Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/3C842DBE802B11F1A6A291BDCE1D38B0.roa
File: 3C842DBE802B11F1A6A291BDCE1D38B0.roa (raw, json)
Hash identifier: QkzzgancxWo7nbdoX4UpA7T1qVShQpYk0Jv/QyCeyM8=
Subject key identifier: 84:83:30:41:F8:4A:75:16:C4:73:D0:A4:93:68:AF:8B:FA:35:37:36
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0C6B
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/3C842DBE802B11F1A6A291BDCE1D38B0.roa
Signing time: Wed 15 Jul 2026 08:57:42 +0000
ROA not before: Wed 15 Jul 2026 08:57:37 +0000
ROA not after: Wed 31 Dec 2036 08:57:37 +0000
asID: 5650
IP address blocks: 165.49.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Jul 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3179 (0xc6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Jul 15 08:57:37 2026 GMT
Not After : Dec 31 08:57:37 2036 GMT
Subject: CN=6a574b85-9a68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:76:92:41:59:45:be:02:a0:24:c3:a2:df:73:
9b:af:7f:3b:14:a1:46:b9:2d:37:93:3e:b9:fb:3b:
e1:62:4d:e9:2f:00:72:db:e3:e3:ce:e8:51:e7:be:
98:6a:ab:83:22:d9:d8:ba:33:2c:a7:40:b0:a3:f4:
fa:97:b5:ec:2f:b4:de:61:15:e0:3b:5d:31:01:1e:
d4:76:fc:d1:a8:6d:0e:94:70:2f:d5:d7:04:67:73:
63:f3:e2:c0:93:d2:d6:1b:db:95:46:39:b7:df:2c:
eb:d2:40:0f:d0:0a:12:d1:c6:63:7b:81:ae:d9:86:
12:2f:6a:cf:59:ea:b0:58:60:25:66:77:30:51:6f:
39:1b:c5:5c:0a:27:fd:f3:a3:9b:a6:63:42:7a:9f:
26:b6:41:48:a5:ad:71:75:f3:6c:c6:a0:df:be:6b:
a0:e4:8f:0a:64:b6:e3:d4:64:c0:f6:3c:26:f3:0f:
e6:2a:fd:0e:29:b3:4b:d9:83:09:d3:56:e5:8f:e3:
38:d0:c8:b4:0a:58:a7:58:ac:ee:63:1d:0b:1e:76:
10:98:ca:0e:f1:54:61:4b:31:20:d6:91:9a:b9:30:
5c:bd:9c:8e:23:05:9f:0f:57:fd:48:eb:df:51:4c:
5c:30:46:e4:d5:30:76:79:0e:db:da:59:e4:1b:05:
a1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:83:30:41:F8:4A:75:16:C4:73:D0:A4:93:68:AF:8B:FA:35:37:36
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/3C842DBE802B11F1A6A291BDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.120.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:0b:a8:d1:4d:df:01:16:92:e9:13:cd:26:11:ef:bd:68:cb:
ae:9e:5d:19:2c:82:c8:ff:f4:45:70:aa:ba:3c:4c:68:4d:10:
a9:21:40:15:fc:20:89:87:2d:b6:15:e9:53:72:6e:b0:0d:6e:
32:b0:df:9e:65:8d:5b:ea:f4:31:d1:02:80:b9:99:62:5f:c8:
bc:20:81:1e:56:85:70:8b:3e:ad:4c:f2:ee:82:49:7a:7d:bd:
33:c2:cb:b6:26:3e:77:5a:85:ed:96:b9:6b:bf:79:55:44:a6:
f0:7b:a0:ba:ec:b8:5f:9f:ec:f4:1e:28:db:26:44:a0:56:e0:
6d:5e:4b:01:14:d9:6d:42:8b:a3:5a:ca:92:45:b6:45:b5:29:
b9:f7:15:f7:5f:c5:e0:a4:51:b1:9a:c0:d6:00:0a:47:3a:24:
2a:3c:9b:2d:ff:90:08:12:0d:87:00:99:65:c6:7f:e7:49:8a:
8b:40:63:62:05:34:df:de:25:2e:67:01:7f:d8:53:7f:9d:a4:
2f:49:71:c7:7b:5e:17:18:e7:12:15:15:69:be:95:d5:7f:d5:
0e:c4:24:0a:2e:62:35:32:16:8c:71:76:14:42:f3:08:5e:67:
30:29:1e:6a:3d:b0:b8:19:d7:9f:1f:57:4c:a9:1e:5c:73:7b:
ba:6d:71:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 13:47:14 2026 by rpki-client