Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/F2FAE6288F3011F1A5ADEA1CCF1D38B0.roa
File: F2FAE6288F3011F1A5ADEA1CCF1D38B0.roa (raw, json)
Hash identifier: KRQxOU+wI7UxZGzs5uieK7gfCjPGu7k+kZCNlEZGw7c=
Subject key identifier: DD:67:BC:29:7D:32:7B:B6:10:CE:ED:39:9E:A6:4D:3C:D7:02:5F:09
Certificate issuer: /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial: 0A06
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/F2FAE6288F3011F1A5ADEA1CCF1D38B0.roa
Signing time: Mon 03 Aug 2026 11:46:23 +0000
ROA not before: Mon 03 Aug 2026 11:46:19 +0000
ROA not after: Sat 30 Jul 2033 11:46:19 +0000
asID: 37119
IP address blocks: 105.172.0.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.mft
rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2566 (0xa06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D0F50AF, serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Validity
Not Before: Aug 3 11:46:19 2026 GMT
Not After : Jul 30 11:46:19 2033 GMT
Subject: CN=6a707f8e-618c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:63:a1:fd:ef:da:15:bc:75:34:39:57:63:2f:
4a:d7:2d:1f:47:01:23:49:25:12:84:b6:85:47:fd:
9e:a0:53:29:76:2a:0b:05:cd:ef:be:3d:e5:45:f1:
9e:c6:45:1f:66:49:10:5d:91:48:bf:74:7b:1d:7a:
42:e5:32:72:db:97:81:41:3d:36:83:f7:1a:15:0f:
af:84:a7:80:df:5d:ff:76:87:d5:3e:38:17:a8:76:
68:53:6c:95:d1:bb:83:f4:59:1b:a2:83:ee:29:5f:
1b:27:e1:3b:d6:da:f7:6c:53:68:9e:23:b0:a4:0f:
e7:3b:a4:61:e3:59:d7:c5:e5:33:d7:c0:12:7e:60:
dc:06:71:ec:c5:f9:33:af:85:4a:73:9b:0c:5a:a7:
63:4a:89:17:4e:82:6d:5a:62:66:04:93:f0:02:75:
dc:40:ae:97:e5:01:62:e1:e8:6b:3b:74:e1:c1:48:
a4:b7:1f:ca:ba:98:af:4e:f7:be:20:c2:fe:00:d6:
7a:8d:77:d9:37:24:21:ed:7a:66:ea:8a:e0:9a:0d:
73:12:cf:04:b1:a8:9f:50:70:41:5b:7c:c5:d8:e1:
b3:68:5d:4b:76:3b:be:35:a5:2b:13:7f:a2:e5:f9:
a5:69:5a:09:41:0a:7e:a8:cc:97:ba:af:13:96:1a:
72:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:67:BC:29:7D:32:7B:B6:10:CE:ED:39:9E:A6:4D:3C:D7:02:5F:09
X509v3 Authority Key Identifier:
keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/F2FAE6288F3011F1A5ADEA1CCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
105.172.0.0/19
Signature Algorithm: sha256WithRSAEncryption
5f:42:00:17:d9:b7:1d:2b:6a:8e:4c:42:59:71:ad:2d:a2:f5:
d2:ae:10:19:64:f9:a5:df:a8:b9:5a:14:d7:84:5b:6b:87:16:
b9:b2:2f:1b:6c:40:8e:77:16:e5:f4:c8:f5:7e:75:78:7c:cd:
c8:b8:a9:7e:79:58:5a:0a:d0:22:db:f9:31:7a:55:1e:e0:de:
15:3c:e7:13:22:01:bb:76:2e:83:e9:38:a1:a9:3c:81:bd:78:
9b:61:66:8f:ca:02:af:20:38:08:90:00:18:1c:bc:68:0e:6c:
7b:ab:93:73:79:c8:14:06:e3:7f:19:43:8d:78:be:70:86:0b:
22:ab:8d:45:40:26:f4:92:86:79:27:79:e6:0b:98:38:6b:74:
d6:e4:5e:c8:b7:09:25:2a:74:96:0a:5e:44:5c:2f:b7:99:c0:
ae:ca:29:0d:77:84:2c:c7:22:80:85:5a:1f:ac:ca:45:a0:4e:
49:46:89:b4:e0:43:16:65:9a:81:fd:41:3d:b2:ba:f8:cb:6f:
18:a2:3f:17:9a:6e:95:19:f6:d9:2d:41:35:23:5f:c7:73:ef:
9b:62:bc:9a:28:58:a5:ab:1e:fd:91:9b:9e:fd:24:45:77:83:
8a:24:a3:cf:3f:a7:eb:17:c1:c3:b5:80:30:3a:6b:ec:7b:75:
fe:94:a5:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:27:42 2026 by rpki-client