Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/0A010E8E811B11F19D666DB4CE1D38B0.roa
File: 0A010E8E811B11F19D666DB4CE1D38B0.roa (raw, json)
Hash identifier: DucLhVPwuDoNzChCjcqvGaI6IFpS+xhMpChSpurUQjc=
Subject key identifier: AE:9A:06:8A:3E:BA:A8:03:5F:6E:A4:C2:21:90:37:97:11:A1:3F:85
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0CB5
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/0A010E8E811B11F19D666DB4CE1D38B0.roa
Signing time: Thu 16 Jul 2026 13:34:16 +0000
ROA not before: Thu 16 Jul 2026 13:34:12 +0000
ROA not after: Wed 31 Dec 2036 13:34:12 +0000
asID: 5650
IP address blocks: 165.49.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Jul 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3253 (0xcb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Jul 16 13:34:12 2026 GMT
Not After : Dec 31 13:34:12 2036 GMT
Subject: CN=6a58ddd8-22bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:10:5f:37:86:8c:0b:16:37:61:c0:96:d7:50:
49:4d:c0:5e:02:15:4a:e7:f3:df:32:2a:d4:05:15:
12:35:c0:38:5e:24:92:3a:f4:02:6a:b9:f9:a4:d8:
b9:fe:6d:13:b3:84:67:e4:9e:e2:9d:d4:f0:a9:83:
77:ad:a5:f8:37:2a:44:f6:87:9d:95:21:55:79:4b:
e7:9c:94:6d:d4:84:9e:94:60:9a:65:52:37:26:13:
3a:4d:0d:06:fd:9e:d2:b0:31:be:f0:43:e1:68:71:
f2:79:c8:44:9a:2c:02:69:d0:a7:80:7b:c7:ae:87:
9e:9d:c4:76:36:8e:96:44:42:48:a0:21:fc:3f:7c:
5b:c1:c0:3b:11:14:12:6f:06:6e:0a:56:1b:a9:07:
49:27:86:7e:ec:ab:67:06:77:04:3c:bd:30:75:72:
e2:8e:1e:24:4b:57:9b:7d:e3:13:b7:f7:90:b3:51:
e2:c9:48:3c:1f:44:17:36:ed:9e:d0:5f:8a:15:e4:
4c:48:3e:7f:81:c3:52:d0:2e:cb:73:5a:69:6f:0f:
89:49:28:a5:04:e7:1e:fb:20:2b:1a:29:21:f3:88:
a9:0b:fb:5f:07:77:e5:d9:fb:60:d2:c8:7c:a9:90:
36:af:42:7f:b0:24:e2:f8:d6:e8:3f:90:b1:19:50:
e2:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:9A:06:8A:3E:BA:A8:03:5F:6E:A4:C2:21:90:37:97:11:A1:3F:85
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/0A010E8E811B11F19D666DB4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.91.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:ec:7b:63:93:68:bd:b4:0c:59:75:9f:27:ff:bf:f2:b5:7a:
0b:a9:2a:c3:cc:fa:21:61:63:a7:93:76:d3:95:ce:ed:08:45:
98:68:2b:31:97:0a:68:9d:ca:cd:74:31:46:d8:b9:6e:0b:64:
48:42:38:ae:e1:d1:db:44:71:d3:4f:59:5c:b3:55:00:28:e1:
4f:69:7b:d1:10:d9:97:0a:5a:9e:26:1c:21:98:04:b5:db:ad:
98:f1:d7:7e:26:7e:98:cd:bb:7d:51:93:4a:38:a4:9f:14:57:
08:66:f1:9c:c4:76:c8:37:37:dd:93:71:6f:50:98:04:fd:28:
67:27:90:d3:9a:61:bd:d3:d5:3e:e3:29:9c:1b:94:87:f0:9a:
e2:c7:64:c7:37:31:d7:13:6a:e2:d1:60:c2:72:06:fc:75:f2:
5a:ab:6c:1b:f8:35:d7:b4:56:9c:c7:d5:c5:47:09:4a:27:13:
62:00:f3:4c:3a:de:f3:b7:a2:40:8c:b4:4c:06:6d:bc:d9:9e:
84:41:6d:b9:74:eb:6c:9e:3a:94:c8:0a:cd:65:2b:be:c8:f1:
92:0a:07:e8:29:54:a5:e6:0d:b8:e9:f8:1f:75:cb:39:92:b5:
36:3a:6f:ac:9b:24:db:88:ed:9d:af:5d:52:77:19:93:31:b2:
47:40:84:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 13:47:14 2026 by rpki-client