Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/18C0EADC811D11F1976A00C1CE1D38B0.roa
File: 18C0EADC811D11F1976A00C1CE1D38B0.roa (raw, json)
Hash identifier: aZ9w78aBQcUVY/k32TX23ltLAluSJ/NfiazSM0dsQos=
Subject key identifier: FA:9A:A6:6B:A4:5B:4D:C3:62:B3:39:F6:9F:79:36:22:5F:D0:1E:E2
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0CE9
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/18C0EADC811D11F1976A00C1CE1D38B0.roa
Signing time: Thu 16 Jul 2026 13:49:00 +0000
ROA not before: Thu 16 Jul 2026 13:48:56 +0000
ROA not after: Wed 31 Dec 2036 13:48:56 +0000
asID: 13347
IP address blocks: 165.49.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3305 (0xce9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Jul 16 13:48:56 2026 GMT
Not After : Dec 31 13:48:56 2036 GMT
Subject: CN=6a58e14c-e8d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1c:67:62:62:b3:6c:77:ae:15:2a:94:62:f5:
ba:2a:aa:e1:57:cd:91:34:d4:29:61:52:9c:16:a1:
de:d5:55:b8:ce:fe:02:9a:61:08:19:27:09:49:5b:
16:6f:3c:ff:86:cf:97:4e:b9:bc:3b:dd:b7:38:05:
ee:63:4d:24:bb:89:8c:4b:62:35:8e:91:40:7a:74:
e9:25:fb:39:77:e0:42:b2:e8:ba:ca:5d:a2:2f:28:
f8:d0:e1:0e:ea:bf:ca:d6:bd:2b:36:f9:68:8f:14:
da:04:32:31:b4:7a:01:1d:e3:3b:63:3f:02:8d:54:
b1:0d:19:e1:56:53:f4:a2:1c:8e:40:de:19:7a:4e:
1f:a6:bc:bc:73:3b:1a:52:1b:f0:61:19:58:48:e8:
7a:b9:e8:4f:50:88:a9:e9:6b:0d:00:36:f1:4c:53:
1c:1b:3b:66:3b:72:95:c7:40:af:18:28:c5:fa:17:
23:2b:d8:b4:b0:01:69:d7:6f:b6:f3:c2:46:60:1c:
c3:77:cb:09:4d:98:3a:c0:be:cc:a7:fd:11:07:ce:
f1:94:55:fc:c7:8f:e6:0d:4a:8d:1f:d9:b2:d5:4c:
af:40:20:92:eb:92:b5:a8:03:22:ca:c1:3d:39:eb:
0e:b0:f1:37:64:f2:7f:56:1f:7c:ee:c5:b6:bc:5c:
9f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:9A:A6:6B:A4:5B:4D:C3:62:B3:39:F6:9F:79:36:22:5F:D0:1E:E2
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/18C0EADC811D11F1976A00C1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.92.0/24
Signature Algorithm: sha256WithRSAEncryption
47:10:42:f1:35:5c:a7:7f:66:9e:bb:22:7e:e7:a7:49:1c:d5:
b2:01:97:cc:3b:f1:4d:93:99:20:9a:23:31:b0:1b:c0:91:4f:
88:d1:32:d4:32:28:b7:b2:16:37:02:ce:c6:63:bb:09:2d:93:
55:57:d9:1f:b9:72:b9:b5:bc:8c:bc:97:73:e7:c6:82:50:99:
da:1e:f3:5f:80:10:c9:3f:3e:dc:38:cf:3e:e1:e5:90:6f:2f:
32:c4:2d:3a:ce:1f:13:bc:be:3c:d7:24:92:73:1a:ee:46:76:
9c:2b:19:32:a9:ed:e8:9c:e9:ff:7b:8f:d7:52:ed:e9:9f:00:
93:3c:75:6a:80:f8:4a:04:e7:14:54:3e:ec:fd:d4:80:2a:d1:
a0:c0:fb:4c:b9:04:8a:b6:db:83:84:55:3d:76:93:49:7a:07:
bd:be:75:d9:e1:f7:fc:0c:db:fe:a2:9c:b6:db:cc:0d:68:db:
ed:ae:93:24:6c:82:81:16:90:b8:7c:c5:b3:f1:29:68:9c:33:
ea:ae:82:13:9a:39:12:9f:91:c6:48:af:fb:4d:49:db:61:54:
1b:31:72:9a:22:a4:23:09:82:07:7b:ca:c1:4b:28:25:68:43:
70:35:40:f5:27:48:38:9a:61:28:99:da:27:05:08:f2:56:cf:
73:34:bf:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:35:02 2026 by rpki-client