Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/02092C3E448511F19D42C501CF1D38B0.roa
File: 02092C3E448511F19D42C501CF1D38B0.roa (raw, json)
Hash identifier: s8LAJ4tIr4+YfptJKpIOsww2MeMuc8ztvDJCVKMYf6k=
Subject key identifier: 09:1D:D6:AC:DF:B5:08:59:E6:43:43:C8:A0:CB:2C:FD:E0:51:67:AD
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0BA6
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/02092C3E448511F19D42C501CF1D38B0.roa
Signing time: Thu 30 Apr 2026 11:09:08 +0000
ROA not before: Thu 30 Apr 2026 11:09:04 +0000
ROA not after: Wed 31 Dec 2036 11:09:04 +0000
asID: 402298
IP address blocks: 165.49.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 02 May 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2982 (0xba6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Apr 30 11:09:04 2026 GMT
Not After : Dec 31 11:09:04 2036 GMT
Subject: CN=69f33854-4394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2f:07:0b:69:e0:b0:71:b5:79:3c:56:b4:89:
04:8d:04:7f:37:17:b3:c5:dc:64:e5:bb:73:7d:8c:
7e:09:59:da:5a:67:1d:f1:5b:6e:0e:81:8f:52:d9:
dd:bf:80:0e:96:18:4b:58:0b:19:da:27:22:98:bb:
a8:5a:fb:98:b5:d4:55:2b:fc:2e:b3:07:d2:c7:c6:
27:94:1c:98:0d:f9:87:01:f6:df:ff:c0:48:d6:fa:
0d:60:a7:a6:55:2b:4e:5c:89:68:33:63:92:41:39:
43:98:a3:13:f3:b3:78:6a:55:ea:17:0d:de:7e:00:
ce:b8:1a:82:a1:80:d7:e2:9b:55:09:65:d8:a8:0b:
d9:9b:1c:26:0b:75:76:6d:83:e0:34:fc:58:57:50:
b2:c5:fa:52:4a:5f:3e:09:20:af:54:64:da:d1:8f:
a3:7e:b0:02:60:c6:77:05:2c:53:72:68:dd:e5:fb:
fe:ff:65:04:1d:f4:3d:c4:0a:62:5f:3f:7f:8e:f5:
f6:c8:8c:50:1f:af:b8:fe:c1:dc:56:f1:e5:a6:51:
fb:7f:28:02:11:00:27:49:c8:a5:76:df:8d:db:aa:
c0:09:4e:e5:c3:ee:1c:af:63:3d:df:15:11:32:98:
43:f8:2b:89:d9:23:84:43:b6:1f:61:c3:69:3d:c3:
72:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:1D:D6:AC:DF:B5:08:59:E6:43:43:C8:A0:CB:2C:FD:E0:51:67:AD
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/02092C3E448511F19D42C501CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.75.0/24
Signature Algorithm: sha256WithRSAEncryption
52:b3:a8:9d:8b:71:97:4e:5b:7a:0d:02:66:f0:29:48:fa:d3:
83:d0:c9:23:a6:5b:9b:40:94:80:89:0e:7f:50:15:f2:fd:24:
ec:3e:48:6f:6c:6a:12:6e:37:ff:d3:31:5c:6d:b7:14:14:ef:
98:16:66:15:c4:44:4c:08:94:68:0e:00:d0:04:0d:c2:29:48:
67:76:a1:5e:6d:cb:7d:d6:a1:45:fe:6c:37:c8:96:fd:21:09:
0f:c0:5c:d9:e8:ba:a1:17:7f:f9:b5:66:c7:83:92:f6:c8:55:
8d:0b:5d:48:d9:b4:89:40:94:ce:7a:59:e3:bc:ba:b3:18:83:
eb:8e:bc:22:20:e2:64:6d:aa:20:37:79:15:f1:90:2d:5e:47:
da:55:1c:c7:95:38:cd:0f:13:a1:e6:af:84:35:52:e4:06:72:
83:75:77:3a:cc:48:c6:ee:e7:5d:4d:c6:2c:48:a4:19:59:55:
4b:06:ac:08:c5:21:28:61:47:17:36:ce:68:cc:92:8f:e2:6c:
21:a4:0f:7b:fa:7b:c8:93:ac:d3:a1:d1:ed:12:46:89:2a:e6:
6d:5d:00:4e:ab:c5:e3:f6:18:10:e4:2a:09:54:cc:7c:83:d5:
33:93:e1:86:07:7c:29:72:52:ac:8e:e3:44:a5:69:b2:b6:06:
71:52:48:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 17:27:00 2026 by rpki-client