Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/11EE65CE732411F19C22CDC2CE1D38B0.roa
File: 11EE65CE732411F19C22CDC2CE1D38B0.roa (raw, json)
Hash identifier: qHw1XUEMx2jP4AM2s3BAsgwuEeqRLdkKJt1XwOcGmZ4=
Subject key identifier: 9A:C2:B5:E8:B5:5C:75:DA:15:F3:5E:66:EF:6D:08:8F:92:C8:6C:ED
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0C43
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/11EE65CE732411F19C22CDC2CE1D38B0.roa
Signing time: Sun 28 Jun 2026 19:03:38 +0000
ROA not before: Sun 28 Jun 2026 19:03:34 +0000
ROA not after: Wed 31 Dec 2036 19:03:34 +0000
asID: 207343
IP address blocks: 165.49.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3139 (0xc43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Jun 28 19:03:34 2026 GMT
Not After : Dec 31 19:03:34 2036 GMT
Subject: CN=6a41700a-d322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:76:4b:fd:50:41:0d:d8:19:b9:08:7c:75:3f:
68:92:20:27:ba:ca:23:d8:95:88:86:af:3c:79:2b:
67:f1:12:a2:c3:b6:cd:10:14:2f:cb:f2:f3:bf:e1:
78:65:02:a7:6e:9d:ea:98:23:1d:ed:67:d6:e1:a8:
ad:49:8c:7f:49:fa:a8:d6:c8:c4:21:88:94:1e:c7:
72:11:7b:48:56:92:68:b9:ba:55:98:72:8b:82:4d:
b4:a3:e4:81:db:df:95:ae:ba:42:d3:86:87:e5:e1:
52:0b:9f:e0:24:74:ff:07:7d:c3:8b:b3:89:58:d1:
2c:3c:12:d2:d3:94:47:b2:21:ea:71:c6:a2:18:63:
b4:49:16:9e:14:58:b9:f8:b0:44:79:24:f0:58:f1:
da:76:a6:23:67:9c:db:90:1a:5c:e3:13:ec:1f:3f:
62:de:4d:9b:9f:28:d0:5e:b3:fd:e4:75:6b:e9:4f:
1a:25:f4:00:1a:85:96:5e:7a:94:6a:a2:59:5e:d0:
f3:6e:74:a0:ad:b2:4c:33:76:e8:59:21:7a:94:9b:
4d:73:fb:e7:44:2a:98:b4:dd:52:bc:00:2b:ca:7a:
16:29:9a:0f:b2:cc:fa:16:47:46:be:62:db:02:60:
25:90:51:ee:16:a8:7b:9c:34:c2:7e:43:54:8f:60:
47:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:C2:B5:E8:B5:5C:75:DA:15:F3:5E:66:EF:6D:08:8F:92:C8:6C:ED
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/11EE65CE732411F19C22CDC2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.239.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:77:95:80:32:df:25:82:11:87:c5:4c:53:30:ab:a9:a8:9c:
df:f2:b7:cf:80:52:9f:3e:c7:67:51:8d:33:49:70:0b:a0:7f:
75:64:bd:ea:7a:2b:bb:37:2f:54:2b:6f:30:8b:45:fb:98:2b:
b5:e2:df:ce:d3:62:1c:69:6e:30:43:9e:c9:f7:25:ce:c1:35:
9b:8c:30:b8:7c:e7:af:28:f4:9a:1f:7f:27:26:ba:5f:42:d3:
65:5b:88:a7:a7:7d:dd:fc:5b:fd:28:13:e8:81:af:a8:ee:93:
31:8f:2a:92:fe:a9:e3:e3:51:71:ee:af:11:c9:27:c7:d9:b3:
7e:6b:22:1c:ec:35:b1:ca:d6:61:a0:6a:1d:9b:89:81:94:24:
bc:02:8a:66:b0:b1:8b:15:2a:de:5e:3c:72:98:4c:0b:0f:ea:
1c:92:8c:49:a8:ab:53:fa:9c:09:8c:ee:1e:a7:8f:e7:d5:70:
b6:f5:ee:6e:bf:68:0b:61:fb:f1:db:be:10:c4:52:1c:ae:9b:
fe:fa:c2:4b:a6:d4:66:3c:37:18:2d:52:a4:c0:8b:92:ee:e5:
96:4a:7b:2a:ac:78:88:28:21:a5:ba:bd:b9:3f:00:72:ef:b1:
cd:25:43:f4:64:0a:97:9f:c2:29:bf:e9:41:cd:e4:5a:05:03:
77:7c:da:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 18:14:14 2026 by rpki-client