcc
rogeiEKsUIlIki2M7+ouV/rsqZ+pBhcGmayhIJnYVFyBalyrDNzKmmn/lFZ3X7Fv
PFiOFV3C6GbskZBfMVgdxJRpHJM/AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU3s7m
8IF3jAsgFIRNakJD6LEiIzswHwYDVR0jBBgwFoAUrpil/a0tyfT8G+R/ZoV6jEeY
gQIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkQwRjUwLzVFQUFBNkI4MjU4RjExRUJCNzBCN0MxOUY4QUVBMjI4L3JwaWxf
YTB0eWZUOEctUl9ab1Y2akVlWWdRSS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3JwaWxfYTB0eWZUOEctUl9ab1Y2akVlWWdRSS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkQwRjUwLzVFQUFBNkI4MjU4RjExRUJCNzBCN0MxOUY4
QUVBMjI4L0RDQjQwQUIyOEYzOTExRjFBNzFEOEVENENFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJprgwwDQYJKoZIhvcNAQEL
BQADggEBAH8lkb3yC4xPOs+t/hqf5YGD6GSPn2DUJY64B53JuWPrMtaKbOvt2tZo
LiJORjopGWxuNNi1iwlpdlDelSn8xsSYB+pFNR9xbH88mPxMq/CBu2NfZMotlaM5
rmQ3cYz2OrRHbSdQoYXyA2FkHlFhhTCuiUwQYplJYqbDjR5BDdeDPsdOdJqgtAQE
FdacNsrpG2kNXrNbmcVIbPhuwfMCBCsUxvW3EZp6oY6NB2oNirqoDFPL+Mtgnf/b
9cXLO+LvfXhKXHY4rL2mNNjfvkRqKC+8BdEt5HTUbNvaAySImgrOULVjtUuQoVIp
LCVtdKejhWaFpkexGWIKV0+2WZHM9mo=
-----END CERTIFICATE-----
Generated at Thu Aug 6 12:27:31 2026 by rpki-client