Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/0D809B4A802D11F1937E89C7CE1D38B0.roa
File: 0D809B4A802D11F1937E89C7CE1D38B0.roa (raw, json)
Hash identifier: lQUaZXQl3yxQ+yyW+ghLsVKhdbwp3v632ZfchjDMyBM=
Subject key identifier: 39:C5:E4:1E:25:44:97:E4:60:8D:E2:AE:36:ED:5E:E4:37:A3:03:D1
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0C87
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/0D809B4A802D11F1937E89C7CE1D38B0.roa
Signing time: Wed 15 Jul 2026 09:10:42 +0000
ROA not before: Wed 15 Jul 2026 09:10:38 +0000
ROA not after: Wed 31 Dec 2036 09:10:38 +0000
asID: 12083
IP address blocks: 165.49.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3207 (0xc87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Jul 15 09:10:38 2026 GMT
Not After : Dec 31 09:10:38 2036 GMT
Subject: CN=6a574e92-9e0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:35:1d:3a:5f:d0:09:16:5d:d2:ac:8d:f3:c3:
68:c8:48:d3:ba:15:4e:3f:a4:31:32:fd:26:2a:d8:
72:d9:72:b5:45:45:27:1e:91:72:a6:1c:fc:a7:3c:
9a:c0:7e:30:a2:9a:4f:63:8e:24:6f:93:f4:f8:2e:
50:53:95:f5:2d:76:4e:c0:9d:ce:0e:2d:a6:fa:3e:
7b:00:fe:52:0a:5c:17:50:b7:91:09:e2:08:44:36:
c2:4d:58:89:1a:05:0b:f2:5d:7e:93:8b:26:e7:fa:
2d:b4:9e:f6:0b:27:e2:6c:21:37:7e:6b:17:89:36:
2c:cd:93:12:52:8c:bf:fa:a5:05:fa:fa:43:90:ad:
17:4c:f0:53:98:90:d7:c3:f4:9f:ce:17:ec:ac:52:
a0:1f:93:64:54:95:57:e7:82:59:30:de:df:1b:74:
8b:3a:32:db:5c:9c:f8:c8:e8:0c:84:48:01:d8:3c:
35:e3:4e:f1:26:6b:57:16:42:33:90:fe:a7:e9:5b:
1f:f3:fc:c9:5a:5d:4e:92:3d:78:91:35:0a:ad:b2:
9d:d3:80:82:8a:2f:b4:18:7e:2d:22:f2:48:a7:68:
8b:5e:a0:35:ef:f7:b7:15:32:5e:f9:d4:39:cb:ed:
ed:f6:16:65:42:66:77:3c:37:41:1b:d0:b2:f3:b2:
ee:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C5:E4:1E:25:44:97:E4:60:8D:E2:AE:36:ED:5E:E4:37:A3:03:D1
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/0D809B4A802D11F1937E89C7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.87.0/24
Signature Algorithm: sha256WithRSAEncryption
72:2e:a4:75:da:90:c6:4c:15:04:af:0a:4f:70:89:31:db:8c:
38:7c:88:ed:04:9a:e9:a3:fb:06:c1:dc:ff:27:b5:f8:1a:09:
07:77:7d:8f:2a:43:7a:8a:36:0a:4d:50:d4:6d:4e:08:8f:66:
02:de:8c:ad:25:23:71:fa:39:e4:dc:4d:17:ba:01:f3:83:4f:
2b:03:1b:8c:19:1d:8e:2e:24:6b:80:05:32:0b:b0:20:bd:65:
7d:a8:73:a4:06:4f:ec:81:ab:ff:95:a4:29:4c:4c:5d:1a:4c:
ce:f9:bd:4c:95:6c:b1:9b:3b:a4:b5:24:77:45:e9:b1:03:bd:
15:d4:92:66:c2:6c:85:36:63:93:ac:d9:81:02:44:66:f6:06:
c7:f7:ba:62:d1:59:7b:89:91:98:5c:ac:18:87:9e:2d:59:32:
fd:01:51:e4:92:1e:61:5e:3e:9e:12:78:25:b2:68:01:d1:32:
bb:fc:5a:39:2a:35:28:1b:8b:15:7e:8c:49:54:20:5d:68:51:
e9:1b:6b:8e:d9:54:85:52:c0:b0:ae:5a:3d:ef:a1:73:f7:da:
7c:65:39:3b:00:9e:c9:c5:f9:b9:54:22:0d:24:68:33:72:b3:
05:b7:7f:12:74:70:b9:f0:5a:03:9e:30:dd:d6:4a:8f:7c:d9:
0e:ff:4c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 03:35:15 2026 by rpki-client