Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/F83B84A67A4211F18ECC4405CF1D38B0.roa
File: F83B84A67A4211F18ECC4405CF1D38B0.roa (raw, json)
Hash identifier: RtAstJg3lzvJyYQSXu/24xWVd/CIODEMZoK0gTaWriA=
Subject key identifier: 90:34:E2:22:07:4D:91:0B:4D:64:41:DF:65:06:16:35:22:12:8F:F8
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0C60
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/F83B84A67A4211F18ECC4405CF1D38B0.roa
Signing time: Tue 07 Jul 2026 20:32:28 +0000
ROA not before: Tue 07 Jul 2026 20:32:23 +0000
ROA not after: Wed 31 Dec 2036 20:32:23 +0000
asID: 214143
IP address blocks: 165.49.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Jul 2026 01:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3168 (0xc60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Jul 7 20:32:23 2026 GMT
Not After : Dec 31 20:32:23 2036 GMT
Subject: CN=6a4d625c-8fc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a8:a8:1d:41:0d:1b:c6:4d:e1:2c:58:a4:32:
03:c2:3e:ca:97:cd:f1:4c:15:61:44:a4:16:f4:c7:
58:6f:57:43:c0:02:d2:8f:57:1f:32:4d:00:57:eb:
a9:62:f7:b7:78:b6:d1:b3:f3:d2:ac:7f:f0:e4:5a:
ca:bc:00:e4:2e:5c:90:bd:6c:a7:a7:1d:f2:7d:79:
aa:55:03:a3:78:37:53:a6:a8:94:ef:2f:a2:f4:72:
76:05:fa:0f:8f:bb:4c:5c:24:04:3b:0f:4d:bc:15:
45:23:e9:40:40:74:32:a6:22:11:42:a4:86:9f:02:
61:9f:3e:f7:90:81:1b:7c:44:1d:43:16:73:56:b3:
c4:9c:36:92:5d:03:ed:b4:1b:04:4d:f0:40:8b:3c:
0c:ec:77:e7:be:3d:16:d2:c8:a9:48:f4:af:e1:36:
0a:32:0e:10:7e:56:bc:d0:8d:69:ed:1c:bd:3b:0a:
ed:15:f0:22:b5:42:51:13:0f:57:56:68:18:ac:28:
d9:7e:c0:1f:59:5c:c3:55:ae:af:0e:5e:c6:4d:6e:
ca:37:4e:b1:0e:33:05:7c:08:d0:e5:33:7a:b3:04:
86:27:38:b7:ac:5f:92:d5:28:35:16:20:a8:5f:56:
78:bd:df:47:bb:e3:d9:f3:f7:1d:19:0a:d4:7f:d8:
9e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:34:E2:22:07:4D:91:0B:4D:64:41:DF:65:06:16:35:22:12:8F:F8
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/F83B84A67A4211F18ECC4405CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.243.0/24
Signature Algorithm: sha256WithRSAEncryption
44:1f:19:3c:f3:fe:f8:15:e6:04:02:b1:1a:18:34:d4:e1:d2:
a0:4d:ba:7d:bf:11:f5:ab:80:2f:d5:ee:0a:d2:6c:eb:05:3a:
74:0b:d3:5c:a5:38:97:a8:e6:08:80:23:d7:b1:cc:78:a1:0d:
4c:0c:a2:51:64:d8:98:e7:bb:07:54:b1:43:fe:05:c8:d3:3c:
ee:05:2c:6e:ed:68:32:9f:18:c3:94:4e:5a:ac:88:7e:7b:eb:
08:53:a0:07:da:35:96:fd:c9:12:e0:55:9b:bc:71:68:15:88:
76:e8:35:7c:ce:1f:62:4f:65:c1:da:ca:d8:05:cc:5e:c2:85:
8c:55:4f:16:d0:1e:8a:86:30:e5:9b:b9:1c:92:e7:20:ad:90:
2d:c6:1f:4f:39:05:41:18:a7:b1:61:6e:4f:da:2d:aa:c0:c7:
47:48:44:ea:05:c9:0c:2e:6e:06:11:03:67:a5:c1:86:05:52:
a9:b6:b8:50:f0:5c:a1:2f:de:b0:d4:ca:c0:dc:1c:35:a9:d8:
b6:e8:10:8a:0d:5a:fd:5b:30:5b:c8:33:65:9c:05:6c:c6:9f:
3b:3d:14:68:b3:31:02:87:c8:3c:7e:0c:03:14:87:ef:14:9e:
13:88:92:00:a1:e6:1c:8e:48:55:2b:40:1a:53:c5:68:9a:7f:
fb:3e:b4:99
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICDGAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTQ0RUFBUjExMC8GA1UEBRMoRjg1QkI0OTg1NDM5MjIyOEZCOEIzMERCMDVEOTZB
QzY2NENFODNBQjAeFw0yNjA3MDcyMDMyMjNaFw0zNjEyMzEyMDMyMjNaMBgxFjAU
BgNVBAMTDTZhNGQ2MjVjLThmYzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC+qKgdQQ0bxk3hLFikMgPCPsqXzfFMFWFEpBb0x1hvV0PAAtKPVx8yTQBX
66li97d4ttGz89Ksf/DkWsq8AOQuXJC9bKenHfJ9eapVA6N4N1OmqJTvL6L0cnYF
+g+Pu0xcJAQ7D028FUUj6UBAdDKmIhFCpIafAmGfPveQgRt8RB1DFnNWs8ScNpJd
A+20GwRN8ECLPAzsd+e+PRbSyKlI9K/hNgoyDhB+VrzQjWntHL07Cu0V8CK1QlET
D1dWaBisKNl+wB9ZXMNVrq8OXsZNbso3TrEOMwV8CNDlM3qzBIYnOLesX5LVKDUW
IKhfVni930e749nz9x0ZCtR/2J7pAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUkDTi
IgdNkQtNZEHfZQYWNSISj/gwHwYDVR0jBBgwFoAU+Fu0mFQ5Iij7izDbBdlqxmTO
g6swDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkE0NEVBL0E4QjdFQzFDODkwOTExRTlCNTdFNjg1RkY4QUVBMjI4Ly1GdTBt
RlE1SWlqN2l6RGJCZGxxeG1UT2c2cy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
Ly1GdTBtRlE1SWlqN2l6RGJCZGxxeG1UT2c2cy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkE0NEVBL0E4QjdFQzFDODkwOTExRTlCNTdFNjg1RkY4QUVB
MjI4L0Y4M0I4NEE2N0E0MjExRjE4RUNDNDQwNUNGMUQzOEIwLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAClMfMwDQYJKoZIhvcNAQELBQAD
ggEBAEQfGTzz/vgV5gQCsRoYNNTh0qBNun2/EfWrgC/V7grSbOsFOnQL01ylOJeo
5giAI9exzHihDUwMolFk2JjnuwdUsUP+BcjTPO4FLG7taDKfGMOUTlqsiH576whT
oAfaNZb9yRLgVZu8cWgViHboNXzOH2JPZcHaytgFzF7ChYxVTxbQHoqGMOWbuRyS
5yCtkC3GH085BUEYp7Fhbk/aLarAx0dIROoFyQwubgYRA2elwYYFUqm2uFDwXKEv
3rDUysDcHDWp2LboEIoNWv1bMFvIM2WcBWzGnzs9FGizMQKHyDx+DAMUh+8UnhOI
kgCh5hyOSFUrQBpTxWiaf/s+tJk=
-----END CERTIFICATE-----
Generated at Mon Jul 20 19:14:52 2026 by rpki-client