Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/2ACC9136802D11F19D0E1ECBCE1D38B0.roa
File: 2ACC9136802D11F19D0E1ECBCE1D38B0.roa (raw, json)
Hash identifier: WuHioWEVr/wnlsw1LorqMdk5UfaN8TMp4IsZsxAZOSY=
Subject key identifier: A5:9A:AC:4A:ED:C3:33:38:47:CE:02:8A:68:A6:59:4B:BD:8D:F7:DB
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0C8D
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/2ACC9136802D11F19D0E1ECBCE1D38B0.roa
Signing time: Wed 15 Jul 2026 09:11:31 +0000
ROA not before: Wed 15 Jul 2026 09:11:27 +0000
ROA not after: Wed 31 Dec 2036 09:11:27 +0000
asID: 12083
IP address blocks: 165.49.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3213 (0xc8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Jul 15 09:11:27 2026 GMT
Not After : Dec 31 09:11:27 2036 GMT
Subject: CN=6a574ec3-b70c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:da:33:b3:2e:d8:71:d0:ee:7a:78:fd:bb:a9:
58:50:0a:2a:af:e9:ce:b8:5d:22:fe:7c:c9:d0:9f:
06:65:9f:11:b2:b4:5a:6b:8a:8a:f6:cd:90:18:b0:
21:f6:a4:fe:b0:44:2a:b7:2b:35:12:e3:b9:da:c5:
46:fe:ce:fb:4d:1e:b7:8f:19:09:6c:db:f7:ab:db:
b7:eb:db:52:e3:07:b9:f1:b9:9f:38:9d:6b:b5:fd:
4a:5d:3f:19:2d:6b:23:e3:b2:03:15:5a:6b:d8:db:
c6:9d:a2:bb:44:ca:6e:24:37:e3:a1:0b:d3:39:21:
47:49:54:e9:2a:df:22:04:e9:ed:13:34:d4:99:07:
55:b0:aa:be:c5:c8:35:36:ae:a8:3e:8f:38:20:c0:
0a:2e:25:4c:94:cc:4a:eb:50:4a:02:5d:dc:ac:85:
09:f5:82:f7:d7:a6:18:af:26:72:1d:73:ed:3d:e6:
fe:db:a1:98:81:a5:3c:48:ff:9e:30:2a:0e:40:25:
38:73:46:f2:ba:7e:ce:fa:ad:97:f0:21:bb:fc:b4:
f3:12:38:16:ee:2d:95:78:6d:bc:7e:42:e3:d2:aa:
e3:93:cb:e6:42:04:ee:13:34:0f:ef:f2:72:90:04:
00:e3:e4:39:03:68:ed:ac:25:40:d9:c7:f6:82:fd:
b3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:9A:AC:4A:ED:C3:33:38:47:CE:02:8A:68:A6:59:4B:BD:8D:F7:DB
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/2ACC9136802D11F19D0E1ECBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.121.0/24
Signature Algorithm: sha256WithRSAEncryption
06:38:77:ed:27:34:e5:4d:1f:8d:4a:67:9e:e3:c0:c6:85:91:
31:fb:7e:b7:8b:7c:cf:90:24:2e:eb:4c:c7:61:8a:e6:19:cc:
60:2a:79:f0:1a:16:e8:3f:f9:2e:7b:9b:4e:d5:62:bf:16:bf:
54:8c:cc:79:4b:ec:ee:34:b8:33:cf:fa:87:c5:77:d2:93:e9:
d8:bc:19:db:2d:4e:13:e5:ee:fe:64:ed:9a:23:b8:bf:e2:b4:
60:9b:b6:77:4b:59:e9:5b:eb:a9:8e:22:fe:ab:f4:a6:a6:67:
eb:f9:a9:ce:01:e6:af:dc:79:a8:95:1c:6f:dc:8c:94:b0:22:
94:ef:b8:fd:bb:a1:6b:e3:39:c2:c5:2b:66:fc:47:1e:35:61:
5e:a5:df:6b:50:e3:b1:8a:77:5f:31:7e:d0:e9:fc:68:62:37:
5d:47:71:7f:d2:0c:2e:41:1b:6d:77:5f:a8:49:fc:e1:f0:de:
df:08:30:50:f8:9a:f4:db:fe:eb:4c:d4:e3:8b:45:1e:58:69:
8b:21:b1:80:b3:6a:7a:12:ae:f7:24:d4:c3:59:63:67:01:64:
f7:82:7f:0b:53:81:d6:01:11:d2:38:3f:9a:f7:34:ee:2a:e1:
f4:f3:9d:2d:86:a9:56:b0:6f:2b:2d:d8:7b:f9:cf:8e:5a:6d:
2a:75:3c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 03:35:15 2026 by rpki-client