Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/E54C35308F3611F1A94737C2CE1D38B0.roa
File: E54C35308F3611F1A94737C2CE1D38B0.roa (raw, json)
Hash identifier: 0HMfiy1WK7PMI0ushAYnbzyZ4o+ZJJEgKq4OiB7ydoY=
Subject key identifier: 4B:7A:66:7B:AE:95:D5:78:BF:38:A5:18:D4:D6:29:10:3C:47:A2:C0
Certificate issuer: /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial: 0A22
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/E54C35308F3611F1A94737C2CE1D38B0.roa
Signing time: Mon 03 Aug 2026 12:28:57 +0000
ROA not before: Mon 03 Aug 2026 12:28:52 +0000
ROA not after: Sat 30 Jul 2033 12:28:52 +0000
asID: 37119
IP address blocks: 105.169.64.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.mft
rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2594 (0xa22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D0F50AF, serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Validity
Not Before: Aug 3 12:28:52 2026 GMT
Not After : Jul 30 12:28:52 2033 GMT
Subject: CN=6a708988-da18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:40:aa:41:71:e3:b9:a8:d6:8a:79:55:a4:44:
f0:e4:b1:26:e8:8a:ef:40:1a:54:6a:c8:93:04:e9:
06:8f:08:b0:63:84:65:cc:e3:b2:1e:c5:24:ec:9c:
a3:1f:4e:7e:7d:51:b7:15:cb:fd:e0:b0:db:4b:83:
b3:fc:3f:38:6f:6d:37:4a:4f:16:89:47:77:2b:ad:
6f:f8:c4:51:a1:d6:1a:3a:49:7e:f6:f5:2f:1c:a8:
d0:a1:4b:3c:94:ad:66:7a:fb:49:e3:be:f6:b2:53:
53:2f:ea:46:61:21:d8:99:50:6f:e5:23:9b:7d:a7:
78:2a:71:be:d9:39:4f:f2:7f:9a:ae:44:eb:0a:72:
63:c4:43:08:1a:87:a9:9a:da:02:4d:df:6e:e2:3d:
90:97:e4:73:3d:78:09:0a:a8:cf:0e:7e:cf:19:7c:
fc:2e:8d:3e:cb:ca:51:dc:d9:a1:79:55:9f:9d:c4:
0d:89:5a:f1:1b:fa:7d:8e:3e:5d:e8:48:cb:8a:c7:
fd:81:d4:82:fe:52:a3:3f:8e:6f:2d:2e:44:4e:77:
f4:04:bc:ab:7c:2a:09:c9:ac:be:0f:18:63:47:08:
1a:63:96:07:fc:64:49:bb:ee:0d:8b:7b:4f:61:b1:
fb:e1:a9:84:15:1b:1a:a0:76:1d:fb:1b:66:ff:85:
28:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:7A:66:7B:AE:95:D5:78:BF:38:A5:18:D4:D6:29:10:3C:47:A2:C0
X509v3 Authority Key Identifier:
keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/E54C35308F3611F1A94737C2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
105.169.64.0/18
Signature Algorithm: sha256WithRSAEncryption
00:18:8f:78:29:7a:54:fe:fd:de:d5:ac:59:56:d1:45:58:9e:
0f:96:dd:b8:cd:60:d4:82:10:d1:49:81:2f:e8:e2:97:d4:e6:
ca:c4:58:02:35:4e:24:a6:ec:ed:a5:a8:51:6b:bf:a1:de:5a:
0e:31:2e:bb:69:9f:61:4b:a3:4e:0c:b6:cd:b7:41:32:2e:1f:
35:f2:7b:05:73:25:27:90:1d:0d:e6:5e:08:44:ab:b7:1d:2f:
a8:1e:de:e1:91:f4:70:6c:fa:40:ca:77:8f:2c:fa:94:74:ef:
cb:71:f4:12:00:a1:fd:e5:1f:af:29:ea:25:dc:15:94:65:d0:
b9:42:b6:1b:59:b8:35:74:fb:bc:ed:4b:0f:4f:b8:5e:63:51:
14:85:fa:7a:06:72:55:15:29:cb:5a:3a:8d:c4:07:8b:be:86:
64:e1:07:9f:92:f4:20:1f:e7:59:74:56:c0:b0:81:2a:ff:04:
f0:6d:7f:4e:df:bc:10:61:cf:83:86:56:db:17:16:6d:6a:fb:
dc:81:40:2d:db:35:35:0c:81:05:16:b6:f4:dd:b1:40:6f:b3:
7a:0a:fa:3f:6f:9d:24:9e:b6:8c:f4:95:02:7a:cd:15:54:99:
a5:c9:fb:d0:a0:93:db:ea:df:71:56:b5:1f:fe:c4:ba:3f:19:
09:13:ab:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:27:38 2026 by rpki-client