Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/3032A8E03CF311F18CBCCDABCE1D38B0.roa
File: 3032A8E03CF311F18CBCCDABCE1D38B0.roa (raw, json)
Hash identifier: 7v/2k/jSySlSriBacU5rvUMqShIUbkLjdAYVkahFccM=
Subject key identifier: 40:38:DC:19:32:4D:CC:69:28:00:E9:8C:88:83:02:D9:F0:99:E7:76
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0B86
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/3032A8E03CF311F18CBCCDABCE1D38B0.roa
Signing time: Mon 20 Apr 2026 19:57:41 +0000
ROA not before: Mon 20 Apr 2026 19:57:36 +0000
ROA not after: Wed 31 Dec 2036 19:57:36 +0000
asID: 216475
IP address blocks: 165.49.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 29 Apr 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2950 (0xb86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Apr 20 19:57:36 2026 GMT
Not After : Dec 31 19:57:36 2036 GMT
Subject: CN=69e68535-2b56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:83:a2:7e:fc:f4:a6:6b:61:91:ed:e8:8c:37:
e1:8b:24:37:22:ed:24:62:eb:24:59:51:b1:a7:c7:
4e:74:ad:25:5e:2f:01:ff:cb:e9:ee:ef:96:d5:e8:
35:2c:ec:46:d3:0b:26:d9:82:5d:7f:86:f9:75:af:
3a:2d:64:2b:ee:1a:93:d2:51:0c:7e:6e:b5:d3:83:
e8:33:31:2e:98:2f:ad:ca:8f:74:ce:05:94:27:09:
e8:26:7a:32:3b:97:76:8d:cc:de:c0:dc:e3:6e:31:
59:7f:98:9c:1f:00:1d:d0:bf:ca:26:2a:24:23:46:
b8:b1:7d:f3:b8:6b:a3:11:64:9a:42:ef:d6:e1:f0:
da:ee:e3:ee:99:28:18:7f:74:c4:db:8d:79:b0:fb:
ea:51:b8:17:3a:2e:dd:54:1f:ab:60:11:0e:95:36:
01:ff:30:f3:1b:4d:a5:0a:b5:51:de:7d:5f:3b:4c:
a6:2d:dd:47:ec:46:db:e1:b3:79:a5:fb:1e:1f:92:
54:e3:d7:79:91:51:fa:b9:b4:df:ab:53:13:aa:ab:
f5:66:ea:8d:72:14:90:a4:05:b4:f1:e2:d1:de:ed:
6a:07:a3:9e:81:96:4b:f4:59:cd:9d:8b:0b:74:7d:
ed:26:ff:6d:24:95:37:ef:0d:14:05:2c:4f:1d:9b:
9a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:38:DC:19:32:4D:CC:69:28:00:E9:8C:88:83:02:D9:F0:99:E7:76
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/3032A8E03CF311F18CBCCDABCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.251.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:67:e2:3e:b3:c9:b5:01:5e:5b:a2:86:f1:8d:13:98:bc:cd:
aa:d9:f7:f5:7b:0d:07:cb:dc:2c:28:89:67:93:72:0b:5e:0c:
6a:a9:35:87:9d:59:a2:04:51:fd:cc:dc:01:a9:3d:28:ee:a0:
0f:b9:b0:cd:eb:80:69:ec:c4:a4:c9:3b:a4:a4:4a:29:f7:92:
3c:fe:2f:d4:1c:7d:89:3e:d4:3b:a9:42:f9:c8:9e:5f:f6:19:
68:e0:40:80:32:0c:8a:6a:4d:f6:c0:b9:d8:f1:b8:4a:40:a8:
47:ab:73:af:04:3d:e0:12:41:18:ff:d0:c1:52:81:80:f3:6e:
e3:3f:5c:fc:8c:3b:16:31:5b:a2:01:14:6e:85:ae:a3:ea:df:
ea:fa:db:6f:31:ac:d6:16:32:09:f6:ef:86:b0:cf:0c:62:c9:
f7:a5:65:13:b4:a7:94:14:b4:2d:10:18:f2:95:81:f3:62:2d:
2e:3b:a5:43:db:d6:c2:74:c7:49:cd:4d:e4:85:69:be:73:fa:
39:4c:71:55:4e:f2:8c:a6:15:07:d5:f4:97:7c:21:97:24:2f:
94:da:37:e4:b1:bd:89:89:bc:cc:be:3a:3c:0f:1e:3b:ea:98:
34:bf:61:8a:c9:71:bb:5d:63:59:bc:18:2c:8f:25:6a:d8:5d:
6d:a6:ff:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 05:47:54 2026 by rpki-client