Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/F99906468F1B11F186AD05A2CE1D38B0.roa
File: F99906468F1B11F186AD05A2CE1D38B0.roa (raw, json)
Hash identifier: df17kmt6ek7OowHmsBOIZHdFpIG//qzGYk7Xef6ZzZ0=
Subject key identifier: 46:E0:E9:C1:82:CF:25:C9:94:C8:E1:47:6A:EC:A6:A2:C1:12:E7:03
Certificate issuer: /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial: 09D4
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/F99906468F1B11F186AD05A2CE1D38B0.roa
Signing time: Mon 03 Aug 2026 09:16:14 +0000
ROA not before: Mon 03 Aug 2026 09:16:10 +0000
ROA not after: Sat 30 Jul 2033 09:16:10 +0000
asID: 37119
IP address blocks: 105.168.32.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.mft
rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2516 (0x9d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D0F50AF, serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Validity
Not Before: Aug 3 09:16:10 2026 GMT
Not After : Jul 30 09:16:10 2033 GMT
Subject: CN=6a705c5e-838a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3b:6b:c4:c4:aa:da:33:1e:ee:e0:43:48:ed:
b8:20:fd:93:06:b0:71:67:db:4e:8f:5a:f6:48:8c:
44:59:44:30:84:51:69:c3:da:cf:fe:6e:ce:70:91:
b9:4a:f4:71:6d:60:56:47:d9:dd:b2:c2:ae:0d:ac:
dc:5e:17:fd:2c:ba:54:10:6f:63:fd:13:d7:1f:ae:
64:97:60:54:49:cb:d9:bf:27:95:e0:b2:b6:fb:e7:
d1:bb:71:98:c1:8d:21:10:7c:92:c2:77:c9:ce:ab:
28:e4:2d:01:e9:cc:c4:eb:cd:00:f1:bf:68:17:d6:
d8:63:ad:58:a9:73:16:82:09:9b:0b:3b:c4:25:4f:
aa:f6:da:cc:bc:26:0b:06:b8:83:8b:01:7f:d1:19:
87:49:80:fa:26:06:30:89:bf:12:63:b3:13:6d:46:
62:1d:ed:7a:b2:d5:88:46:10:ce:e0:b6:42:ba:a4:
1e:b3:26:8f:f2:47:4a:68:32:be:f3:e9:19:26:cf:
b4:63:49:89:ad:16:95:2f:a9:a5:10:48:88:c7:5a:
f8:e6:07:fc:4c:8d:04:1f:34:2d:8f:bb:9c:b2:09:
f4:2b:f6:85:85:c0:77:b5:3d:f7:d3:2f:a8:b4:00:
0d:43:97:68:a4:60:0d:18:f3:a2:2b:45:a5:29:84:
9a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:E0:E9:C1:82:CF:25:C9:94:C8:E1:47:6A:EC:A6:A2:C1:12:E7:03
X509v3 Authority Key Identifier:
keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/F99906468F1B11F186AD05A2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
105.168.32.0/19
Signature Algorithm: sha256WithRSAEncryption
31:4d:8c:e3:fb:e8:a0:42:ab:f0:4f:43:a8:57:13:fb:0e:0c:
33:5b:17:73:54:b5:bc:d1:be:dd:6c:cf:32:71:c7:ed:ab:11:
01:4d:a6:03:59:28:8c:c2:86:67:9c:e6:26:9c:69:72:ee:1b:
4e:4b:00:c1:6b:9b:ee:e5:d5:0f:c9:43:df:ff:8b:ca:df:5b:
16:65:3c:e2:b4:90:d7:fa:51:01:56:89:29:59:78:ae:d6:eb:
1a:73:0b:af:84:ea:1f:69:25:c9:43:63:69:ce:c2:ac:8d:8d:
f8:71:18:c4:d1:0d:58:cf:e9:42:4b:9d:c3:6f:3c:77:87:04:
60:5b:95:96:31:c1:02:6a:ee:d6:c2:95:ec:ad:f7:f4:f7:83:
ef:ef:50:3f:9f:27:27:62:c3:5f:8d:3e:62:0c:50:0d:95:cc:
c3:02:d6:be:ef:d2:00:22:6e:05:4e:22:e9:db:50:65:9d:4c:
27:26:f9:65:12:59:6b:ff:f3:47:7c:20:1f:94:3a:af:ee:9b:
80:b5:4c:a8:cb:1c:d6:b3:c5:80:a6:ce:7d:17:a0:be:cd:b7:
cb:fd:de:52:ca:7d:fb:50:9c:f9:ee:71:5a:c1:0e:bb:90:91:
fc:99:3d:56:8b:68:ea:4f:eb:72:33:d7:bc:92:d5:92:50:ea:
24:c6:10:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:27:45 2026 by rpki-client