Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/0DF17018811D11F1A708FBC0CE1D38B0.roa
File: 0DF17018811D11F1A708FBC0CE1D38B0.roa (raw, json)
Hash identifier: FvHjvNgCA0RYVd+DrVdpgxSqv2Qu6ADLDV4BgkzCbuQ=
Subject key identifier: 26:D9:F0:24:A9:52:81:06:5D:81:F7:4F:F1:A8:9E:F6:BB:A6:1F:26
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0CE7
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/0DF17018811D11F1A708FBC0CE1D38B0.roa
Signing time: Thu 16 Jul 2026 13:48:42 +0000
ROA not before: Thu 16 Jul 2026 13:48:38 +0000
ROA not after: Wed 31 Dec 2036 13:48:38 +0000
asID: 13347
IP address blocks: 165.49.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3303 (0xce7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Jul 16 13:48:38 2026 GMT
Not After : Dec 31 13:48:38 2036 GMT
Subject: CN=6a58e139-5107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:74:61:e3:cc:52:70:94:da:0c:6b:b7:b0:47:
86:13:40:6f:28:8d:52:c3:2f:40:54:07:d4:bb:b4:
e3:3f:f0:28:49:3d:c7:3e:95:41:d8:c2:68:40:af:
f1:d3:1f:c8:41:11:91:91:26:c6:5c:b2:64:59:d3:
b0:9b:5f:21:b3:e2:6e:53:83:8f:5b:28:44:3a:ff:
19:88:33:4e:86:9e:22:02:ca:bf:5d:37:92:90:c8:
2b:34:b9:80:a7:d0:d0:f7:a6:8b:92:44:f4:10:52:
da:1d:96:42:ac:22:76:46:37:b3:1f:b8:f3:2d:c1:
65:ef:92:35:52:2d:cf:4e:3a:6c:2c:30:a6:55:94:
27:be:42:99:3d:db:d9:be:e4:20:18:ba:cd:80:5e:
88:9d:18:b2:48:a1:ca:52:13:9c:06:b3:bb:33:48:
cf:51:df:ca:09:6f:3e:3d:75:b0:61:93:50:ec:9f:
2e:28:ec:26:fd:b4:21:d9:46:68:b0:56:19:43:76:
2e:61:d0:b6:a8:bc:0d:b3:b8:87:92:90:25:70:eb:
bd:16:cb:97:08:70:77:87:70:28:94:1e:7e:37:da:
85:2a:35:3e:c8:c3:e8:9b:dc:ae:9a:d0:e0:e6:8b:
ee:d3:d1:18:56:8f:1b:29:79:61:a0:20:61:a7:a7:
41:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:D9:F0:24:A9:52:81:06:5D:81:F7:4F:F1:A8:9E:F6:BB:A6:1F:26
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/0DF17018811D11F1A708FBC0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.91.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:97:43:f9:75:70:e8:6c:5c:47:f6:48:41:d7:e8:08:71:66:
81:b4:bb:23:88:ed:27:8c:de:8d:20:47:9e:bb:2a:d8:32:30:
2d:3d:67:eb:95:ef:78:6f:fd:50:db:35:bf:d1:54:83:e0:1f:
a9:45:49:a7:e6:42:ce:2b:29:6d:29:54:89:d2:57:bd:86:f8:
a5:27:be:fd:a9:28:06:a6:04:f5:a8:f5:48:33:af:ab:b2:b3:
9d:42:66:c6:28:56:7c:ef:10:f9:c5:9c:12:54:e2:62:4d:5a:
53:0b:98:1b:94:8b:d0:01:ae:9d:bb:e1:11:bf:47:fe:04:5e:
4c:b4:9a:98:9f:e8:36:f0:52:d9:a0:21:c6:0c:1d:cd:21:c4:
ed:6c:5b:5c:85:ac:dc:1a:6c:7f:04:7c:7c:ce:ba:d0:41:8c:
f0:7d:6b:dd:b1:d6:ef:77:30:68:41:e1:4f:15:a9:07:18:d2:
dd:14:03:65:0b:f4:4d:f7:f3:1a:96:66:29:7d:8a:22:89:b7:
94:b2:9f:da:89:7f:35:a8:cb:25:e1:b5:7d:2f:fe:f6:e4:f0:
40:19:fe:1c:04:55:6f:9b:e6:9f:91:a0:29:2f:95:8d:8c:50:
60:92:ac:a7:ba:7e:fc:46:93:87:a0:8e:2c:5c:29:13:14:57:
ac:68:51:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:35:06 2026 by rpki-client