Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/5603A5348A7211F1A4D85AAFCE1D38B0.roa
File: 5603A5348A7211F1A4D85AAFCE1D38B0.roa (raw, json)
Hash identifier: tbUJCWGomwJDBIkJdVCcDNrPukA2+70YNu+Bhq5LTs4=
Subject key identifier: B6:AA:60:BA:50:A5:AC:97:FF:4D:64:80:05:02:BE:6B:C9:CF:9B:32
Certificate issuer: /CN=F364712FAF/serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
Certificate serial: 080E
Authority key identifier: 3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/5603A5348A7211F1A4D85AAFCE1D38B0.roa
Signing time: Tue 28 Jul 2026 10:51:50 +0000
ROA not before: Tue 28 Jul 2026 10:51:46 +0000
ROA not after: Wed 31 Dec 2036 10:51:46 +0000
asID: 36994
IP address blocks: 105.255.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft
rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 07:32:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2062 (0x80e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364712FAF, serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
Validity
Not Before: Jul 28 10:51:46 2026 GMT
Not After : Dec 31 10:51:46 2036 GMT
Subject: CN=6a6889c6-6ac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:06:80:58:a5:c2:aa:86:12:25:9c:87:29:46:
9a:ff:0b:cf:ed:95:69:4e:dd:f3:da:ca:50:4b:34:
94:36:74:d7:11:e5:63:f2:28:fe:34:37:7f:f6:06:
60:85:9f:c7:f8:37:d2:76:6b:12:5e:0c:67:15:db:
47:35:f6:d0:d8:dc:d1:27:b2:24:c2:04:c8:08:09:
50:38:c4:a0:23:62:83:d1:2b:a6:be:74:af:0f:21:
21:d5:0c:32:d9:8a:42:f7:9f:37:73:3b:7e:3c:51:
a3:9e:f4:dc:dd:b5:8d:5f:ec:97:23:16:07:88:41:
64:07:e8:a9:84:70:e7:3f:77:f4:05:54:84:9e:10:
a1:20:c4:b2:ac:c5:2f:cd:f0:db:be:cf:68:d5:76:
b3:39:eb:90:85:4f:f0:9e:4e:1b:72:46:e8:2a:af:
30:7d:de:bf:db:73:e9:65:3a:f2:e2:22:45:2f:2b:
02:08:58:0b:f8:4c:66:e2:4f:8a:c4:38:cb:ab:8a:
71:43:1a:82:ae:6a:ca:59:ca:8a:5c:39:09:dd:34:
7c:eb:4e:81:09:c2:43:41:c6:fb:9f:bc:5a:fb:ea:
fa:24:ff:49:9a:7b:a6:76:e1:aa:18:8e:56:1d:16:
ee:5a:15:62:fe:17:3d:5c:ac:f3:8a:ec:a1:0e:76:
57:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:AA:60:BA:50:A5:AC:97:FF:4D:64:80:05:02:BE:6B:C9:CF:9B:32
X509v3 Authority Key Identifier:
keyid:3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/5603A5348A7211F1A4D85AAFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
105.255.128.0/17
Signature Algorithm: sha256WithRSAEncryption
50:08:d4:b9:28:0a:a3:37:fb:51:07:0d:56:af:55:ae:cc:b1:
a9:23:b8:3b:59:65:13:23:fc:54:c3:ef:f6:a1:50:1e:8e:09:
ad:13:d4:54:98:3f:88:c7:0b:7e:c0:d3:ba:80:e3:d4:17:76:
8f:6d:aa:6e:71:dd:18:a1:53:41:c7:31:4d:13:66:4a:a5:7e:
58:e2:c4:80:62:ea:70:6a:de:64:aa:0b:50:f8:73:bb:c4:d0:
3d:97:71:13:a8:88:60:23:a3:04:89:36:fc:0f:15:8b:66:24:
90:4a:36:fa:ff:b0:dc:1e:cf:34:79:98:d9:6f:bd:f8:a1:f8:
0a:e3:f8:69:77:ea:09:95:19:b3:35:9c:e7:2f:83:48:6b:21:
06:8c:42:77:45:81:da:6c:cf:93:0e:2c:86:d0:c1:e3:bd:e3:
c7:ce:b6:19:71:a2:15:20:b0:6a:3a:27:5a:0c:ba:01:2f:7c:
3b:09:f4:99:4e:c9:f4:70:0e:33:4a:7d:98:16:ad:59:a7:88:
11:54:8e:16:7e:0f:0c:62:3f:bc:06:3b:81:b2:a3:4d:ab:8f:
ea:70:8e:32:19:5c:e4:e4:92:e4:41:fb:50:f8:e2:8b:12:da:
87:03:bf:64:9b:4c:72:e2:d6:9a:50:b5:97:bb:b8:98:49:5a:
06:d9:39:9f
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCA4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDcxMkZBRjExMC8GA1UEBRMoM0Q1NUM3ODRFQTE3OTEyRjBFOTYwQTI1QzZDQTky
MEUxMDAyMzAwQTAeFw0yNjA3MjgxMDUxNDZaFw0zNjEyMzExMDUxNDZaMBgxFjAU
BgNVBAMTDTZhNjg4OWM2LTZhYzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC1BoBYpcKqhhIlnIcpRpr/C8/tlWlO3fPaylBLNJQ2dNcR5WPyKP40N3/2
BmCFn8f4N9J2axJeDGcV20c19tDY3NEnsiTCBMgICVA4xKAjYoPRK6a+dK8PISHV
DDLZikL3nzdzO348UaOe9NzdtY1f7JcjFgeIQWQH6KmEcOc/d/QFVISeEKEgxLKs
xS/N8Nu+z2jVdrM565CFT/CeThtyRugqrzB93r/bc+llOvLiIkUvKwIIWAv4TGbi
T4rEOMurinFDGoKuaspZyopcOQndNHzrToEJwkNBxvufvFr76vok/0mae6Z24aoY
jlYdFu5aFWL+Fz1crPOK7KEOdldLAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUtqpg
ulClrJf/TWSABQK+a8nPmzIwHwYDVR0jBBgwFoAUPVXHhOoXkS8OlgolxsqSDhAC
MAowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQ3MTJGL0U5QzRCQUEyQTBFODExRUI4ODk1OEQxMEY4QUVBMjI4L1BWWEho
T29Ya1M4T2xnb2x4c3FTRGhBQ01Bby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1BWWEhoT29Ya1M4T2xnb2x4c3FTRGhBQ01Bby5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjQ3MTJGL0U5QzRCQUEyQTBFODExRUI4ODk1OEQxMEY4
QUVBMjI4LzU2MDNBNTM0OEE3MjExRjFBNEQ4NUFBRkNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAdp/4AwDQYJKoZIhvcNAQEL
BQADggEBAFAI1LkoCqM3+1EHDVavVa7MsakjuDtZZRMj/FTD7/ahUB6OCa0T1FSY
P4jHC37A07qA49QXdo9tqm5x3RihU0HHMU0TZkqlfljixIBi6nBq3mSqC1D4c7vE
0D2XcROoiGAjowSJNvwPFYtmJJBKNvr/sNwezzR5mNlvvfih+Arj+Gl36gmVGbM1
nOcvg0hrIQaMQndFgdpsz5MOLIbQweO948fOthlxohUgsGo6J1oMugEvfDsJ9JlO
yfRwDjNKfZgWrVmniBFUjhZ+DwxiP7wGO4Gyo02rj+pwjjIZXOTkkuRB+1D44osS
2ocDv2SbTHLi1ppQtZe7uJhJWgbZOZ8=
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:02:46 2026 by rpki-client