Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/EDBF337A8F1D11F1810C84AECE1D38B0.roa
File: EDBF337A8F1D11F1810C84AECE1D38B0.roa (raw, json)
Hash identifier: jrydjQH3OAlsC1MifTUJXL5B01+t3p+aKS7oslMq02w=
Subject key identifier: D7:92:03:DB:A1:7E:C9:83:04:8D:0A:19:5D:E2:8E:32:F2:3B:C5:FF
Certificate issuer: /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial: 09DA
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/EDBF337A8F1D11F1810C84AECE1D38B0.roa
Signing time: Mon 03 Aug 2026 09:30:13 +0000
ROA not before: Mon 03 Aug 2026 09:30:09 +0000
ROA not after: Sat 30 Jul 2033 09:30:09 +0000
asID: 37119
IP address blocks: 105.168.96.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.mft
rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2522 (0x9da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D0F50AF, serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Validity
Not Before: Aug 3 09:30:09 2026 GMT
Not After : Jul 30 09:30:09 2033 GMT
Subject: CN=6a705fa5-7b1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e4:cd:11:54:93:b2:c1:ca:11:7b:59:d1:6f:
ff:21:1b:b4:50:4d:3e:6e:72:24:cc:e0:98:27:4f:
0b:8b:31:4d:13:9d:15:d1:42:b1:82:74:47:d6:7d:
85:01:c9:21:e7:49:9c:be:99:f7:b1:64:23:b1:a2:
0e:ca:a7:a8:bf:18:50:f7:d4:9f:7e:a0:56:c4:d2:
83:8e:bd:7c:25:4d:be:89:80:b6:3c:cf:30:fd:2a:
9e:0f:2e:db:fb:87:11:6c:a0:d3:a1:db:bc:dd:ee:
49:ee:9f:86:ac:0c:ea:02:da:32:3e:97:1b:97:9f:
3b:c6:66:7c:35:cc:35:de:6a:02:43:d0:37:98:90:
b4:c0:64:cb:bf:f3:87:da:92:9b:40:0d:ca:ef:d1:
83:4a:2b:35:f2:8b:3f:21:8d:9e:52:76:d4:34:ba:
29:dc:10:e1:88:c7:85:38:27:b7:fe:6e:86:68:83:
a4:48:3f:58:7e:ba:5c:18:9f:a4:85:ee:58:43:9c:
1b:8e:ca:fb:b7:ef:43:ee:8d:21:58:e0:49:b6:f5:
fc:60:11:57:50:f5:f2:d3:b9:ab:e4:7d:99:3e:78:
ac:c3:8f:fb:f6:de:10:c7:b5:a2:91:46:4d:2d:18:
1c:c6:6e:1a:48:1f:1b:11:4a:89:8e:61:69:5c:87:
03:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:92:03:DB:A1:7E:C9:83:04:8D:0A:19:5D:E2:8E:32:F2:3B:C5:FF
X509v3 Authority Key Identifier:
keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/EDBF337A8F1D11F1810C84AECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
105.168.96.0/19
Signature Algorithm: sha256WithRSAEncryption
d0:07:55:98:a2:1e:47:43:f1:a5:0c:f6:c5:8b:9d:96:24:57:
e6:97:9e:76:d4:04:ad:4a:08:64:21:e2:37:13:d7:fa:19:46:
80:bf:ad:6f:8f:15:47:e8:59:e4:95:a2:1c:c9:a8:5c:ac:85:
16:32:9e:cf:3a:51:e3:c9:f4:8c:e9:60:e9:90:e3:f2:43:19:
68:37:87:b8:c2:49:b2:80:f4:43:9c:fb:59:0f:43:4a:02:e0:
4a:d4:d6:47:2b:de:29:82:3e:08:a6:76:32:d4:3f:4b:d3:7b:
c5:7b:c5:8c:58:33:41:2a:e3:cb:2f:22:46:33:07:54:a6:dc:
f6:23:58:75:0e:ec:6e:c6:94:c2:82:a6:d3:87:d7:9b:1d:e2:
67:93:a9:3d:aa:92:ad:f6:26:29:cf:cd:84:68:27:02:30:8c:
92:dc:c4:75:64:e3:c5:ba:bb:57:6d:06:b6:53:66:9e:55:f9:
84:d5:64:8a:02:91:b8:6c:a9:18:50:34:14:d6:ee:2e:b0:95:
b5:3a:95:82:a1:19:76:e1:bf:1f:5d:d4:44:4c:da:35:d1:31:
bd:f6:92:45:10:cf:82:5d:fa:bd:ad:04:c4:60:ea:4c:d3:dd:
5a:57:dd:69:55:be:de:f2:f7:b9:79:cc:ab:db:31:95:0c:25:
5d:67:2e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:27:44 2026 by rpki-client