Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/16F9839E802D11F1A0688EC7CE1D38B0.roa
File: 16F9839E802D11F1A0688EC7CE1D38B0.roa (raw, json)
Hash identifier: HpCitVvoCbUV8qMFjMPTBZtddfDya3TDQHa8StWte7k=
Subject key identifier: 62:6B:AF:9C:DA:68:41:52:5C:9B:99:D4:9A:C4:B1:CA:97:D1:77:12
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0C89
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/16F9839E802D11F1A0688EC7CE1D38B0.roa
Signing time: Wed 15 Jul 2026 09:10:57 +0000
ROA not before: Wed 15 Jul 2026 09:10:54 +0000
ROA not after: Wed 31 Dec 2036 09:10:54 +0000
asID: 12083
IP address blocks: 165.49.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3209 (0xc89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Jul 15 09:10:54 2026 GMT
Not After : Dec 31 09:10:54 2036 GMT
Subject: CN=6a574ea1-4565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5d:95:b2:29:c3:0c:43:df:a1:9b:c1:f9:62:
cd:9e:bc:26:26:99:63:b8:84:03:e3:9b:35:b8:4b:
06:70:ca:9b:20:8b:de:75:83:6a:75:0e:e7:a7:fe:
d0:c5:e2:ef:fb:eb:85:da:97:13:82:c0:66:e6:1f:
df:80:71:b4:08:54:c3:e3:8c:08:d8:64:ee:bd:ce:
11:45:2a:28:7d:2e:1d:b2:10:d9:c2:56:68:3d:7f:
1a:94:a0:17:cb:15:4c:43:4c:52:a6:3c:f7:b2:45:
cb:84:e6:88:f6:71:b3:17:a9:dc:b9:36:b7:d4:9a:
d9:f0:db:00:cf:14:79:78:68:43:fc:8b:88:89:57:
e6:f0:ee:15:d9:7d:62:56:ec:5d:a1:b7:a1:a3:22:
0c:7e:3d:c0:f9:8f:85:14:d9:1a:18:42:29:f5:2d:
86:f6:63:24:a3:e7:86:5c:39:2d:bb:f8:de:a8:a6:
e6:11:09:9c:81:12:17:c1:9f:c9:99:51:50:6c:37:
2d:41:00:21:43:db:50:91:00:ba:c1:29:f5:6e:93:
a3:e7:e6:33:c6:76:91:48:eb:b5:36:91:bc:d7:b3:
e1:22:7c:c3:3e:30:a1:c9:c2:fd:24:3d:67:f4:65:
c2:e5:02:e6:d8:c1:8c:f6:d3:80:7f:54:18:28:02:
07:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:6B:AF:9C:DA:68:41:52:5C:9B:99:D4:9A:C4:B1:CA:97:D1:77:12
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/16F9839E802D11F1A0688EC7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.123.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:6e:43:77:1d:ad:8f:dc:f1:d2:5b:5a:97:cd:e1:a2:4c:36:
c4:89:8b:bb:e3:0c:97:15:12:9b:06:ed:34:8f:1b:18:7e:b0:
54:eb:f5:57:9c:78:74:8a:0d:8c:6a:3b:0f:c1:da:48:03:27:
6c:65:63:89:3e:33:4b:70:d2:66:93:f4:3d:4c:b8:67:67:2c:
8b:25:9c:3d:cc:49:c9:9b:04:e8:5f:0b:81:d5:cc:5d:d2:b9:
30:0b:00:bb:09:5b:40:e8:e6:8d:7c:b3:b9:77:6c:4a:c1:8b:
3e:73:bc:98:33:12:ad:7a:3b:ce:ff:96:c4:82:d5:d0:a9:96:
ad:fc:ac:2a:86:e3:43:02:32:cf:25:bd:4e:0b:2f:dd:74:fc:
2b:0d:2c:53:7d:d3:c7:91:a4:67:3d:7d:6e:ff:89:0f:ca:18:
af:b4:cc:dd:1e:24:41:15:8a:9d:6d:0d:7c:ea:c6:cf:74:7c:
34:b5:6f:e4:91:0c:32:f6:75:3e:15:84:f7:c8:fd:7c:74:cb:
e2:5e:93:80:86:19:e0:bd:3d:15:01:1c:96:20:19:ae:d4:68:
93:60:5e:7d:fa:54:59:3e:41:f8:ac:0b:26:0e:c6:0f:d7:8c:
35:9d:d5:1c:5e:3c:97:1c:6d:39:f7:5a:da:fb:3f:0a:30:8f:
0a:81:e4:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 03:35:15 2026 by rpki-client