Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/19693C92811C11F1A5617DBCCE1D38B0.roa
File: 19693C92811C11F1A5617DBCCE1D38B0.roa (raw, json)
Hash identifier: RMQ37dPU0hQbd4x7Dk1s/KuDRImAy5uTu/uRIg2qb/0=
Subject key identifier: 0E:13:90:60:A0:81:C6:41:C1:8B:30:0C:F9:F6:BE:93:06:C7:18:F2
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0CC3
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/19693C92811C11F1A5617DBCCE1D38B0.roa
Signing time: Thu 16 Jul 2026 13:41:51 +0000
ROA not before: Thu 16 Jul 2026 13:41:47 +0000
ROA not after: Wed 31 Dec 2036 13:41:47 +0000
asID: 5650
IP address blocks: 165.49.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Jul 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3267 (0xcc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Jul 16 13:41:47 2026 GMT
Not After : Dec 31 13:41:47 2036 GMT
Subject: CN=6a58df9f-8e18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:29:d7:54:5b:bb:3a:fb:0c:e4:af:21:2b:85:
18:81:29:a9:5f:ee:ab:e6:d2:2f:42:46:7c:18:1a:
85:d3:56:e4:2a:ed:91:02:95:9d:52:22:38:f6:ae:
e6:ad:a7:ca:f2:84:8d:4f:e7:f6:58:1f:32:85:33:
ae:62:5f:e6:dc:ec:8b:e9:c1:e0:75:13:f2:89:f4:
eb:1d:c7:a7:05:58:c1:90:0f:67:50:02:e0:22:f7:
ed:77:7f:fc:9a:93:51:63:7f:87:2b:7f:a7:87:06:
15:1f:4f:cd:f2:b5:b5:99:08:a4:bc:14:1c:a0:3d:
a3:14:2c:11:db:6b:4a:d2:e4:d7:05:9e:70:fc:21:
c2:4d:44:51:1b:dd:25:4c:be:e4:10:37:1c:a5:30:
d9:73:0e:ff:84:dd:74:29:c2:f9:c5:49:f4:6a:2b:
4d:d1:aa:a1:14:8f:a1:1e:20:7c:2e:1a:22:7f:1d:
3a:94:2c:c2:18:c4:00:75:4f:08:23:79:a8:54:44:
0a:05:5f:ff:37:34:71:fa:ad:5d:06:10:82:aa:8e:
62:1f:01:00:d9:e4:25:6f:03:75:8f:97:e4:86:b4:
64:49:97:98:d7:b8:ed:c7:8d:6f:b1:91:e5:07:cc:
df:1c:3d:88:cb:26:d8:b2:00:5b:d7:13:17:81:85:
3b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:13:90:60:A0:81:C6:41:C1:8B:30:0C:F9:F6:BE:93:06:C7:18:F2
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/19693C92811C11F1A5617DBCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.98.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:53:f6:5d:69:f5:85:68:12:58:fa:11:be:2b:d1:89:16:73:
b0:b3:0f:69:68:38:08:9b:ff:11:3f:94:cd:af:14:22:5b:36:
6e:e1:75:cd:ce:15:85:60:f3:b2:7f:9c:69:e9:23:6a:51:61:
8b:fc:13:6d:7a:dc:40:9b:ce:ed:a7:f1:d5:a6:d3:5d:bb:84:
6a:85:c3:eb:dd:b1:99:75:b7:79:88:b6:c9:bc:06:33:63:19:
c5:d6:47:aa:ac:cd:f3:2a:7d:d2:d0:e2:98:d5:ba:3f:d1:09:
c3:46:5e:6b:9a:23:f5:9e:d6:9e:35:da:71:7c:b7:11:b8:fd:
c9:b7:f5:94:48:be:34:85:19:31:9e:c6:f9:fd:91:f4:d9:56:
02:9c:2d:c0:3b:eb:ca:4b:2c:f7:b7:ff:c5:7b:c9:e6:4a:31:
91:fe:c5:75:27:7c:43:b0:18:70:6a:f4:34:5f:6c:a3:29:59:
fc:e9:7d:37:f8:91:ad:7a:17:56:61:da:fb:fa:7b:af:ba:14:
20:50:2d:de:e9:d3:fe:49:42:93:41:00:1e:54:45:7b:e0:87:
fc:fe:59:bd:f2:c6:34:e6:02:fd:7f:bd:59:76:5c:48:7e:27:
99:26:90:2f:44:d8:38:25:41:be:ce:74:f0:18:42:5e:04:27:
0a:8e:e0:29
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICDMMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTQ0RUFBUjExMC8GA1UEBRMoRjg1QkI0OTg1NDM5MjIyOEZCOEIzMERCMDVEOTZB
QzY2NENFODNBQjAeFw0yNjA3MTYxMzQxNDdaFw0zNjEyMzExMzQxNDdaMBgxFjAU
BgNVBAMTDTZhNThkZjlmLThlMTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDFKddUW7s6+wzkryErhRiBKalf7qvm0i9CRnwYGoXTVuQq7ZEClZ1SIjj2
ruatp8ryhI1P5/ZYHzKFM65iX+bc7IvpweB1E/KJ9Osdx6cFWMGQD2dQAuAi9+13
f/yak1Fjf4crf6eHBhUfT83ytbWZCKS8FBygPaMULBHba0rS5NcFnnD8IcJNRFEb
3SVMvuQQNxylMNlzDv+E3XQpwvnFSfRqK03RqqEUj6EeIHwuGiJ/HTqULMIYxAB1
TwgjeahURAoFX/83NHH6rV0GEIKqjmIfAQDZ5CVvA3WPl+SGtGRJl5jXuO3HjW+x
keUHzN8cPYjLJtiyAFvXExeBhTvJAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUDhOQ
YKCBxkHBizAM+fa+kwbHGPIwHwYDVR0jBBgwFoAU+Fu0mFQ5Iij7izDbBdlqxmTO
g6swDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkE0NEVBL0E4QjdFQzFDODkwOTExRTlCNTdFNjg1RkY4QUVBMjI4Ly1GdTBt
RlE1SWlqN2l6RGJCZGxxeG1UT2c2cy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
Ly1GdTBtRlE1SWlqN2l6RGJCZGxxeG1UT2c2cy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkE0NEVBL0E4QjdFQzFDODkwOTExRTlCNTdFNjg1RkY4QUVB
MjI4LzE5NjkzQzkyODExQzExRjFBNTYxN0RCQ0NFMUQzOEIwLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAClMWIwDQYJKoZIhvcNAQELBQAD
ggEBAAxT9l1p9YVoElj6Eb4r0YkWc7CzD2loOAib/xE/lM2vFCJbNm7hdc3OFYVg
87J/nGnpI2pRYYv8E2163ECbzu2n8dWm0127hGqFw+vdsZl1t3mItsm8BjNjGcXW
R6qszfMqfdLQ4pjVuj/RCcNGXmuaI/We1p412nF8txG4/cm39ZRIvjSFGTGexvn9
kfTZVgKcLcA768pLLPe3/8V7yeZKMZH+xXUnfEOwGHBq9DRfbKMpWfzpfTf4ka16
F1Zh2vv6e6+6FCBQLd7p0/5JQpNBAB5URXvgh/z+Wb3yxjTmAv1/vVl2XEh+J5km
kC9E2DglQb7OdPAYQl4EJwqO4Ck=
-----END CERTIFICATE-----
Generated at Mon Jul 20 13:46:54 2026 by rpki-client