Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/F979BBC88F1C11F1BA6765A6CE1D38B0.roa
File: F979BBC88F1C11F1BA6765A6CE1D38B0.roa (raw, json)
Hash identifier: SdB5ftxfpEi4f+OwfT6/3rlG7AuYhYkaa4Kjzt18w+E=
Subject key identifier: 39:23:5B:DD:E5:1C:E2:E3:2B:F5:1E:93:54:72:71:36:18:10:17:80
Certificate issuer: /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial: 09D8
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/F979BBC88F1C11F1BA6765A6CE1D38B0.roa
Signing time: Mon 03 Aug 2026 09:23:24 +0000
ROA not before: Mon 03 Aug 2026 09:23:20 +0000
ROA not after: Sat 30 Jul 2033 09:23:20 +0000
asID: 37119
IP address blocks: 105.168.64.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.mft
rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2520 (0x9d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D0F50AF, serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Validity
Not Before: Aug 3 09:23:20 2026 GMT
Not After : Jul 30 09:23:20 2033 GMT
Subject: CN=6a705e0b-b2e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c7:2c:c3:5e:d6:af:d5:90:f6:cc:cb:d8:cd:
5e:5a:1a:13:93:42:5a:34:fc:12:7a:07:a9:70:7f:
45:41:6f:d6:47:38:75:52:4d:bc:80:04:a3:4c:7c:
5e:8a:a8:3f:43:28:df:33:2a:b8:de:88:b0:9e:e2:
d9:81:75:ff:58:39:43:c3:3d:4c:10:65:7d:56:7f:
31:e1:d1:27:71:1d:59:7d:d2:7c:bc:c5:54:67:f4:
bb:be:f0:03:77:42:44:1e:32:82:a4:f8:2d:10:74:
d6:fd:0d:63:9e:62:ec:b5:e0:29:09:d3:92:e2:a7:
89:09:06:f0:c1:1f:40:7a:19:c7:90:00:43:a2:9f:
fb:bd:8c:ac:e9:c9:0f:8c:bd:7d:53:7b:ec:8e:6e:
74:5e:bc:28:63:90:37:12:e5:c4:e3:11:dd:0e:5f:
31:df:8c:e2:49:ba:a5:44:8e:4c:36:70:f3:d0:99:
d5:25:9b:92:67:2b:cc:f8:24:18:70:fb:aa:d6:7e:
42:02:c5:ba:2d:12:ff:6a:14:50:a5:ef:01:50:37:
0f:42:8e:9a:b3:fc:a3:a9:02:fb:e6:ee:8f:a0:97:
1a:6b:ac:29:2b:a1:cb:46:8b:4f:b6:e0:fb:5f:ca:
87:81:75:b2:f3:1d:ef:7b:8a:b2:cd:41:3b:a4:39:
ee:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:23:5B:DD:E5:1C:E2:E3:2B:F5:1E:93:54:72:71:36:18:10:17:80
X509v3 Authority Key Identifier:
keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/F979BBC88F1C11F1BA6765A6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
105.168.64.0/19
Signature Algorithm: sha256WithRSAEncryption
85:8d:ea:9b:1c:90:19:bb:08:64:13:07:fd:56:e8:c3:b8:77:
e2:ef:c4:88:4e:c6:2f:61:ce:9f:96:f3:8d:c0:ce:e7:4a:9d:
fb:13:79:a8:2a:00:d0:bc:76:6c:50:9e:6b:a7:e7:d2:1a:7c:
ee:4f:32:93:09:28:75:79:fd:1a:45:d4:e9:45:23:2d:c6:cf:
fc:c8:97:00:7a:1d:13:f5:d3:d6:d4:e1:4a:74:46:c0:3f:ed:
e1:ca:7e:67:d3:64:42:3d:a0:bc:05:5c:05:d4:d7:6b:17:93:
21:44:26:5f:23:22:46:9b:d2:30:60:ae:98:14:03:ee:a0:84:
08:6f:74:1a:8c:01:ed:fe:ac:74:ca:a3:ca:00:8d:d3:5b:22:
90:3e:3b:52:a8:01:44:9d:d6:08:e7:29:65:35:00:42:b0:02:
26:e6:12:33:bc:b6:eb:71:23:55:d7:6b:08:c7:6e:df:2b:cc:
01:1a:d3:3e:b8:16:95:08:67:92:31:86:75:36:4b:b2:05:48:
96:0b:47:f8:d1:9f:d5:dc:39:37:13:de:c1:3e:80:0c:7e:6e:
fb:6b:9e:68:db:ca:fc:09:f1:05:7a:b4:50:6b:80:ee:7f:b4:
a2:1e:b3:ab:3e:98:f7:1b:99:3b:59:51:c2:a0:9b:6f:36:e6:
39:55:61:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:27:35 2026 by rpki-client