Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/23695780811D11F199DE13C1CE1D38B0.roa
File: 23695780811D11F199DE13C1CE1D38B0.roa (raw, json)
Hash identifier: EKBXWTHrTMRWArE5rpeHZq+iQJho5+WZw9XbAhkdoPo=
Subject key identifier: C7:B4:52:BE:A5:7D:3A:FF:69:A9:40:3B:23:ED:0A:63:1B:BF:DD:51
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0CEB
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/23695780811D11F199DE13C1CE1D38B0.roa
Signing time: Thu 16 Jul 2026 13:49:18 +0000
ROA not before: Thu 16 Jul 2026 13:49:14 +0000
ROA not after: Wed 31 Dec 2036 13:49:14 +0000
asID: 13347
IP address blocks: 165.49.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3307 (0xceb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Jul 16 13:49:14 2026 GMT
Not After : Dec 31 13:49:14 2036 GMT
Subject: CN=6a58e15d-d5a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:85:a9:af:06:66:ae:b2:73:19:34:bb:6e:74:
4a:8c:a6:5d:e4:4a:f2:dc:3d:02:45:18:f3:82:59:
01:3e:be:f7:21:3c:f1:db:8f:17:96:cf:2d:79:c3:
cd:6e:f8:33:62:a6:92:d0:d6:53:52:fb:bd:66:29:
33:ca:7c:fb:b0:3b:52:7f:96:e2:05:fb:40:65:63:
0f:4b:7c:17:b9:17:63:f2:f5:b6:22:ab:39:c0:b9:
a9:cb:72:10:18:57:6b:b5:e9:ee:9b:ce:22:64:b5:
9c:e8:81:75:c1:d4:49:18:33:4d:67:d5:b5:87:f7:
21:d2:72:b6:8c:8b:9d:85:05:9c:08:94:23:f8:3f:
52:9e:4a:88:7c:73:f8:aa:e4:5f:96:0d:47:40:82:
23:01:b0:f9:61:6d:7e:fb:0d:ac:e8:eb:1a:52:0c:
b2:fb:41:78:8c:fd:8e:be:db:cc:cd:f5:7b:e7:10:
da:f4:b0:39:c1:7d:d4:54:d5:e2:a0:2f:8c:4c:39:
03:70:45:0c:95:09:b2:07:e0:9d:e0:12:19:27:56:
e2:bb:ba:00:f4:47:bc:ac:43:25:c8:13:24:35:4b:
d1:f8:fc:7f:5a:26:73:ac:16:f0:03:84:d9:ad:49:
51:7a:84:ad:77:bf:30:67:70:d6:b8:f0:a6:45:ad:
50:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:B4:52:BE:A5:7D:3A:FF:69:A9:40:3B:23:ED:0A:63:1B:BF:DD:51
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/23695780811D11F199DE13C1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.93.0/24
Signature Algorithm: sha256WithRSAEncryption
12:2e:8f:50:31:cf:c1:29:3b:83:d6:c3:35:71:e7:70:39:55:
88:fa:7a:b7:99:e8:d5:7a:24:54:97:56:59:a4:10:52:46:be:
1e:be:f6:23:15:7d:8b:be:60:36:1e:40:fb:5d:c0:26:b0:e0:
62:10:05:88:04:ff:23:dc:cf:1e:5b:69:27:83:05:d5:26:21:
7b:b4:70:c2:b0:de:a4:7d:15:b4:fa:0a:24:67:71:89:8c:03:
67:a5:3a:29:d7:0d:cd:58:d8:e7:9a:ca:a5:8d:c1:e5:f8:f6:
d6:4f:af:52:36:04:cb:5c:f9:50:1e:5b:6d:f4:5b:cc:bb:04:
d7:06:0d:b1:32:71:9e:82:1f:98:92:5d:d1:8c:d8:d1:ae:18:
02:ea:bf:1f:7e:1f:ea:5f:61:25:ed:b4:45:3a:85:d7:7e:81:
6b:cf:ce:8a:17:9e:af:8f:cc:8a:a7:51:44:5d:59:0d:ad:5e:
ca:51:b3:3e:f7:8a:da:93:94:88:41:ab:9b:d6:a5:cc:7a:7d:
10:a4:22:76:77:b0:81:8b:7b:c8:e9:80:6e:6d:5b:04:45:c8:
9e:04:d6:25:09:1a:5c:4f:8d:86:aa:9c:a0:80:12:e3:81:6c:
37:41:cf:1d:dc:b9:b3:c7:70:e4:f6:9c:2f:2c:8c:6f:79:39:
ab:87:87:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:35:00 2026 by rpki-client