Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/3C008F748BFF11F1BD3C4CAACE1D38B0.roa
File: 3C008F748BFF11F1BD3C4CAACE1D38B0.roa (raw, json)
Hash identifier: FnFeUmPeXaReu29PjH0tV5ypI34szXcqyDqD4sMzlrg=
Subject key identifier: C6:C0:7D:D4:19:45:B9:DC:32:1B:41:37:F6:CB:A1:B0:A0:B7:99:F7
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0D19
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/3C008F748BFF11F1BD3C4CAACE1D38B0.roa
Signing time: Thu 30 Jul 2026 10:12:57 +0000
ROA not before: Thu 30 Jul 2026 10:12:53 +0000
ROA not after: Wed 31 Dec 2036 10:12:53 +0000
asID: 3320
IP address blocks: 165.49.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Aug 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3353 (0xd19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Jul 30 10:12:53 2026 GMT
Not After : Dec 31 10:12:53 2036 GMT
Subject: CN=6a6b23a9-e459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2e:e3:6c:8e:38:23:5b:fc:08:67:35:f2:a3:
05:50:61:09:ae:cb:48:86:72:da:57:d7:bf:78:ed:
71:eb:7e:1f:31:74:1c:cb:20:c2:c6:56:c2:ee:9a:
b0:49:9e:83:c2:77:19:fb:4b:6d:41:1e:96:95:aa:
6a:49:2a:53:69:58:fa:fb:ce:c4:72:4b:72:54:86:
2e:8d:8c:68:21:4d:5c:95:d0:f6:c0:ab:e5:ee:fa:
48:4d:d3:59:65:eb:01:f2:f1:c5:05:14:8c:ed:7e:
e0:1a:f3:0d:23:8b:4e:85:ee:54:af:3d:2b:71:b0:
fa:e8:fc:bf:7c:d4:55:aa:62:8b:98:0a:9a:ba:2a:
b2:ca:31:11:65:13:5c:c0:e9:70:77:94:57:13:7d:
88:08:2f:55:22:0f:db:3b:e5:72:3f:3c:17:1a:8b:
b4:6c:08:35:ed:8a:97:93:28:bb:16:c2:45:be:45:
65:91:fa:23:ba:fe:48:b5:2f:f9:eb:74:ac:c9:1f:
5b:3b:fc:79:d8:cb:67:bf:db:90:2a:f0:54:8f:ae:
54:a8:0b:cb:c6:e7:f9:07:d6:4b:37:04:ba:d3:b4:
03:fc:a3:65:23:23:dd:d9:ee:85:40:72:98:2a:2b:
cc:f4:09:7f:f1:24:42:d0:c1:21:21:a7:57:49:f4:
cc:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:C0:7D:D4:19:45:B9:DC:32:1B:41:37:F6:CB:A1:B0:A0:B7:99:F7
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/3C008F748BFF11F1BD3C4CAACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.107.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:15:52:92:8a:99:22:2b:08:d2:a7:7c:bc:14:48:73:fd:ea:
d8:cd:78:ca:7e:01:90:11:ed:d2:9a:60:7d:a6:14:c5:59:0e:
e8:00:87:61:c1:fe:9e:a7:dd:6b:7c:5d:75:aa:68:06:1b:4a:
b7:97:aa:6e:c8:8b:71:ac:a4:78:c5:7f:05:a0:93:7e:a5:aa:
4a:db:db:aa:09:b1:e4:29:89:a9:1a:a5:e3:ba:a6:ca:dd:e0:
cb:22:7f:7a:48:5b:46:6b:81:c7:83:c8:83:69:75:c9:96:a8:
59:4a:4a:df:da:ac:1f:e9:72:c8:b5:07:dd:d9:07:ad:51:cb:
49:a2:1b:7c:39:9b:34:cb:e9:c3:13:06:bd:6b:de:ee:a6:5d:
ce:f6:74:dc:e3:e4:f7:9c:e4:07:31:2f:47:65:88:5f:93:d7:
70:4b:19:6a:f3:5a:45:86:a6:1f:4e:d8:1a:44:d7:3e:4f:02:
a4:70:06:52:bf:00:8c:fa:53:72:25:d0:fb:f2:45:e8:b5:47:
e6:1e:2d:57:16:bb:2f:a0:22:7e:10:5d:cc:76:83:68:20:36:
23:5d:ea:f3:9b:f2:20:d6:08:42:f8:16:d9:3f:22:02:e8:67:
56:52:36:fb:98:b9:da:1f:75:ab:41:0c:75:52:65:68:cf:c2:
25:90:65:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 10:19:48 2026 by rpki-client