Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/45C91E7E8BFD11F1897AEC1DCF1D38B0.roa
File: 45C91E7E8BFD11F1897AEC1DCF1D38B0.roa (raw, json)
Hash identifier: 8qetCWMWKi0KDQbFkM4EKQTbStrLfjKvN47xy8U9xMg=
Subject key identifier: C5:26:E5:44:5C:41:EB:C8:B8:7F:88:8D:0F:BB:0B:E5:EE:B6:28:FB
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0D15
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/45C91E7E8BFD11F1897AEC1DCF1D38B0.roa
Signing time: Thu 30 Jul 2026 09:58:54 +0000
ROA not before: Thu 30 Jul 2026 09:58:50 +0000
ROA not after: Wed 31 Dec 2036 09:58:50 +0000
asID: 402265
IP address blocks: 165.49.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Aug 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3349 (0xd15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Jul 30 09:58:50 2026 GMT
Not After : Dec 31 09:58:50 2036 GMT
Subject: CN=6a6b205e-c950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6c:09:c2:aa:05:c3:bd:fc:b2:da:ed:28:72:
2d:86:29:f5:16:ca:d5:99:97:27:66:3a:eb:19:70:
97:97:68:a0:ca:ea:a4:79:f1:eb:ec:20:d1:b1:25:
78:dd:21:98:27:86:07:34:e3:4f:60:94:2b:8a:4c:
01:d9:4d:bf:2d:3b:8a:c9:9b:a9:77:bf:7d:46:52:
3f:da:c1:2e:03:60:b5:e1:a7:10:28:d8:e3:76:3b:
7a:8a:a3:29:0b:f8:68:5c:7e:87:a0:35:35:ea:f3:
99:38:5b:f5:ff:25:77:91:04:1f:40:2c:00:e7:1e:
4d:f9:16:06:40:1f:14:5b:30:20:54:d5:5a:99:bb:
41:e3:e0:2b:ad:6a:c7:ba:f9:16:ea:ed:33:67:31:
f9:83:86:a2:e6:c2:65:32:e4:85:fe:2e:e4:8e:6f:
d7:63:10:9e:4f:0e:0f:26:37:92:05:ea:ad:fa:80:
ad:e8:3e:0f:c3:4b:f9:6b:27:f0:cf:5f:6e:6e:d1:
54:91:e2:91:61:b9:13:69:61:67:a0:7d:cd:e1:aa:
50:9d:af:62:ac:70:41:31:b3:08:e5:42:fd:55:4c:
03:5e:a8:c0:3b:00:54:e5:28:58:48:24:72:e9:df:
3d:59:e6:98:f8:56:db:65:28:45:f3:bd:f1:37:2b:
a5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:26:E5:44:5C:41:EB:C8:B8:7F:88:8D:0F:BB:0B:E5:EE:B6:28:FB
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/45C91E7E8BFD11F1897AEC1DCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.238.0/24
Signature Algorithm: sha256WithRSAEncryption
07:32:62:47:0e:7b:aa:11:df:12:6c:9b:37:81:84:9f:09:74:
b6:6f:a7:09:51:fb:b8:cb:e7:7a:07:7a:bf:08:36:21:e6:51:
eb:2c:65:a7:3b:8d:4e:19:f0:5b:ab:4d:9e:9a:29:8e:be:85:
c3:f0:cb:54:36:d9:3e:de:7c:f7:74:dd:be:c1:ec:f1:d8:5a:
87:78:ca:05:1c:64:dc:46:85:ab:a8:91:c8:5b:96:2f:39:18:
33:90:4d:5f:59:1b:aa:41:a0:c2:39:05:3a:35:da:e1:43:ec:
76:52:7d:1a:21:e4:6e:db:0b:b1:e5:f9:db:1f:6c:f5:ac:3d:
60:67:54:fa:f7:45:2f:7b:1d:fb:9b:c4:71:e4:6c:d0:56:21:
bd:26:8b:1b:80:f2:90:43:00:48:0a:af:99:3a:b5:cf:fd:72:
5d:70:2a:39:c4:f4:3e:f5:9b:2f:f2:2c:3e:76:99:97:4c:0b:
aa:92:e1:35:5a:fb:31:3b:e4:57:76:5f:d7:72:72:c0:a9:e9:
0a:4e:8d:a7:b0:58:46:04:16:78:d0:c6:c6:53:35:2c:cf:92:
f6:38:2f:20:cb:2f:cb:1e:ba:13:be:9d:04:8d:b1:86:1a:66:
36:c3:5e:5d:91:27:66:c5:7d:5a:04:67:d1:d8:90:bf:14:44:
56:2a:76:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 10:17:26 2026 by rpki-client