Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/39A066E8811C11F1BA888EBCCE1D38B0.roa
File: 39A066E8811C11F1BA888EBCCE1D38B0.roa (raw, json)
Hash identifier: evNJjCSMVrPkUxE0cfCF4JDoD0nQ8yini+nQWgQUZpM=
Subject key identifier: 36:59:B3:10:66:99:FC:8D:E1:43:D0:37:31:5C:3E:82:9A:4D:86:B5
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0CC9
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/39A066E8811C11F1BA888EBCCE1D38B0.roa
Signing time: Thu 16 Jul 2026 13:42:45 +0000
ROA not before: Thu 16 Jul 2026 13:42:41 +0000
ROA not after: Wed 31 Dec 2036 13:42:41 +0000
asID: 5650
IP address blocks: 165.49.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Jul 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3273 (0xcc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Jul 16 13:42:41 2026 GMT
Not After : Dec 31 13:42:41 2036 GMT
Subject: CN=6a58dfd5-af06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:91:e3:10:22:fe:df:06:4d:dd:41:42:7c:34:
3c:89:ef:39:50:04:75:a8:1f:13:90:87:62:50:b2:
e7:5d:c4:9e:2f:c2:94:0c:78:68:4e:49:58:7c:6a:
d9:47:63:7d:39:88:9e:d5:5b:fa:7c:d2:59:b8:fe:
0f:13:82:67:a9:f5:44:d4:ee:fa:f5:b1:58:e8:b7:
b2:87:fd:7d:12:eb:54:ed:43:f8:52:32:fd:fb:c1:
10:df:77:f9:92:6a:89:0d:bd:cb:8f:bc:95:a2:d8:
f5:b1:5e:8c:6f:9d:be:df:c1:d7:9c:02:c2:5d:de:
9a:38:5c:1c:56:2d:47:90:73:c9:92:f2:eb:e2:48:
b0:27:0e:c7:44:92:ab:b8:14:34:d3:2b:d4:64:7b:
61:57:07:f3:6a:7d:bf:d7:ef:65:2e:4a:e6:1a:c3:
27:30:83:0a:5a:11:d8:5c:72:3d:35:c0:3d:b7:a0:
b3:c0:0d:a7:41:b0:d0:66:87:46:fe:b5:c2:80:36:
1b:58:c3:9d:89:24:33:32:fb:93:66:d2:42:60:33:
14:fc:73:81:aa:1d:50:8d:56:b0:c2:6b:eb:72:91:
95:58:b0:76:2d:7b:d4:3c:80:f4:67:73:35:5e:8f:
85:7c:2d:67:84:0e:64:70:f2:c1:44:5e:a2:64:99:
ed:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:59:B3:10:66:99:FC:8D:E1:43:D0:37:31:5C:3E:82:9A:4D:86:B5
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/39A066E8811C11F1BA888EBCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.101.0/24
Signature Algorithm: sha256WithRSAEncryption
85:59:58:f0:ea:7a:9b:20:e8:03:25:89:74:7f:43:5c:90:f6:
b5:95:51:4d:71:e6:a3:4b:c3:41:08:ba:70:5c:f5:6d:ae:a7:
96:51:c7:ab:1e:76:0d:ac:06:5d:b9:bd:de:94:d1:9e:61:c2:
1f:29:1e:27:4f:5a:a0:37:9d:c4:d9:6f:24:b8:20:3a:d0:0d:
e0:fe:82:2c:81:c2:9e:d5:a5:4c:57:7c:18:2d:2b:09:14:0f:
86:98:89:3b:26:62:fc:a5:1c:d4:00:b8:16:a6:f1:04:a8:fd:
b9:39:2f:83:53:72:b1:a1:c6:b7:15:4d:94:5a:51:d9:ac:a6:
e3:92:9c:0c:93:18:49:d2:39:98:84:82:b8:3f:c2:42:7f:41:
5f:04:34:6a:c2:90:e1:5a:9f:15:dc:98:61:03:ec:54:07:a2:
7f:cc:fd:07:42:f9:f4:89:83:95:aa:14:b0:43:91:74:57:35:
39:d3:92:b8:94:6c:d6:0d:d5:78:03:62:8e:ac:69:f0:09:2d:
ae:4b:9e:2e:d1:bd:5b:3f:c7:5f:65:77:33:33:c3:13:1a:83:
9e:8e:da:f7:1e:7a:e8:36:95:83:cc:d5:2b:0c:56:be:24:26:
fb:35:37:a6:23:f5:7f:e0:b7:b0:76:1c:79:83:fd:9c:97:a0:
55:32:ae:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 13:47:22 2026 by rpki-client