Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36ED442/9ED8257A57C811E5A805BD3EF8AEA228/D1595E92479F11F1955B4AE8CE1D38B0.roa
File: D1595E92479F11F1955B4AE8CE1D38B0.roa (raw, json)
Hash identifier: rIbLa5rpV4WAj/sqUqpq18W5uZz1OXNKu6ZwE1OKxqg=
Subject key identifier: BE:CB:1D:27:9E:04:76:53:FC:F8:3C:3D:17:5D:24:D2:C3:36:54:C5
Certificate issuer: /CN=F36ED442AF/serialNumber=895527C77E201446673090F081648F186127B1BA
Certificate serial: 0F80
Authority key identifier: 89:55:27:C7:7E:20:14:46:67:30:90:F0:81:64:8F:18:61:27:B1:BA
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/iVUnx34gFEZnMJDwgWSPGGEnsbo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36ED442/9ED8257A57C811E5A805BD3EF8AEA228/D1595E92479F11F1955B4AE8CE1D38B0.roa
Signing time: Mon 04 May 2026 09:58:36 +0000
ROA not before: Mon 04 May 2026 09:58:32 +0000
ROA not after: Sun 04 May 2031 09:58:32 +0000
asID: 37457
IP address blocks: 105.184.0.0/14 maxlen: 24
105.224.0.0/14 maxlen: 24
105.228.0.0/15 maxlen: 24
2c0e:2000::/28 maxlen: 64
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36ED442/9ED8257A57C811E5A805BD3EF8AEA228/iVUnx34gFEZnMJDwgWSPGGEnsbo.crl
rsync://rpki.afrinic.net/repository/member_repository/F36ED442/9ED8257A57C811E5A805BD3EF8AEA228/iVUnx34gFEZnMJDwgWSPGGEnsbo.mft
rsync://rpki.afrinic.net/repository/afrinic/iVUnx34gFEZnMJDwgWSPGGEnsbo.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 09 May 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3968 (0xf80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36ED442AF, serialNumber=895527C77E201446673090F081648F186127B1BA
Validity
Not Before: May 4 09:58:32 2026 GMT
Not After : May 4 09:58:32 2031 GMT
Subject: CN=69f86dcc-0d98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ff:1f:02:93:46:49:c0:78:b5:f7:22:12:ea:
94:c2:3a:da:65:ea:73:bb:f5:ab:da:e9:43:b5:16:
c1:58:7c:3b:54:d4:0c:58:c2:98:7a:1e:dc:a3:42:
ad:be:47:74:74:bc:cd:a9:47:62:de:06:8b:27:6e:
f9:4f:d4:30:7b:d3:3d:80:15:b5:50:a0:67:de:45:
e6:36:47:14:07:4c:1a:04:ae:28:8f:aa:21:08:be:
d8:a5:65:8b:20:c3:f5:e6:d7:78:96:67:3b:ea:62:
a4:9c:e5:69:16:56:38:23:0d:f5:f5:1d:08:b0:66:
21:8e:24:59:f0:96:72:5a:67:24:97:c8:a3:04:29:
52:23:4c:33:13:17:16:c3:f9:27:4f:d6:68:79:69:
ae:8b:86:22:9f:e9:c6:db:15:73:35:ea:36:df:17:
1d:d0:cc:7e:9c:af:8b:0f:e7:eb:05:7f:4c:eb:dc:
2e:31:9f:99:f8:e2:20:34:1c:34:8c:68:98:01:40:
e5:ea:57:54:50:75:a7:e8:55:6d:8b:9d:a6:86:d3:
01:a9:ce:97:d3:01:99:c8:2c:c8:06:a6:0e:0f:06:
2c:58:f5:f0:ab:d2:4f:da:59:ff:03:21:39:ab:67:
5a:05:a8:f3:6b:a5:14:0c:82:d6:20:44:34:da:b0:
c8:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:CB:1D:27:9E:04:76:53:FC:F8:3C:3D:17:5D:24:D2:C3:36:54:C5
X509v3 Authority Key Identifier:
keyid:89:55:27:C7:7E:20:14:46:67:30:90:F0:81:64:8F:18:61:27:B1:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36ED442/9ED8257A57C811E5A805BD3EF8AEA228/iVUnx34gFEZnMJDwgWSPGGEnsbo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/iVUnx34gFEZnMJDwgWSPGGEnsbo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ED442/9ED8257A57C811E5A805BD3EF8AEA228/D1595E92479F11F1955B4AE8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
105.184.0.0/14
105.224.0.0-105.229.255.255
IPv6:
2c0e:2000::/28
Signature Algorithm: sha256WithRSAEncryption
7f:b0:4f:c6:e3:e8:60:b4:85:a9:f9:6c:a9:13:2a:ab:6d:52:
87:a6:5d:84:08:2c:b5:12:2a:d6:29:19:41:cc:57:5c:a3:0d:
ba:fc:79:ad:4e:10:90:be:b5:c2:2e:ba:c5:02:f0:24:57:af:
cb:4b:ed:19:0c:74:91:32:f4:77:e7:21:86:9b:5b:f4:38:d1:
64:68:1e:22:dd:87:d3:df:2e:01:29:bc:d6:26:93:e9:55:80:
89:8a:d3:78:82:de:5e:82:30:97:a6:c1:3b:83:d1:4c:80:d6:
b4:8b:a7:30:11:22:54:ef:1d:c3:a8:3d:6f:ed:c4:f4:f5:64:
f2:5a:22:0f:01:19:d4:71:95:31:71:b0:9f:79:26:46:bc:ee:
86:9e:08:80:ee:bc:b2:a6:79:f1:bd:cb:53:53:b8:ed:83:72:
8f:ca:d7:5a:7d:9f:6c:66:df:43:db:6c:c9:7d:b1:fe:44:04:
b7:b3:54:8b:d2:eb:5b:84:1e:20:ed:21:0c:75:1b:c0:76:54:
37:1c:ed:79:24:7a:60:85:01:98:13:4b:d1:4f:95:78:c9:35:
1e:59:a3:97:57:df:8e:58:46:dc:c5:f1:ee:52:05:c6:68:ff:
09:59:cc:b1:ca:d4:74:6e:17:04:9f:6b:01:d9:f2:85:b7:02:
39:cc:17:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 22:24:58 2026 by rpki-client