Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/2CDE88A4811C11F1989B87BCCE1D38B0.roa
File: 2CDE88A4811C11F1989B87BCCE1D38B0.roa (raw, json)
Hash identifier: uiPnbx48YCo7QUmTj4hnpefEYOmD9s9dalfWx9icHwo=
Subject key identifier: BA:2B:C9:6E:B3:CB:B6:C8:58:BA:98:95:D2:A6:EB:D8:F4:08:52:28
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0CC7
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/2CDE88A4811C11F1989B87BCCE1D38B0.roa
Signing time: Thu 16 Jul 2026 13:42:24 +0000
ROA not before: Thu 16 Jul 2026 13:42:20 +0000
ROA not after: Wed 31 Dec 2036 13:42:20 +0000
asID: 5650
IP address blocks: 165.49.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Jul 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3271 (0xcc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Jul 16 13:42:20 2026 GMT
Not After : Dec 31 13:42:20 2036 GMT
Subject: CN=6a58dfc0-5f87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cc:e9:5f:94:f6:39:e6:76:e3:73:7b:53:a5:
76:4d:05:e6:51:5b:ea:6f:15:8d:4d:ca:5b:07:a9:
69:6a:16:72:3c:4f:77:c3:fc:33:e8:11:ca:dc:bb:
29:90:5b:f5:6a:36:5c:0b:e7:1f:95:26:eb:5e:4d:
92:04:00:8e:7e:27:be:b3:ce:59:96:70:87:f9:23:
e7:b3:07:0b:dc:51:6b:78:f9:c3:8e:f7:d2:69:45:
14:4a:ca:58:93:e3:65:69:96:7a:1f:fc:70:16:0f:
cb:4b:91:79:68:73:a5:86:72:4f:df:b1:69:a1:9e:
79:c0:d9:79:89:e5:cd:cd:cc:ad:2b:ae:7d:cd:53:
d6:bb:0f:fc:4f:f1:54:75:62:aa:67:b3:7b:56:35:
9a:ba:00:fd:30:07:1d:0f:a9:3f:10:4d:d8:f4:6a:
b6:a1:82:de:d5:0c:71:85:f2:fe:13:6d:f4:26:e0:
a8:ed:2d:9a:f4:76:d8:33:db:b8:e2:0b:4e:aa:0c:
4e:e2:9f:e4:6b:d1:3d:27:03:00:71:bd:da:a7:f9:
8b:82:a1:f7:25:7c:36:ce:b0:b4:18:1b:c7:9f:ec:
f5:c9:e9:ce:46:18:8b:a6:31:f4:07:fe:83:65:35:
00:8a:34:6a:cc:70:81:01:62:1b:9e:c9:9f:db:65:
83:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:2B:C9:6E:B3:CB:B6:C8:58:BA:98:95:D2:A6:EB:D8:F4:08:52:28
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/2CDE88A4811C11F1989B87BCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.100.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:b9:b0:ae:63:65:a7:33:33:17:50:ac:3d:da:db:7a:18:c2:
c0:2d:91:8d:7e:e0:ba:eb:ac:e5:cd:92:fd:97:d9:14:9a:46:
19:42:fd:95:41:8b:38:48:6e:6f:54:e3:7d:eb:54:67:3d:17:
cd:80:88:7b:f8:15:40:1e:ff:f2:36:6e:d4:1e:e9:e2:0d:be:
93:3e:9b:58:ec:4c:79:6d:ee:5b:5b:41:c0:df:47:81:24:43:
d2:ab:27:b3:77:cb:47:15:cf:27:83:e0:ee:37:89:22:27:d4:
5d:48:7a:21:88:22:ae:3f:0f:75:48:7c:cd:b3:13:89:83:d3:
e8:95:ed:ff:73:ce:79:8b:c0:43:a1:99:40:e8:16:be:b5:5b:
fc:cc:eb:b0:10:e9:0e:b0:26:3a:65:ca:48:5b:0e:63:b8:91:
87:92:ae:a7:9e:5c:17:7f:03:66:f2:79:a6:ba:f7:09:03:ef:
49:ea:e9:1f:f8:b3:e8:8a:9b:8b:a4:65:d2:14:5f:39:6f:45:
7c:9c:b3:b3:34:ca:c5:d2:11:13:5d:10:8a:c5:10:88:37:50:
60:27:47:9a:08:8c:9a:17:0c:67:0c:f9:a9:e0:0c:8f:d1:d0:
69:32:05:a5:6b:15:e4:93:fd:7a:cd:25:61:47:f1:a2:c3:12:
17:0b:12:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 13:47:21 2026 by rpki-client