Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/1E3541E4802C11F18BF7DFC2CE1D38B0.roa
File: 1E3541E4802C11F18BF7DFC2CE1D38B0.roa (raw, json)
Hash identifier: 2Rp7nvnOnlTBFXYencAOdXoTQxkpJsoFC8qtbP6rymo=
Subject key identifier: 7B:E1:9E:06:22:E1:43:79:85:24:97:44:13:06:EB:39:74:61:95:1C
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0C71
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/1E3541E4802C11F18BF7DFC2CE1D38B0.roa
Signing time: Wed 15 Jul 2026 09:04:00 +0000
ROA not before: Wed 15 Jul 2026 09:03:56 +0000
ROA not after: Wed 31 Dec 2036 09:03:56 +0000
asID: 12083
IP address blocks: 165.49.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3185 (0xc71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Jul 15 09:03:56 2026 GMT
Not After : Dec 31 09:03:56 2036 GMT
Subject: CN=6a574d00-2329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3c:b8:50:fb:63:8a:6b:e2:16:d3:8d:60:36:
8e:f2:11:e0:3c:de:49:54:7e:d2:bd:fc:7e:29:a7:
d7:6d:9e:79:b3:84:22:73:6e:c3:c0:9f:bb:4a:56:
6d:54:52:4d:29:74:5f:44:ef:8f:83:1d:ae:72:e7:
37:bf:51:d6:71:33:d6:1d:3f:8c:ff:4f:e1:70:f0:
e8:1f:6c:d8:6b:ec:7c:10:a1:37:26:b0:93:0e:6f:
e5:51:a3:4e:ae:28:df:87:1b:7c:a2:07:98:94:e1:
a7:42:ed:22:0b:57:bf:cb:09:45:ba:e6:ec:85:01:
87:2c:7b:d3:3b:af:f2:e5:78:29:18:43:7a:5a:d5:
a2:71:44:bd:f7:1b:43:11:9f:7f:36:61:4e:44:67:
6a:fc:d9:8d:c7:f6:ae:bb:d6:6f:91:4c:71:34:ae:
8a:b0:4a:2e:2b:da:f2:e4:b8:d2:6e:80:03:a5:72:
ce:bc:2c:9f:8e:1f:94:cf:5c:c6:eb:33:49:b3:93:
f0:09:c5:b2:0a:0b:6d:e6:3f:60:2b:f5:e5:71:38:
98:eb:33:33:92:d6:03:81:2f:a1:dd:19:0d:f9:d3:
50:a6:fd:b9:ab:7b:14:94:85:58:03:d0:50:84:ab:
86:c8:59:ea:e9:0f:d9:b7:4f:38:40:35:63:d7:b4:
a6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:E1:9E:06:22:E1:43:79:85:24:97:44:13:06:EB:39:74:61:95:1C
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/1E3541E4802C11F18BF7DFC2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.101.0/24
Signature Algorithm: sha256WithRSAEncryption
86:f1:7c:fd:91:e8:76:ae:29:d7:ad:ac:f8:3a:f7:47:80:ea:
4c:d9:47:70:0c:45:4c:b3:66:9b:09:e9:58:98:99:e5:7f:5a:
22:b7:19:25:80:6a:2e:1a:df:23:5d:89:83:cc:3b:53:84:8e:
a7:40:f0:87:c1:9f:44:e7:2e:52:66:28:88:a6:d0:f6:fa:fe:
02:bf:24:5e:73:ba:6b:9e:6d:d4:54:67:25:a9:50:4e:31:75:
4c:2b:84:26:cd:a3:61:4b:eb:e0:b0:b4:8f:de:d6:33:9f:e7:
c0:c9:2d:9d:22:80:e2:f5:04:d5:2c:a8:ef:24:e6:de:0f:b3:
0f:5e:2e:99:83:2d:43:a7:cc:ce:03:d4:9b:a6:42:25:59:b6:
46:b5:14:42:30:a1:35:9b:c2:11:8c:24:c9:48:fc:83:f9:53:
29:6d:da:8d:f8:8b:0f:7a:a8:d9:d0:27:68:6e:77:78:ff:76:
ab:6a:ff:a9:85:50:db:64:f4:48:5c:43:dd:8a:43:84:30:ca:
a1:3e:02:60:e7:bb:bf:ac:d4:76:fa:69:94:40:46:f3:8a:b7:
cf:65:71:93:b6:5e:06:0a:37:0b:9a:aa:1a:87:5d:ca:60:f7:
70:5a:77:f5:06:24:ff:38:79:56:53:01:5d:1c:5b:11:ff:be:
55:1a:41:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 03:35:10 2026 by rpki-client