Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/BD045A8A8A6D11F19C9D3A11CF1D38B0.roa
File: BD045A8A8A6D11F19C9D3A11CF1D38B0.roa (raw, json)
Hash identifier: PdnD7W5cVse1eMHQTUrWXzQWR10v8N9EjlYgocqKZCg=
Subject key identifier: B5:79:41:44:B7:2B:79:33:EC:31:84:82:30:DC:11:92:AA:20:23:7B
Certificate issuer: /CN=F364712FAF/serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
Certificate serial: 0804
Authority key identifier: 3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/BD045A8A8A6D11F19C9D3A11CF1D38B0.roa
Signing time: Tue 28 Jul 2026 10:18:55 +0000
ROA not before: Tue 28 Jul 2026 10:18:51 +0000
ROA not after: Wed 31 Dec 2036 10:18:51 +0000
asID: 36994
IP address blocks: 105.243.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft
rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 07:32:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2052 (0x804)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364712FAF, serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
Validity
Not Before: Jul 28 10:18:51 2026 GMT
Not After : Dec 31 10:18:51 2036 GMT
Subject: CN=6a68820f-2978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5e:b3:b6:62:d5:22:14:ff:10:f3:30:fa:40:
aa:af:8c:7c:d5:57:b3:c1:cc:ee:a6:cd:c5:09:25:
02:63:0e:b8:b4:3a:c4:95:f5:71:73:22:12:bd:c8:
d4:ef:34:1a:5c:d3:83:61:82:14:a0:ad:6e:9d:34:
eb:b9:3c:34:5c:9f:47:d6:83:78:eb:20:07:c7:5e:
ff:89:ff:91:c0:0f:72:5e:19:16:01:1e:2b:fe:35:
db:6c:fb:dc:89:44:92:af:f4:ef:c1:c7:85:9b:1e:
c8:0f:cd:b6:b0:4a:c2:5f:bc:c9:66:04:90:33:57:
ca:54:3f:55:c4:43:ad:09:25:e0:fe:b3:03:1a:7d:
02:f1:08:1d:a0:1e:8b:a9:06:4b:26:ba:e7:14:4e:
f9:29:8d:73:52:fb:51:fb:5e:c5:21:68:ac:65:cc:
e8:99:26:05:89:f6:03:81:8b:c2:1c:7a:99:12:6a:
a4:bf:16:03:06:4e:18:47:f2:ab:f0:c3:84:64:ae:
57:13:1f:b3:c3:cd:ad:de:3f:02:65:8c:dc:e7:3c:
fe:a5:91:2b:9d:e5:b0:82:9d:55:d1:2e:b4:11:9e:
28:39:25:28:77:c2:f9:52:a0:c4:e8:d7:ae:ae:67:
26:0d:af:c3:f5:ca:08:9e:19:2b:09:3a:55:7d:db:
65:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:79:41:44:B7:2B:79:33:EC:31:84:82:30:DC:11:92:AA:20:23:7B
X509v3 Authority Key Identifier:
keyid:3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/BD045A8A8A6D11F19C9D3A11CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
105.243.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6c:88:82:fc:43:df:29:a1:17:ec:c3:81:b4:29:11:fb:6d:5f:
ae:3c:e1:0a:25:4e:29:d1:7a:0b:88:25:43:e6:6d:ff:76:35:
fa:5c:bb:19:17:69:fd:01:c8:bf:63:88:ca:d2:dc:6f:65:a5:
fb:77:d5:56:2f:02:47:d3:33:87:93:f1:e6:a9:3a:59:d0:26:
fe:c0:52:4e:2f:e0:82:c1:55:f5:a3:35:e4:0c:8c:52:b7:06:
13:4f:07:ed:19:cf:19:d0:8c:20:2b:fd:86:df:cf:35:b9:08:
65:7f:77:71:ee:99:22:81:32:ea:fd:41:0a:33:70:0a:3f:e9:
d7:22:d6:f4:c7:a3:e6:d5:a6:b2:3f:1d:df:e3:7e:07:8f:d4:
9f:66:bb:64:bf:11:27:d3:10:a8:a7:4d:ac:6d:18:3f:34:a9:
19:6e:cb:e1:2f:13:e2:7c:6e:7e:2d:fc:4d:79:9b:1b:00:5b:
ed:97:b2:b9:9b:06:67:fb:c4:49:c4:1e:9f:d9:25:5c:d6:f4:
3a:57:6f:6e:30:f9:9a:dd:ca:4a:61:13:64:8c:23:d6:93:4e:
9a:a6:d1:3e:5a:2c:40:ea:44:f7:40:83:bf:83:df:e3:7d:0d:
ab:18:fb:a9:59:7d:78:42:1f:3f:4a:f8:51:73:34:0b:7d:01:
37:78:7b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:02:34 2026 by rpki-client