Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/0596AC04811C11F1947278BCCE1D38B0.roa
File: 0596AC04811C11F1947278BCCE1D38B0.roa (raw, json)
Hash identifier: bct8iw/xtzR051gYgm3Hxbms5Xb2vhozv759J3DK5tY=
Subject key identifier: 54:3F:AB:43:71:C4:9D:EE:9E:AA:D5:83:06:C9:3D:5D:B0:D6:05:78
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0CC1
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/0596AC04811C11F1947278BCCE1D38B0.roa
Signing time: Thu 16 Jul 2026 13:41:18 +0000
ROA not before: Thu 16 Jul 2026 13:41:14 +0000
ROA not after: Wed 31 Dec 2036 13:41:14 +0000
asID: 5650
IP address blocks: 165.49.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Jul 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3265 (0xcc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Jul 16 13:41:14 2026 GMT
Not After : Dec 31 13:41:14 2036 GMT
Subject: CN=6a58df7e-a97e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:e0:d9:37:46:74:4e:64:3e:0a:df:27:5a:25:
82:a8:28:27:3e:3b:9c:03:4c:f0:58:99:73:ca:d9:
1d:cb:8e:1d:f5:0d:74:26:1c:13:3c:11:e7:08:b9:
c1:06:17:7d:19:28:95:e8:00:b7:dd:68:50:0d:e0:
a2:33:2a:79:37:37:8d:64:da:a3:39:5a:34:e3:de:
bd:da:23:f2:08:cc:4a:92:f4:06:b2:57:5c:68:4c:
dd:b6:d4:a6:95:1b:ce:79:8a:07:eb:a4:81:53:90:
e5:90:c7:6d:45:c0:d7:57:d8:1f:40:94:81:eb:95:
8c:7a:37:b5:4b:74:2b:2f:28:d7:8e:25:c3:2c:0c:
72:61:b2:a3:29:de:96:33:0c:00:58:5d:9f:33:8a:
18:13:14:13:0e:7c:21:bb:36:56:79:c2:20:5f:1f:
9c:3b:df:6a:99:cc:d7:98:4a:67:f4:85:54:12:9c:
c6:9e:f8:79:9d:b7:a4:f9:41:15:20:2d:ce:60:96:
e2:a7:74:1c:28:20:c4:61:56:6d:b5:82:ac:f5:94:
3c:ae:95:5e:c0:73:07:15:eb:8d:ef:c8:8c:66:06:
0b:c3:eb:48:44:04:50:cd:78:34:6f:0c:df:ee:4b:
c1:2c:66:23:6c:30:b5:04:00:26:bd:44:22:34:70:
af:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:3F:AB:43:71:C4:9D:EE:9E:AA:D5:83:06:C9:3D:5D:B0:D6:05:78
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/0596AC04811C11F1947278BCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.97.0/24
Signature Algorithm: sha256WithRSAEncryption
89:98:43:ff:b1:17:26:cd:0f:49:04:ec:86:e7:47:32:10:0d:
6f:82:ad:2e:bc:e2:f5:6c:ba:c3:92:5e:89:6a:c4:a0:b4:8e:
6c:d9:5c:31:21:19:28:7c:b9:1c:c6:57:83:dd:0a:54:48:a0:
c5:b9:1d:ac:16:d8:08:22:9f:83:b2:75:6f:7c:55:64:70:30:
68:c4:12:85:e9:3b:b7:b8:2b:4b:dd:7c:16:76:7e:89:dc:f2:
16:d8:f8:85:88:0e:e4:87:7d:03:e2:81:e6:b7:c7:9e:ab:15:
f7:c3:5c:1f:7f:0b:62:57:22:2d:f9:32:2d:b6:1a:90:bd:e6:
b1:48:8a:d5:07:15:c1:58:6d:18:35:64:7a:c3:ef:f2:b6:a4:
b1:f3:bf:d8:4a:15:fa:6d:d8:03:cb:03:b7:24:74:0c:52:f1:
3c:25:cb:a0:ff:ef:13:19:00:f4:6d:9d:f5:63:e9:72:9a:e2:
ef:93:2b:66:1c:f8:8a:63:fb:7c:b8:2e:60:c0:1f:41:51:85:
db:f8:93:5a:5a:f7:0d:45:0a:a6:42:d8:38:cb:cf:03:97:f2:
e8:25:1f:99:57:1d:db:91:4c:93:9f:65:9d:eb:bd:82:d7:5b:
13:ac:95:b9:f2:55:93:6e:33:11:82:50:01:2e:37:2e:c8:26:
c2:36:79:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 13:47:22 2026 by rpki-client