Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/3FC0542E811D11F19A9A4DC1CE1D38B0.roa
File: 3FC0542E811D11F19A9A4DC1CE1D38B0.roa (raw, json)
Hash identifier: Lc2Zda/3uNJERe3kBezyf7blgD0kZolq6TVvHz8tSik=
Subject key identifier: 62:62:8B:A6:6A:5E:F2:90:53:38:85:B2:68:AE:D9:EE:7E:C4:2B:43
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0CEF
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/3FC0542E811D11F19A9A4DC1CE1D38B0.roa
Signing time: Thu 16 Jul 2026 13:50:05 +0000
ROA not before: Thu 16 Jul 2026 13:50:01 +0000
ROA not after: Wed 31 Dec 2036 13:50:01 +0000
asID: 13347
IP address blocks: 165.49.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3311 (0xcef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Jul 16 13:50:01 2026 GMT
Not After : Dec 31 13:50:01 2036 GMT
Subject: CN=6a58e18d-a6b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6a:99:14:a6:1b:f3:4c:09:d6:9c:79:dc:35:
8c:38:97:6f:c8:34:f7:f6:f2:89:28:60:9c:02:73:
45:c7:22:a9:8e:31:66:a2:55:56:29:45:cd:d0:1e:
0c:82:3f:36:ff:f6:92:10:ff:a8:dd:94:8c:70:60:
f4:46:96:bc:11:6d:03:c9:b1:6b:58:b3:7b:cd:c1:
37:be:41:96:44:44:e6:78:2a:25:f6:2a:dc:3d:bd:
46:4a:38:45:38:82:6b:30:cc:a2:94:57:6f:63:ce:
6e:d0:d2:2b:df:81:6b:79:ca:c9:e6:fc:bd:36:8d:
18:52:5f:96:b3:f8:59:25:1c:df:30:1f:d6:cd:1f:
84:cd:6c:a3:f8:99:fb:45:44:62:d3:a8:90:c9:6f:
6d:e7:6a:98:4e:e8:03:f8:30:5f:dd:f2:b3:5d:96:
02:ac:63:1e:77:0b:c8:ad:a1:47:6d:78:8c:75:39:
a6:d5:f6:b2:38:95:68:d2:19:7d:52:95:20:71:cd:
39:28:69:90:24:ff:9b:f1:9d:50:5d:4a:a1:52:e7:
61:cb:73:93:bc:59:bc:5c:c7:bf:63:98:c4:f4:2c:
38:a4:2c:33:ca:25:c6:97:4a:d3:81:96:1c:a4:41:
c0:7b:9b:91:7d:9e:be:fa:21:53:ad:57:25:9b:92:
18:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:62:8B:A6:6A:5E:F2:90:53:38:85:B2:68:AE:D9:EE:7E:C4:2B:43
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/3FC0542E811D11F19A9A4DC1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.95.0/24
Signature Algorithm: sha256WithRSAEncryption
05:a4:36:e6:48:4c:85:df:0c:6d:61:28:d8:07:ed:93:cc:da:
62:39:a0:02:98:f6:ed:e9:85:6c:79:99:16:3f:26:16:43:e6:
06:1b:6e:03:4c:bf:91:2d:c1:0c:c7:54:74:4b:1e:79:24:df:
48:09:b4:9a:c2:1c:af:9e:3a:59:73:45:bb:bd:1e:ae:bc:5f:
9b:28:80:2f:1e:f3:c2:71:42:40:69:0c:75:de:3f:73:5a:65:
23:e2:2a:bc:a2:1c:1d:ac:be:26:51:28:f0:fa:e1:1c:3c:f8:
78:17:d2:d9:60:6b:dc:b2:08:fd:e3:f2:a3:dc:d1:7b:7e:f9:
58:b6:ef:67:43:37:72:d9:c5:86:05:84:0d:f8:00:7d:72:39:
75:8f:4d:3c:70:2f:7a:a2:ce:21:93:1e:f7:71:cf:4c:18:e3:
94:92:fd:85:0c:06:cc:df:f7:1d:82:82:af:73:a2:0f:4f:d5:
a5:dd:34:79:4f:52:b0:87:88:28:30:54:b6:f1:03:e8:23:24:
1f:85:88:a2:b5:9a:52:f5:59:20:85:e5:c2:a4:bb:3c:16:56:
ea:f3:d9:46:97:f2:60:a6:0e:ac:32:f3:1e:6e:23:a2:ac:12:
8c:c8:55:15:90:fe:98:5b:8c:4d:b2:e2:15:42:89:1d:92:63:
46:b1:02:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:35:02 2026 by rpki-client