Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/4269F37C732311F19E728CBECE1D38B0.roa
File: 4269F37C732311F19E728CBECE1D38B0.roa (raw, json)
Hash identifier: oha2H7YaN/xFSfzK1IQv4HRmS1ZvPDBm4DKt3lofGfk=
Subject key identifier: 9C:94:F6:6D:BC:A4:4A:D4:2A:44:19:6F:86:3E:4D:39:92:EE:08:FD
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0C3B
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/4269F37C732311F19E728CBECE1D38B0.roa
Signing time: Sun 28 Jun 2026 18:57:50 +0000
ROA not before: Sun 28 Jun 2026 18:57:46 +0000
ROA not after: Wed 31 Dec 2036 18:57:46 +0000
asID: 834
IP address blocks: 165.49.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 01 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3131 (0xc3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Jun 28 18:57:46 2026 GMT
Not After : Dec 31 18:57:46 2036 GMT
Subject: CN=6a416eae-ed88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:94:f3:bf:c9:d4:63:a8:04:d2:9a:46:e1:f0:
61:68:d1:7b:47:b2:0c:92:f7:d2:87:04:06:d1:b3:
98:2f:11:c1:25:9d:92:f9:a6:0c:55:de:20:3a:e2:
55:72:6b:0c:b3:a9:c9:ae:06:9f:c4:c0:76:a2:9d:
5b:89:7e:01:1d:8c:eb:c9:5b:10:f5:1e:ef:2d:da:
2e:d1:2c:47:30:d9:5a:56:81:f9:d4:ce:4a:ba:54:
53:8c:13:65:3a:2c:b5:c0:18:19:11:a0:7b:8c:f1:
e3:a4:43:d7:59:e2:80:7a:f0:81:b2:2a:b2:38:47:
0f:7d:60:27:4b:ef:92:02:bb:9a:2c:54:1f:88:33:
24:9a:26:a0:77:98:d2:50:3d:b4:f5:d7:10:69:f1:
29:36:93:fe:fb:ce:4b:9d:dd:3f:1f:cb:a8:ef:3c:
15:d7:ce:ac:62:a2:65:9c:0d:5d:ce:1b:ad:c6:9e:
fd:b7:0d:3a:86:c2:80:20:85:91:02:66:80:f4:eb:
ec:cd:b5:73:65:aa:9b:d0:c1:3a:16:87:db:97:d0:
dc:b1:0e:a4:ce:93:b6:1d:2e:13:ce:b3:e4:d8:f5:
cd:84:a1:6c:49:76:43:3b:7c:b1:fa:58:90:aa:a8:
8d:3e:64:3e:18:ae:74:f8:12:4a:95:03:15:a3:64:
b8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:94:F6:6D:BC:A4:4A:D4:2A:44:19:6F:86:3E:4D:39:92:EE:08:FD
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/4269F37C732311F19E728CBECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.228.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:52:74:31:c4:65:fa:0d:7a:9b:83:22:6c:d5:29:1c:2e:c4:
50:77:66:a8:c2:57:29:32:e9:16:67:25:0c:9a:53:a1:d1:38:
83:e3:5d:ac:e0:7d:9f:28:34:b4:70:d0:7f:cd:5b:b9:0e:87:
51:84:55:3f:f8:7e:e6:74:65:34:8c:61:13:85:15:61:36:16:
e6:71:21:3f:40:de:13:65:0e:d8:4d:55:10:1b:04:ad:39:9e:
bd:72:a4:51:28:03:af:1b:e9:78:12:75:43:11:9d:06:fa:37:
dc:a3:c8:50:1f:00:c8:90:18:65:11:cc:97:b9:32:1d:e4:8c:
42:f7:09:c5:0e:ff:45:5c:31:af:37:a4:11:a7:66:08:f9:34:
03:7f:68:80:27:32:e5:75:f9:2b:9c:22:4d:5a:ae:df:07:d7:
89:61:6f:b0:2a:bb:d1:9b:7e:a8:55:aa:63:d2:f2:58:a7:f5:
15:b5:13:17:6d:4b:27:cf:d7:e4:1e:6a:09:cf:07:ae:27:05:
66:01:31:af:f6:e8:5b:33:e8:ec:d4:2b:ca:54:de:7b:91:c0:
7c:57:eb:37:a3:66:f9:49:e3:83:30:63:8c:46:ae:a3:c1:5d:
2e:93:39:5f:1c:4d:ec:9e:1b:80:69:53:7e:5d:83:1c:3d:4d:
71:41:e6:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:00:29 2026 by rpki-client